Privacy Policy

Effective Date: April 1, 2025

MoneyVoice, PBC ("we," "us," or "our"), the parent company of Carrotmob, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

1. Information We Collect

1.1 Personal Information

We may collect personal information, such as:

• Name and email address
• Payment details (processed securely through Stripe)

1.2 Automatically Collected Information

We automatically collect certain information when you visit our website:

• Device information (type, operating system, browser)
• IP address and approximate location data
• Usage data (pages visited, time spent, interactions)
• Cookies and similar tracking technologies (see Section 2)

1.3 Participating Businesses

When you use your gift cards with participating businesses, those businesses may separately collect personal information. We do not collect or receive personal information about you from participating businesses. Please refer to the privacy policies of participating businesses when using your gift cards.

2. Cookies and Tracking Technologies

We may use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze website usage and performance
• Enable certain website functionalities

If implemented, you would be able to control cookies through your browser settings. However, disabling certain cookies may limit website functionality.

3. How We Use Your Information

We use your personal information to:

• Process your gift card purchase and facilitate campaign outcomes
• Send gift cards to the email address you provided at checkout
• Check whether you are a member of the Hijack Capitalism community
• Respond to your inquiries and provide customer support
• Email you about future campaigns and offers (unless you unsubscribe)
• Comply with legal obligations and protect against fraud
• Analyze and improve our services

4. Information Sharing

4.1 Participating Businesses

We will only share your email address with participating businesses if you opt in via a checkbox during checkout. We never share payment information or names with participating businesses.

4.2 Service Providers

We work with trusted service providers who help us operate our business:

• Stripe for payment processing (PCI-compliant)
• Email service providers for communications
• Analytics providers to understand website usage
• Cloud hosting providers for data storage
• Data integration and management providers to automate workflows and organize data

4.3 Legal Requirements

We may disclose information:

• In response to valid legal requests
• To protect our rights or property
• To prevent fraud or abuse
• To comply with applicable laws

5. Data Security

We implement industry-standard security measures, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments
• Employee training on data protection

In the event of a data breach that compromises your personal information, we will notify you in accordance with applicable laws.

6. Data Retention

We retain personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

You may request deletion of your personal information at any time by contacting us.

7. International Data Transfers

We may transfer your information to countries outside your residence location. When we do, we ensure appropriate safeguards are in place:

• Standard contractual clauses
• Privacy Shield certification (where applicable)
• Data processing agreements
• Other legally acceptable mechanisms

8. Your Privacy Rights

8.1 General Rights

You have the right to:

• Access your personal information
• Correct inaccurate data (with the exception that we will not email a gift card to an email address different from the email address entered at checkout)
• Request deletion of your data
• Opt out of marketing communications
• Withdraw consent for specific uses

8.2 California Residents (CCPA Rights)

California residents have additional rights:

• Know what personal information we collect and how we use it
• Request a copy of your personal information
• Request deletion of your personal information
• Opt out of the sale of personal information (note: we do not sell personal information)
• Non-discrimination for exercising these rights

To exercise your CCPA rights, contact us or use our website tools.

8.3 European Union Residents (GDPR Rights)

EU residents have specific rights:

• Data portability
• Restriction of processing
• Objection to processing
• Lodge complaints with supervisory authorities

9. Children's Privacy

We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be effective upon posting to our website. Continued use of our services constitutes acceptance of the revised policy.

11. Contact Us

Privacy Officer: info@carrotmob.org, P.O. Box 93217 Pasadena, California 91109

For EU Residents: EU Representative: TBD; Data Protection Officer: TBD

12. Additional Information

12.1 Legal Basis for Processing (GDPR)

We process personal data under these legal bases:

• Contract performance
• Legal obligations
• Legitimate interests
• Consent (where specifically requested)

12.2 Automated Decision Making

We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.

‍