Privacy Policy

LootSaver LLC (“Company,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the LootSaver mobile application, website, and related services (collectively, the “Service”).

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information You Provide

• Account registration details (e.g., email, password)
• Financial and personal information you manually enter (e.g., goals, bills, notes)
• Communications with us (e.g., support requests, feedback)

Financial Data (via Plaid)

When you connect financial accounts, we receive data from Plaid, which may include:

• Account information (balances, account type, masked account numbers)
• Transaction history and merchant details
• Categorization and metadata associated with transactions
• Other financial data made available by your financial institution

Important: We do not receive or store your banking credentials. Authentication is handled directly by Plaid.

Automatically Collected Information

• Device information (model, OS, identifiers)
• IP address and approximate location (city/state level)
• Usage data (features used, interactions, session duration)
• Crash logs and performance diagnostics

AI & Behavioral Data

• Interactions with insights, recommendations, and Focus items
• Engagement with financial guidance and planning features
• Behavioral patterns derived from financial activity

This data is used solely to:

• improve system performance
• refine recommendations
• enhance user experience

2. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Generate financial insights, projections, and recommendations
• Personalize your experience
• Improve our models, analytics, and system performance
• Detect, prevent, and investigate fraud or misuse
• Communicate with you (service updates, support, security notices)
• Comply with legal and regulatory obligations

3. How We Share Your Information

We do not sell your personal or financial data.

We may share your information with:

Service Providers

• Plaid – financial data aggregation
• Amazon Web Services (AWS) – infrastructure, storage, and processing

We may also use trusted vendors for analytics, crash reporting, and performance monitoring, as described in Section 12.

All service providers are contractually required to:

• protect your data
• use it only for authorized purposes

Legal Requirements

We may disclose your information if required to:

• comply with applicable law
• respond to legal process (e.g., subpoenas, court orders)
• protect rights, safety, and security

Business Transfers

If the Company is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

Aggregated / De-Identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you.

4. Data Storage and Security

Your data is stored and processed in the United States using secure infrastructure.

We implement industry-standard safeguards, including:

• encryption in transit and at rest
• access controls and authentication mechanisms
• monitoring and logging

However, no system is completely secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information:

• For as long as your account is active
• As necessary to provide the Service
• As required to comply with legal obligations

When you delete your account:

• Personal data is deleted or anonymized
• Some data may be retained for:
• legal compliance
• fraud prevention
• system integrity

Backup data is deleted within a reasonable timeframe.

6. Your Rights and Choices

You may:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Disconnect financial accounts (via Plaid)
• Opt out of certain data uses where applicable

To exercise your rights, contact: anthony.hopkins@lootsaver.com

We may require identity verification before fulfilling requests.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Request access to personal data we collect
• Request deletion of your personal data
• Know what categories of data are collected and how they are used

We do not sell personal information.

7. Third-Party Links and Services

The Service may link to third-party services. We are not responsible for their privacy practices.

We encourage you to review their policies.

8. Children’s Privacy

The Service is not intended for individuals under 18 years of age.

We do not knowingly collect personal data from children.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

We will notify users of material changes via:

• in-app notifications
• email

Continued use of the Service constitutes acceptance of the updated policy.

10. Contact Information

LootSaver LLC 204 Hilton Head Dr Benton, LA 71006 Email: anthony.hopkins@lootsaver.com

11. Do Not Track Signals

Some browsers and devices include a “Do Not Track” (“DNT”) feature that signals a preference not to be tracked across websites.

At this time, the Service does not respond to Do Not Track signals.

We limit tracking to what is necessary to operate, secure, and improve the Service.

12. Analytics and Monitoring Tools

We may use third-party analytics and monitoring tools to understand how users interact with the Service, improve performance, and identify issues.

These tools may collect:

• usage patterns
• device and performance data
• interaction events within the Service

All analytics providers are contractually required to:

• protect your information
• use it only for service-related purposes

We do not use analytics tools to sell or broker your personal data.

13. Cookies and Similar Technologies (Web Only)

If you access the Service via a website, we may use cookies and similar technologies to:

• maintain sessions
• remember preferences
• analyze usage
• improve performance

You can control cookies through your browser settings. Disabling cookies may affect functionality.

We do not use cookies for third-party advertising or data resale.

14. International Users

The Service is intended for users located in the United States.

If you access the Service from outside the United States, you acknowledge that:

• your information will be transferred to and processed in the United States
• U.S. data protection laws may differ from those in your jurisdiction

By using the Service, you consent to this transfer and processing.