Effective Date: August 1, 2025
Last updated: July 31, 2025

CACFP Receipts is a standalone service offered by CACFP Solutions, LLC (“we,” “us,” “our”). We value your privacy and are committed to safeguarding your personal information. This Privacy Policy (“Policy”) describes the types of information we collect, how we use, disclose, retain, and protect that information, your rights and choices, and how you can contact us about our privacy practices. This Policy covers all use of the CACFP Receipts service, including any SMS text messages or alerts you may receive from CACFP Solutions or CACFP Receipts, as well as any email newsletters or communications you subscribe to from us.

We provide notice of our data collection practices at or before the point of collection, as described in this Policy. This Policy is intended to comply with applicable U.S. state privacy laws, including California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Oregon (OCPA), Texas (TDPSA), and others as they come into effect.

By accessing or using our receipt management website, mobile app, and related services (collectively, the “Service”), you consent to the practices described in this Policy.

This Policy applies only to users located in the 50 United States and does not cover users outside the United States.

1. INFORMATION WE COLLECT

We collect several categories of information in connection with the Service, including but not limited to:

A. Personal Information

• Contact Information: Name, email address, organization, mailing address, phone number (including mobile numbers for SMS).
• Account Credentials: Username, password, and other identifiers used for authentication and account access.
• Uploaded Content: Receipts, files, images, documentation, and any other data you provide through the Service, including through our Zoho Receipts and MyFoodCloud platforms.
• Payment and Billing Information: If you purchase services, your payment details (such as credit card number and billing address) are processed directly by Stripe or other secure third-party payment processors. We do not receive or store your full credit card number. We only receive confirmation of payment and transaction records.
• Communications: Customer service requests, survey responses, feedback, correspondence with us, and submissions through our website forms (such as support, consultation, or newsletter sign-up forms).
• Usage Data: Device information, IP address, browser type, operating system, access times, referring website addresses, and activity logs on our Service.

We do not intentionally collect “sensitive personal information” as defined under applicable state privacy laws (such as Social Security numbers, precise geolocation, health data, or racial/ethnic origin). If you submit any such information through receipts or uploads, it will be processed solely as necessary to provide the Service, and you may direct us to limit its use as described below.

B. SMS and Mobile Information

When you opt in to receive SMS communications, we collect your mobile phone number and may collect delivery reports, read receipts, and responses you send to us.

C. Cookies and Similar Technologies

We use cookies, web beacons, and similar technologies to collect technical and usage information to optimize your experience, remember your preferences, and analyze site usage.

2. HOW WE COLLECT INFORMATION

We may collect information from you directly, automatically, and from other sources, including:

• When you register for an account, log in, or interact with the Service.
• When you upload receipts, documents, or other files.
• When you subscribe, make purchases, sign up for our newsletter, or manage your account.
• When you communicate with us (via email, SMS, web forms, or customer support).
• When you use or interact with our website, app, or receive our communications.

3. HOW WE USE YOUR INFORMATION

We may use your information for purposes including, but not limited to:

• Providing, maintaining, supporting, and improving the Service.
• Authenticating your identity and managing your account.
• Processing your transactions and managing billing and payments.
• Sending you administrative messages, confirmations, updates, and service-related notifications (including SMS if opted in).
• Responding to your requests, questions, or feedback, and providing customer support.
• Sending you newsletters or marketing communications if you have opted in, and allowing you to unsubscribe at any time.
• Personalizing and optimizing your experience.
• Analyzing Service performance and usage trends to improve our products and offerings.
• Using de-identified or aggregated data to develop and improve our software and services.
• Complying with applicable laws, regulations, legal obligations, and enforcing our agreements and policies.
• Protecting the security and integrity of our systems and users.

We do not use automated decision-making or profiling to make decisions that produce legal or similarly significant effects concerning you. If this changes, we will update this Policy and provide notice as required by law.

4. SMS AND EMAIL COMMUNICATIONS

If you opt in to receive SMS communications:

• We use your mobile number solely to send you service-related notifications, alerts, or other messages you have requested from CACFP Solutions or CACFP Receipts. We do not use your mobile number for marketing purposes unless you have provided separate, express consent.
• We do not sell, share, rent, or otherwise transfer your mobile number or SMS data to any third party for marketing or promotional purposes.
• You may opt out of SMS at any time by replying “STOP” to any SMS. For help, reply “HELP” or contact support@cacfp.ai.
• We may use trusted third-party SMS service providers solely for the purpose of delivering messages. Such providers are contractually required to protect your data and are prohibited from using it for any other purpose.
• Standard message and data rates may apply according to your carrier.

If you sign up for our newsletter or other email updates:

• We use your email address to send you newsletters, updates, and expert tips related to CACFP Solutions. You may unsubscribe at any time using the link provided in our emails or by contacting us directly.

5. HOW WE SHARE YOUR INFORMATION

We do not sell or rent your personal information to third parties for marketing or advertising purposes. We may disclose your information in the following circumstances:

A. Service Providers

We engage third-party companies and individuals (“Service Providers”) to facilitate and support our Service (e.g., payment processors, SMS gateway providers, Zoho, MyFoodCloud, cloud hosting, analytics, email newsletter platforms). Service Providers may access your personal information only to perform tasks on our behalf and are contractually obligated to use it only as directed by us.

B. Legal Compliance and Protection

We may disclose your information if required to do so by law, regulation, legal process, or court order; in response to a valid request by public authorities (e.g., law enforcement, government agencies); or to protect our rights, property, and the safety of our users or the public.

C. Business Transfers

In connection with any merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of such a transaction. We will provide prior notice if your information becomes subject to a different privacy policy.

D. With Your Consent

We may share or disclose information with your explicit consent or at your direction.

E. Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you.

6. INTERNATIONAL DATA TRANSFERS

We do not serve or target users outside the United States. If you are located outside the United States, please do not use the Service.

7. DATA SECURITY

We implement reasonable and appropriate technical, administrative, and organizational safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction, including:

• Encryption of data in transit (using SSL/TLS) and at rest.
• Limiting access to personal information to authorized personnel and Service Providers with a legitimate need.
• Regular review and testing of our systems for vulnerabilities.
• Secure payment processing by PCI-DSS-compliant third-party providers (we do not store credit card numbers).
• Incident response procedures and prompt breach notification as required by law.

No method of transmission or storage is 100% secure. While we strive to use industry-standard protections, we cannot guarantee absolute security.

8. DATA RETENTION

We retain your personal information and uploaded receipts for as long as your account is active or as needed to provide the Service and for up to 12 months from the date of each upload, consistent with our user agreement. After account closure or expiration of the retention period, your data is securely deleted unless retention is required by law, for billing, legal, or legitimate business purposes (such as dispute resolution or enforcing agreements). Deleted data may persist in routine backups for up to 6 months but will not be actively processed or restored except as required by law.

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies, web beacons, and similar technologies to:

• Authenticate users and maintain session state.
• Remember user preferences and settings.
• Analyze Service usage, trends, and performance.
• Improve and personalize your experience.

You may control cookies through your browser settings. Disabling cookies may affect certain features of the Service. For more information, see our Cookie Policy or contact us.

10. ANALYTICS

We use Google Analytics and similar tools to collect and analyze usage data to improve our Service. Google may use the collected data to contextualize and personalize ads within its own network. You can opt out by installing the Google Analytics opt-out browser add-on. For more information, please review Google’s Privacy Policy.

11. YOUR RIGHTS AND CHOICES (INCLUDING CALIFORNIA, COLORADO, CONNECTICUT, VIRGINIA, UTAH, OREGON, TEXAS, AND OTHER STATES)

Depending on your jurisdiction—including but not limited to California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Oregon (OCPA), Texas (TDPSA), and other states with privacy laws—you may have the following rights:

• Right to Know: Request information about what data we collect, use, disclose, and the purposes.
• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal information, subject to legal exceptions.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined under applicable U.S. privacy laws. If our practices change, we will update this Policy and provide opt-out instructions.
• Right to Limit Use of Sensitive Personal Information: If we collect sensitive personal information, you may direct us to limit its use to what is necessary to provide the Service.
• Right to Data Portability: You may request to receive your personal information in a portable, machine-readable format.
• Right to Non-Discrimination: We will not discriminate against you or retaliate for exercising your privacy rights.
• Right to Appeal: If we deny your privacy request, you have the right to appeal our decision by contacting us at support@cacfp.ai. We will review your appeal and respond within 45 days or as required by law.

You may exercise these rights if you are a resident of any of the above states or of another U.S. state with similar privacy laws. If you are unsure of your rights in your state, please contact us and we will review your request in accordance with applicable law.

To exercise any of these rights, you or your authorized agent may contact us at support@cacfp.ai, by phone at 800-367-1563, or by mail at 10900 Research Blvd Ste 160C, Austin, Texas 78759. We may require you to verify your identity or your agent’s authority before fulfilling your request. We will respond within 45 days or as otherwise required by law.

12. CHILDREN’S PRIVACY

Our Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

13. DATA BREACH NOTIFICATION

In the event of a data breach involving your personal information, we will notify affected users and relevant authorities as required by applicable law, generally within 72 hours of becoming aware of the breach, or as soon as reasonably possible.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our practices, legal requirements, or for other operational reasons. Changes will be posted on this page with a new effective date. If changes are material, we will provide notice via email or through the Service prior to the effective date. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy.

15. REGULATORY COMPLIANCE

We comply with all applicable U.S. state and federal privacy laws, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), Virginia Consumer Data Protection Act (VCDPA), Utah Consumer Privacy Act (UCPA), Oregon Consumer Privacy Act (OCPA), Texas Data Privacy and Security Act (TDPSA), and similar laws in other states as they come into effect. If you believe your privacy rights have been violated, you may file a complaint with your state attorney general.

16. MISCELLANEOUS

Severability:
If any provision of this Policy is found to be invalid or unenforceable, the remaining provisions will remain in full force and effect.

No Waiver:
Our failure to enforce any right or provision of this Policy will not be deemed a waiver of such right or provision.

Force Majeure:
We are not responsible for any delay or failure to perform our obligations under this Policy due to events beyond our reasonable control, including but not limited to, acts of God, natural disasters, war, terrorism, or failures of third-party service providers.

Entire Agreement:
This Policy, together with our User Agreement, constitutes the complete and exclusive agreement regarding our privacy practices for the Service.

17. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: help@cacfpsolutions.com
Mail: 10900 Research Blvd Ste 160C, Austin, Texas 78759 

By using the CACFP Receipts Service provided by CACFP Solutions, LLC, you acknowledge and agree to this Privacy Policy.