Privacy Policy
Last updated: April 2026
1. Information we collect
Account information: When you register, we collect your email address, company name, and a password (stored securely and never readable by our staff). We may also collect a phone number if you provide one for notifications.
Business filing information: To prepare and submit your CBP refund claim, we collect your business Employer Identification Number (EIN), business address, importer of record number, and contact details. This information is used solely for setting up your CBP portal account and submitting your refund filing.
Documents you upload: Files you upload for analysis (freight forwarder invoices, broker statements, customs entry summary forms, spreadsheets, etc.) and the shipment data we extract from them.
Payment information: Payments are processed by a PCI-compliant third-party payment processor. We never see or store your full card number. Our payment processor provides us with a transaction ID and confirmation that payment succeeded.
Usage information: Standard server logs (IP address, request timestamps, user-agent) used for security and debugging.
2. How we use your information
- To analyze your import documents and prepare your refund filing.
- To set up and manage a CBP import portal account on your behalf.
- To submit your refund claim to CBP and monitor its status.
- To send transactional emails (order confirmation, analysis complete, filing submitted, status updates).
- To provide customer support.
- To comply with legal obligations.
We do not sell your data. We do not share your documents or extracted data with third parties for marketing purposes. With your authorization, we share the information necessary to complete your CBP filing directly with U.S. Customs and Border Protection.
3. How we handle your documents
- Encrypted in transit: All uploads use HTTPS/TLS.
- Encrypted at rest: Files are stored using a cloud storage provider with server-side encryption.
- AI processing: The content of your uploaded documents is processed by an AI system to extract the shipment data needed for your refund filing. This processing is performed by a third-party AI provider under a data processing agreement. Your documents are not used to train AI models.
- Access control: Only the staff needed to deliver the service and support you can access your data.
- Deletion on request: You can request deletion of all your data at any time by emailing hello@moneytakeback.com. We complete deletions within 30 days, subject to any legally required retention periods (see Section 6).
4. Third-party service providers
We use third-party service providers for application hosting, database hosting, payment processing, email delivery, document analysis (AI), and file storage. Each provider only receives the data strictly necessary to perform its function. We do not sell or share your data with any third party for marketing purposes.
5. Cookies and tracking
We use essential cookies to maintain your login session. We do not use third-party tracking cookies or advertising pixels. No data is shared with ad networks.
6. Data retention
We retain account and document data for as long as your account is active and for up to 24 months afterward to support follow-up questions and potential refiling. Note: U.S. Customs regulations generally require importers to retain entry records for five years. If you request deletion and we are within a legally required retention window, we will inform you of the applicable retention period before completing the deletion.
7. Your rights
You can request a copy of the data we hold about you, ask us to correct inaccuracies, or request deletion of your data. Contact hello@moneytakeback.com.
8. Children and eligibility
This service is intended for use by businesses and their authorized adult representatives. We do not knowingly collect personal information from individuals under 18 years of age.
9. Changes to this policy
If we make material changes to this privacy policy, we will notify active users by email and update the "Last updated" date above.