Dueback — Privacy Policy

Effective date: October 11, 2026 Version: Alpha launch Operator: Dueback ("we," "us," "our")

1. Overview

Dueback negotiates bills on your behalf and verifies savings against your bank transaction data. Doing that requires access to sensitive financial information. This policy explains what we collect, why, how we protect it, and what rights you have.

2. Information We Collect

a. Information you provide directly

Contact information: email address and any other contact details you provide.
Case information: descriptions of bills or expenses, merchant names, amounts, and billing cadence you ask us to negotiate.
Payment information: card details for fee collection, processed by our payment provider (Stripe). We do not store full card numbers on our servers.

b. Information from Plaid (bank connection)

When you connect your bank account(s) via Plaid, we receive:

Account information: account names, types, and balances (via Plaid Auth).
Transaction data: transaction history for connected accounts, including merchant names, amounts, dates, and categories (via Plaid Transactions).
Recurring transaction data: identified recurring charges (via Plaid Recurring Transactions), used to detect negotiable bills.

We access only the data needed to establish baselines, verify savings, and monitor for the reversion guarantee. We do not access investment holdings, liabilities, or other Plaid products beyond those listed above.

c. Information collected automatically

Usage data: API interactions related to your cases (e.g., case status checks), device and connection metadata necessary for security and fraud prevention. We do not use advertising trackers.
AI agent interactions: when you use Dueback through an AI agent (skill or MCP), we log the fact of the interaction and the coarse category of the expense — never the raw text of your bills, which may contain personal information.

3. How We Use Your Information

To provide the service: establishing baselines, negotiating with providers, verifying savings, and collecting earned fees.
To monitor the reversion guarantee: checking that negotiated rates persist during the 30-day guarantee window.
To improve the service: developing negotiation strategies, training models, and publishing aggregated case studies — in all cases using only de-identified data (see §5).
To communicate with you: case updates, verification results, review requests, and service notices. By using the service you consent to receive transactional communications electronically.
To protect our rights: fraud prevention and detection, abuse investigation, dispute resolution, collections, and enforcement of our Terms.
To comply with legal obligations: tax reporting, regulatory requirements, and responses to lawful process.

We do not sell your personal information. We do not use your bank data for advertising or share it with data brokers.

4. How We Share Your Information

We share information as necessary to operate the service:

Recipient	What they receive	Why
Plaid	Your bank login credentials (entered on Plaid's secure interface, never visible to us)	To establish the bank connection
Stripe	Payment method details, fee amounts	To process fee collection
The merchant/provider	Your name, account identifiers, and billing details relevant to the specific negotiation you authorized	To negotiate on your behalf
AI platform providers	Only what your agent sends us via API	When you use Dueback through an agent
Service providers	Limited data under contractual confidentiality obligations	Hosting, infrastructure, communications, analytics, and fraud-prevention vendors

We do not share your bank transaction data with merchants beyond what is necessary for the specific negotiation (typically: that you are a customer and your current rate). We do not share personal information with third parties for their own marketing purposes.

Business transfers. In connection with a merger, acquisition, reorganization, or sale of all or part of our assets, your information may be transferred to the successor entity, which will remain bound by this policy's protections or a substantially similar policy.

De-identified data. Once data is de-identified (all direct and indirect identifiers removed such that it cannot reasonably be re-linked to you), it is no longer personal information. We may use, share, and retain de-identified data indefinitely for any lawful business purpose, including strategy development, model training, research, and publication of aggregated statistics and case studies. You grant us a worldwide, royalty-free, irrevocable license to such de-identified data.

5. Data Retention

Personal data (contact info, case details, bank data): retained while your account is active and for no less than 7 years and up to 10 years thereafter for tax, legal, fraud-prevention, and dispute-resolution purposes, then deleted or de-identified. We may de-identify data in lieu of deleting it at any time.
De-identified training corpus: retained indefinitely. De-identification removes names, account numbers, and other identifiers before data enters the corpus; it cannot reasonably be re-linked to you.
Plaid access tokens: deleted when you revoke access or close your account.
Legal holds. If data is subject to a legal hold, fraud investigation, or pending dispute, we will retain it until the matter is resolved, regardless of any deletion request.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access a copy of the personal information we hold about you.
Correct inaccurate information.
Delete your personal information — subject to our legal retention obligations under §5. We may decline or delay deletion where retention is required for tax, legal, fraud-prevention, or dispute-resolution purposes, or where the request would impair our ability to enforce our Terms.
Revoke Plaid bank access at any time via your bank or Plaid's portal. Note: revoking during an active case affects verification and the reversion guarantee (see Terms of Service §11).
Opt out of marketing communications. Opt-out requests are processed within 45 days on stored data. We do not respond to browser "do not track" signals.

To exercise these rights, contact support@dueback.co. We will respond within 45 days.

7. Security

We protect your information with:

Encryption in transit (TLS) and at rest.
API keys stored as irreversible hashes (never in plaintext).
OAuth tokens with short expiry and rotation.
Database access restricted to the service; no direct public exposure.
Regular review of access logs.

No system is perfectly secure, and we cannot guarantee that unauthorized access will never occur. You acknowledge that no method of transmission or storage is completely secure, and you assume the risk of unauthorized access to your information. We are not responsible for breaches of third-party systems, including Plaid, Stripe, or your financial institution. Our liability for security incidents is governed by the limitation-of-liability provisions in our Terms of Service. In the event of a data breach affecting your personal information, we will notify you as required by law.

8. Children's Privacy

Dueback is not intended for users under 18, and our Terms require users to be at least 18. We do not knowingly collect information from children. If we learn we have collected information from a child, we will delete it.

9. International Transfers

Our servers are currently located in Falkenstein, Germany (Hetzner). By using the service you consent to the processing and storage of your information in the jurisdictions where we operate, which may have different data-protection laws than your jurisdiction.

10. Changes to This Policy

We may update this policy at any time by posting the revised policy. Changes take effect on the posting date. It is your responsibility to review this policy periodically. Your continued use of the service after changes take effect constitutes your acceptance of the revised policy. We are not obligated to provide individual notice of changes.

11. Contact

Privacy questions or requests: support@dueback.co