Privacy Policy

Payee Watch is operated by Dawn Jacques. Contact us at CareCompassForYou@gmail.com. Address: 13985 SW 34TH Terrace Rd, Ocala, Florida 34473.

Account information (when you sign in with Google):

• Your email address
• Your name and profile picture (from Google)
• A unique Payee Watch user ID we assign you

Beneficiary and financial information (only what you enter):

• The beneficiary's name and monthly SSI/SSDI benefit amount
• Expenses, categories, dates, descriptions, and optional receipt images
• Recurring bills, savings goals, and budget limits
• Watcher (family / case manager) relationships and their sign-off notes

Payment information (handled by Stripe, not us):

• We receive from Stripe a checkout session ID, a paid/unpaid status, and the last-four of the card used — nothing else
• Full card numbers, CVV, and expiration dates never touch our servers

Technical information (automatically collected):

• IP address, browser type, and access timestamps for security
• Session cookies to keep you signed in

• To provide the Service you signed up for
• To generate your PDF reports from the data you entered
• To let watchers (family / case managers) see the transparency dashboard you invited them to
• To process payments and prevent fraud
• To send transactional notifications (receipts, digest emails when configured)
• To secure the Service and diagnose issues

We do not sell your data. We do not share your data with advertisers. We do not use your data to train AI models.

We share limited data with the following service providers, each bound by their own privacy commitments:

• Google — for sign-in only. We receive your basic profile from Google; Google never sees your beneficiary data.
• Stripe — for payment processing. Stripe sees only your email and the amount you paid.
• Emergent — our hosting provider (MongoDB storage, object storage for receipts, server infrastructure).
• Watchers you invite — anyone you send a watcher invite link to can see the transparency dashboard (read-only) once they sign in. You control this by creating, sharing, or revoking invite links.

We may disclose data if required by law (subpoena, court order) or to protect the rights, safety, or property of Payee Watch, our users, or the public. We will notify you unless legally prohibited.

• All connections between your browser and our servers use HTTPS/TLS
• Passwords are handled by Google — we never store one
• Session tokens are HTTP-only cookies (not readable by JavaScript)
• Receipts and payment data are stored in access-controlled cloud infrastructure
• Access to production data is limited to authorized personnel

No online service can promise 100% security. If we learn of a breach affecting your data, we will notify you within 72 hours as required by law.

Regardless of where you live, you have the right to:

• Access — request a copy of the data we hold about you
• Correct — update any inaccurate data (most editable directly in the app)
• Delete — request full deletion of your account and data
• Port — export your data in a machine-readable format (JSON / CSV)
• Object — opt out of any non-essential data processing
• Withdraw consent — at any time, for anything that requires consent

To exercise any of these, email CareCompassForYou@gmail.com from the address on your account. We respond within 30 days.

We keep your data while your account is active. When you delete your account we remove personal data within 30 days, except where longer retention is required by law (e.g., payment records for tax reporting are retained for 7 years). Anonymized, aggregated statistics may be retained indefinitely.

Payee Watch is not intended for use by anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact CareCompassForYou@gmail.com and we will delete it.

Our servers are located in the United States. If you use the Service from outside the U.S., you consent to your data being transferred to and processed in the U.S. We rely on Standard Contractual Clauses where required for EU/UK transfers.

We use only essential cookies:

• session_token — keeps you signed in for 7 days
• pw_ref_code / pw_watch_token — temporary browser storage for referral and watcher-invite links (cleared once used)

We do not use advertising cookies or third-party analytics that track you across sites.

If we make material changes we will email your account address at least 14 days in advance. The effective date at the top of this policy always reflects the latest version.

Questions, requests, or concerns? Email CareCompassForYou@gmail.com.