Privacy Policy

1. Who we are

This Privacy Policy explains how Liquid LLC, 8 The Green STE B, Dover, DE 19901, United States ("Liquid", "we", "us" or "our") collects, uses, shares and keeps information when you use the Liquid app, the website at liquidwallet.co, and the Liquid merchant portal (together, the "Platform"), which let you load funds, get discounts and pay at Liquid partner locations. By creating an account or using the Platform, you agree to the practices described in this policy. If you have a question about your information, e-mail us at team@liquidwallet.co.

Liquid is for people aged 18 and over in the United States.

2. Information we collect

Account details. Your first and last name, e-mail address, date of birth (to confirm that you are 18 or older) and your confirmation that you live in the US. If you sign in with Apple or Google, we receive an identifier for your account and the e-mail address (which may be a private relay address from Apple) and name that you choose to share. Passwords are stored only in hashed form by our authentication provider; we never see them.

Student verification. While sign-up to Liquid is by invitation only, we also ask for your terpmail address (your University of Maryland student e-mail address, ending in @terpmail.umd.edu) and e-mail it a 6-digit code, which you enter in the app. We use your terpmail address only to confirm that you are a student: you never sign in with it, and we never use it for marketing. Each code expires after 15 minutes, and once the e-mail with it is sent we keep only a one-way hash of the code.

Legal acceptances. Which version of each document you accepted, when, from which app or website version, and the IP address you used.

Wallet and payments. Your deposits (amount, card fee, total, status and time), your Liquid Cash balance and how it is made up, including the money you lock at each spot and its rate, your lifetime savings, and refunds. Card payments are handled by Stripe. We receive the card brand, the last 4 digits and whether you paid with Apple Pay or Google Pay, which we use to show you where a refund goes.

Orders. The spot, the items and the options you chose, the prices, the discount, sales tax, tip, any special instructions you write, the pickup code, the order's status and any refunds, including a reason the spot gives when it cancels an order.

Location.

• If you allow it, the app uses your device's location while you use it, to show spots near you and to center the map. The coordinates are sent only with that request, are used only to answer it, and are not stored or logged.
• We never track your location in the background, and we don't store your location.
• You can turn location access off at any time in your device settings; the app still works, and you can browse spots without it.

Preferences. Your notification choices and your time zone, which we use to time deal alerts. If you saved favorite spots in an earlier version of the app, we keep that list too.

Device information. Your push notification token (only if you allow notifications), an identifier for your installation of the app, the device platform, app version and language. We use them to deliver notifications to the right devices.

Camera. The app uses your camera only if you choose to scan your card when you add money. Images from the camera are not stored or sent to us.

Support. What you send us through the in-app support form or by e-mail, and the order or deposit it is about.

App usage. If we turn on product analytics in the app, the app sends usage events to PostHog, our product-analytics provider: for example that the app was opened, which screen was shown, or that a checkout or deposit finished, together with your account identifier, the app version and the operating system. These events never include your name, e-mail address, location, money amounts, balances, payment details or anything you type. The website doesn't use product analytics.

Diagnostics. If crash reporting is turned on, crash reports and error logs from the app and website, with personal information removed before they are sent (the only user detail they carry is your account identifier).

Security. IP addresses and signals from Cloudflare Turnstile (a check that you are a person) when you sign in, request a code or use our public forms. We use them to prevent abuse and fraud; for rate limits we keep only a one-way hash of the IP address.

Merchants. For people who use the merchant portal: name, e-mail address, role, sign-in and two-step verification status, and a log of the changes they make. For businesses that apply to join: the business and contact details in the application and the IP address it came from.

Website. Our web servers and hosting provider keep standard request logs. The website uses cookies only to keep you signed in (merchant portal and account deletion), to remember your light or dark theme, to remember which business and store you last opened in the merchant portal, and, in the portal, to play some animations only once per visit. We don't use advertising cookies or third-party trackers.

Information we don't collect. We never receive or store your full card number, security code or bank account details. Card details are entered directly into Stripe's secure payment form and are never sent to or stored by Liquid.

3. How we use information

We use information to:

• create and run your account, confirm your age and eligibility, and keep your sign-in secure;
• while sign-up is by invitation only, confirm that you are a student with your terpmail address, and make sure that one terpmail address verifies only one account;
• add Liquid Cash to your wallet, keep track of the money you lock at each spot, process orders, refunds and payouts, and send receipts and transaction confirmations;
• show spots, menus and the discounts available to you, and apply the right discount at checkout;
• send the notifications described in section 4;
• answer your support requests;
• prevent, detect and investigate fraud, abuse and security problems, and handle card disputes;
• keep records the law requires and meet our legal obligations;
• find and fix errors and keep Liquid reliable;
• if product analytics is turned on in the app, understand how the app is used so we can improve it.

We don't sell your personal information, we don't share it for cross-context behavioral advertising, and the app doesn't use advertising identifiers.

4. Notifications

Order and wallet notifications are always on, because they are part of the service: for example when money is added to your wallet, when an order is ready, when an order is refunded, and your receipts.

Deal alerts are promotional and off unless you turn them on. If you turn them on, you get an alert when a partner location in your area starts a flash sale or an off-peak discount. We may combine deals that start close together into one alert, and we may limit how many deal alerts you get in a day or hold them overnight. You can turn them off at any time in the app, and you control push notifications in your device settings.

Push notifications never show money amounts or balances. The "order ready" notification shows your pickup code; on Android it is hidden on the lock screen.

5. What spots see

When you order at a partner location, the spot sees your first name and last initial, what you ordered, the amount, the discount applied, the time, your special instructions and your pickup code. If a spot connects its Square point-of-sale system to Liquid, we also send these order details to the spot's Square account, so that your order appears in its point of sale. Spots never see your wallet balance, how much money you have locked with them, your e-mail address or your payment details. Spots also see totals and reports about their own orders, in which customers are counted, not named.

6. Service providers

We share information with companies that provide services to us, only as needed for those services and under contracts that prohibit them from using it for any other purpose:

Stripe's use of your information is also governed by Stripe's own privacy policy. The website doesn't use a product-analytics provider. We name any new provider here, in a new version of this policy, before we start using it.

We may also disclose information if the law requires it, to respond to valid legal process, or to protect the rights, property or safety of our users, the spots, Liquid or the public. If Liquid is involved in a merger, acquisition or sale of its business, your information may be transferred as part of that transaction; this policy continues to apply, and we will tell you about the transfer and any change to this policy.

7. How long we keep information

8. Deleting your account

You can delete your account in the app (Profile → Delete account) or at liquidwallet.co/account/delete, where you can also sign in with an e-mail code if you signed up with Apple or Google. When you delete your account:

• we delete your name, date of birth, terpmail address, IP addresses, favorites, notification settings and devices, and then your sign-in account;
• we keep a one-way fingerprint of your terpmail address, if you verified one, so that the same address can't be used to verify another account; it can't be turned back into the address;
• we keep the records described in section 7 for 7 years, in a form that no longer identifies you by name, and your support requests with their contents removed;
• we keep your e-mail address only until the refunds to your cards are complete (at most 180 days), so that we can tell you when they are done.

You can't delete your account while an order is in progress, while a card dispute is open, or while you are the only owner of a business on Liquid. The User Agreement explains how your balance, including money you have locked at a spot, is refunded.

9. Your choices and rights

You can see and update your name in the app. To change your e-mail address, use the app; merchant portal users contact support. You can turn deal alerts on or off in the app, turn location access and push notifications on or off in your device settings, and delete your account at any time.

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, and to opt out of its sale or its use for targeted advertising (we do neither). To make a request, e-mail team@liquidwallet.co from the address on your account. We will confirm your identity before we act on a request, and we won't treat you differently for making one.

10. Children

Liquid is intended only for people who are 18 or older. We don't knowingly collect information from anyone under 18. If we learn that a user is under 18, we close that account and promptly delete the information associated with it.

11. Security

We protect your information with encryption in transit and at rest, access controls, and two-step verification for the people who run Liquid, and for merchant owners and managers when Liquid requires it. On your phone, your session is stored in encrypted storage. No system is completely secure, so please keep your sign-in details and your phone secure too.

12. Where information is processed

Liquid is operated in the United States, and our service providers process information in the United States.

13. Changes to this policy

We may update this policy from time to time. Each version has a version number and an effective date, and every version stays available on liquidwallet.co. We tell you in the app before a major change takes effect, and ask you to accept it before your next deposit or order.

14. Governing law

This policy is governed by the laws of the State of Maryland. Any dispute arising under this policy or your use of the Platform will be resolved through binding arbitration, as the Terms of Service explain.

15. Contact

Liquid LLC, 8 The Green STE B, Dover, DE 19901, United States

For all privacy questions and requests: team@liquidwallet.co