Money Matchup Privacy Notice

Version 1.1 • Effective July 16, 2026

Effective date: July 16, 2026

Last updated: July 16, 2026

Money Matchup is operated by Creators Agency LLC, a Wyoming limited liability company (“Money Matchup,” “Company,” “we,” “us,” or “our”). This Privacy Notice explains how we collect, use, disclose, and retain personal information through moneymatchup.com and each Money Matchup site, subdomain, Creator portal, quiz, application form, affiliate link, support channel, or other service that links to this Notice (collectively, the “Services”).

This Notice is a description of our practices, not a contract accepted merely by visiting a site. Agreement to website or creator terms is not consent to processing for which applicable law requires separate consent.

1. Scope and third-party boundaries

This Notice applies to public visitors and applicants; registered Creators in the United States and supported foreign countries, including the United Kingdom and Canada; people who take a Money Matchup quiz or interact with a Money Matchup affiliate link; and staff or representatives who use the Services. Every registered Money Matchup account is a Creator account, but public visitors and quiz users may use public Services without registering.

It does not govern a financial institution, advertiser, merchant, affiliate network, social platform, payout provider, or other third party operating under its own privacy notice. When a consumer clicks a tracked link or continues to a provider’s site, that provider and its vendors may collect information under their own notices.

Money Matchup does not use the creator program to take consumer financial-product applications or resell consumer leads. Consumers complete any product application directly on the approved provider or issuer site. Money Matchup may receive limited tracking, attribution, conversion-status, and commission information from providers and affiliate networks as described below.

2. Personal information we collect

The categories below describe the present affiliate-platform implementation and information reasonably expected from the related Services.

2.1 Contact, identity, account, and application information

We may collect a name, legal or business name, email addresses, phone number, account identifier, role or access level, account status, referral source or code, and the date an account or application was created or updated.

A creator application or waitlist form may include social-channel URLs, a description of the creator or audience, stated affiliate experience or estimated earnings, referral information, approval status, and internal review notes.

We receive this information from you, an authorized agency or representative, an internal Creators Agency system, or an application or onboarding service used on our behalf.

2.2 Creator profile, channel, and public information

We may collect a biography, profile photo, social platform, handle, channel identifier, channel URL, audience or follower information when available, agency or team information, and whether a channel is designated as primary.

A profile photo uploaded through the Creator portal is stored in a publicly accessible file service. Anyone with the file URL may be able to view it. Removing the photo from a profile does not necessarily delete the underlying stored object immediately. Contact apple@creatorsagency.co to request deletion of the underlying file.

We may obtain public creator or channel information from public social pages, video platforms, authorized representatives, and internal Creators Agency systems.

2.3 Authentication, security, device, and usage information

Authentication may use an email magic link or Google sign-in. We may process an authentication-provider identifier, email address, session or verification token, provider token and scope information needed for authentication, token expiration, session expiration, last-sign-in time, IP address, and user agent. We do not receive your Google password.

We may automatically collect browser or device type, operating system, IP address, cookie or similar identifier, page and feature interactions, timestamps, referring and landing URLs, origin, error and diagnostic information, and security or fraud signals.

The current creator-portal authentication session may last up to 364 days and refresh periodically. Shorter cookies may be used for sign-in state, security, or authorized administrative support. See Section 7.

2.4 Creator onboarding, support, and communications

We may collect onboarding steps and completion dates, meeting or booking status, scheduled reminder status, support category, support message, staff notes, resolution status, replies, and communication preferences.

Email and operational communication records may include the recipient, sender, subject, body, delivery status, and date. Money Matchup does not currently import marketing-email open or click data into the Creator portal, but a communication provider may process delivery and interaction information under its own terms.

2.5 Offer, link, compliance, and program activity

We may collect offers viewed, requested, approved, or declined; request notes; approved channels; offer and link identifiers; creator slug; custom link label; link destination and provider; channel and platform; routing configuration; link status; creation and update dates; and compliance, approval, suspension, or contract status.

We may maintain evidence of an agreement acceptance or link creation, including the account and payee identity, document ID, title, version, effective date, content or immutable snapshot, hash, checkbox or button event, timestamp, IP address, user agent, session or request identifier, receipt information, displayed Creator Rate and Conversion Event, and resulting link ID.

For new Creator agreement acceptances, Money Matchup stores immutable core evidence such as the user, agreement version, document hash, and acceptance timestamp. Link-creation records separately preserve the offer or product identity, displayed final Creator Rate, displayed Conversion Event, the time those details were recorded, and the resulting link. Money Matchup creates a privacy-minimized permanent receipt for the initial acceptance in a restricted Google Drive archive. The permanent Drive receipt does not contain a raw IP address, user agent, or session or request identifier. Separate operational-database copies of those technical fields are deleted 90 days after capture once the permanent archive is confirmed, unless subject to a documented legitimate hold or longer retention is required by law. The privacy-minimized archived receipt is retained indefinitely.

2.6 Clicks, attribution, conversions, earnings, and disputes

We may collect or receive creator, offer, link, provider, click, shared, subtracking, conversion, action, order, or event identifiers; click and conversion dates; attribution source; conversion status; aggregate and account-level clicks; commission or earnings amount; creator revenue-share rate; reversal status and reason; payout status; and dispute records.

Affiliate networks and providers may process consumer-level click or conversion events before returning aggregated or attributed reporting. Money Matchup’s database generally stores link- or creator-level daily performance. Event-level information may also exist transiently in application logs or connected systems operated by Money Matchup or its providers.

2.7 Consumer quiz and recommendation information

When a person takes a Money Matchup credit-card quiz, we may collect whether the person is considering a personal or business card, broad credit-score band, balance-payment behavior, rewards goal, annual-fee preference, selected answers, recommended card or outcome, pseudonymous session identifier, creator or referral slug, source, sub-ID, page path, referrer, origin, user agent, and timestamp.

The current quiz dataset does not include a consumer’s name, email address, exact credit score, bank-account number, payment-card number, Social Security number, or provider application result. Quiz responses are used to provide a recommendation, attribute creator and source activity, analyze use, and improve the quiz. They are not an application and are not used by Money Matchup to make an underwriting or approval decision.

2.8 Payout and tax information

The Creator portal records earnings and related Program amounts but directs every Creator to Lumanu, the designated payout provider, to establish payout and tax details. Money Matchup does not directly collect bank-account details, payment-card details, Social Security numbers, ITINs, TINs, EINs, or tax forms through the portal. Money Matchup may receive limited account-setup, payout-status, tax-compliance-status, or earnings information from Lumanu.

Lumanu collects and uses payout and tax information under its own privacy notice. Money Matchup may receive limited account-setup, payout-status, tax-compliance-status, or earnings information from Lumanu, but not the underlying bank credentials or full tax identifier.

2.9 Staff and internal operational information

Authorized staff features may process creator information, program performance, public channel information, outreach history, and draft communications to review applications, manage offers, support creators, analyze performance, and prepare outreach. Some staff tools may send limited creator and performance information to an artificial-intelligence service to generate internal drafts, subject to configured data-use settings and vendor terms.

3. Sources of personal information

We collect information:

(a) directly from you, including through forms, accounts, quizzes, support, and communications;

(b) automatically from a browser, device, session, cookie, link, redirect, or server log;

(d) from social platforms, video platforms, and other public sources;

(e) from an authorized agency, team member, representative, or referrer;

(f) from Creators Agency systems, staff, and service providers; and

(g) from security, fraud-prevention, analytics, and authentication providers.

4. How we use personal information

We may use personal information to:

(a) create, authenticate, secure, and administer accounts;

(b) review creator applications and verify identity, authority, channels, and eligibility;

(d) record agreement acceptance and link-creation Offer Record snapshots;

(e) attribute clicks and conversions; calculate, validate, reverse, dispute, and report commissions or earnings; and coordinate payouts;

(f) operate quizzes and generate recommendations;

(g) communicate about authentication, accounts, support, approvals, offers, security, legal notices, and permitted marketing;

(h) monitor compliance, investigate fraud or invalid traffic, enforce terms, protect consumers, and respond to provider or regulator requirements;

(i) maintain, debug, secure, analyze, and improve the Services;

(j) personalize content and offers; measure marketing and Program performance; conduct research; prepare internal analytics, outreach drafts, and business planning; and develop or improve Money Matchup and other Creators Agency services;

(k) comply with law, tax, accounting, audit, and recordkeeping duties; establish or defend legal claims; and respond to lawful process; and

(l) evaluate or complete a merger, financing, reorganization, sale, or other business transaction.

We may combine information obtained through different Money Matchup services, Creators Agency systems, public sources, partners, and service providers for the purposes described in this Notice.

We may create aggregated or deidentified information and use or disclose it for any lawful purpose. Where required by law, we will maintain such information in deidentified form and will not attempt to reidentify it except to test deidentification methods or as otherwise permitted by law.

We may also use personal information for a purpose disclosed when it is collected, at your direction, with consent where required, or as otherwise permitted by applicable law. We will not use personal information for a materially incompatible new purpose without any additional notice or consent required by law.

5. How we disclose personal information

We may disclose personal information to:

(a) authorized Money Matchup and Creators Agency personnel and contractors who need it for the purposes above;

(b) advertisers, merchants, issuers, affiliate networks, tracking providers, and link-routing services to create links, route traffic, attribute activity, enforce offer rules, and reconcile compensation;

(c) hosting, database, file-storage, authentication, security, analytics, communication, booking, support, social, video, and operational service providers;

(d) a payout, tax, accounting, or financial-administration provider for creator payments and related compliance;

(e) a creator’s authorized agency, representative, or team member;

(f) professional advisers, auditors, insurers, and financing sources subject to appropriate duties;

(g) law enforcement, regulators, courts, counterparties, or other persons when reasonably necessary for law, safety, rights, fraud prevention, or legal claims; and

(h) a buyer, successor, or participant in a proposed or completed corporate transaction.

A creator profile photo, social handle, channel URL, or other information intentionally designated for a public profile may be publicly accessible. We do not make private account, support, or earnings information public merely because a creator participates in the Program.

We require service providers to handle personal information for authorized purposes and under appropriate contractual restrictions when required.

6. Affiliate links and third-party destinations

An affiliate link may include a creator, link, offer, source, shared, or subtracking identifier. When a person clicks, Money Matchup or a routing provider may process the identifier, destination, timestamp, referrer, device or browser information, and related request data. The person is then redirected to a third-party provider.

The provider, affiliate network, and their vendors may set their own cookies or collect information under their own privacy notices. They may return conversion status, commission, attribution, and related event information to Money Matchup.

Do not place an email address, tax identifier, account number, or other sensitive information in an affiliate-link URL, label, slug, or query parameter.

7. Cookies and similar technologies

We and our providers may use cookies, pixels or beacons, local or session storage, server logs, redirect parameters, and click identifiers.

Strictly necessary and authentication technologies support sign-in, account sessions, fraud prevention, load balancing, and security. The current creator-portal session may remain active for up to 364 days unless the user signs out or the session is revoked. Temporary authentication and authorized-support cookies expire sooner.

Preference technologies remember choices within a browser or session. The current portal may use session storage to remember offer-interface state for the active browser tab.

Money Matchup uses Google Analytics and may use other analytics or performance technologies. These technologies may collect page and interaction information, device and browser information, referring and landing URLs, cookie or similar identifiers, IP-derived approximate location, and diagnostic information to measure use and improve the Services. Google and other analytics providers process information under their own privacy practices. Where applicable law requires opt-in consent for a nonessential technology, Money Matchup will request that consent before loading it.

Affiliate-attribution technologies connect a visit or qualifying action to a creator, link, campaign, or source. Disabling or deleting a browser cookie may affect future attribution but does not automatically delete server-side records already created.

Cookie controls. You can use browser settings to block or delete cookies and similar technologies. Blocking some technologies may affect sign-in, link attribution, analytics, or other features. Where applicable law requires consent for a nonessential technology, Money Matchup will request that consent before using the technology.

Do Not Track. Because there is no uniform industry response, the Services currently do not respond to browser “Do Not Track” signals.

Global Privacy Control. Money Matchup does not currently sell personal information or share it for cross-context behavioral advertising. If Money Matchup begins processing covered by a legally recognized opt-out preference signal, it will honor that signal where required by applicable law.

Third parties may collect information about activity over time and across different websites when their technologies are present. Their practices are governed by their own notices and applicable agreements.

8. Sale, sharing, and targeted advertising

Money Matchup does not currently sell personal information, share personal information for cross-context behavioral advertising, or process personal information for targeted advertising as those terms are defined by applicable U.S. state privacy laws. Money Matchup does not have actual knowledge that it sells or shares personal information of anyone under 16. Money Matchup uses sensitive personal information, if any, only for permitted operational purposes and not to infer characteristics.

During the preceding 12 months, Money Matchup has not sold personal information or shared it for cross-context behavioral advertising.

If Money Matchup’s practices change, it will update this Notice and provide any required notice, consent, or opt-out method before the new processing begins.

Affiliate attribution may be classified differently by different laws depending on the information, recipient’s role and reuse, consideration, contracts, and purpose. Money Matchup evaluates those flows under the law that applies to the person and processing.

9. Retention

We retain personal information only for as long as reasonably necessary for the disclosed purposes, the nature and sensitivity of the information, account and Program administration, legal and accounting obligations, disputes, security, and enforcement. Our current retention approach is:

Account and Creator-profile information: while the account is active and afterward for as long as reasonably needed to close or support the account, prevent fraud, enforce agreements, resolve disputes, and meet legal obligations.

Creator applications and onboarding records: for as long as reasonably needed to administer eligibility and onboarding, document decisions, prevent duplicate or fraudulent applications, resolve disputes, and meet legal obligations.

Agreement and acceptance evidence: core acceptance facts, agreement identifiers, document hashes, timestamps, offer identifiers and displayed offer or product, Creator Rate, Conversion Event, and recorded-time snapshots, permanent Drive receipt identifiers, and the privacy-minimized archived receipt are retained indefinitely for contract proof, audit, enforcement, and dispute purposes. The permanent Drive receipt does not contain a raw IP address, user agent, or session or request identifier. Separate operational-database copies of those technical fields are deleted 90 days after capture once the permanent archive is confirmed, unless subject to a documented legitimate hold or longer retention is required by law.

Affiliate links, attribution, conversions, earnings, reversals, and payout-status records: for as long as reasonably needed to operate links, calculate and reconcile compensation, maintain financial and tax records, investigate fraud, resolve disputes, and enforce agreements.

Consumer quiz submissions and pseudonymous recommendation records: for as long as reasonably needed to provide and improve recommendations, measure and attribute use, prevent abuse, and analyze the Services; information may then be deleted, deidentified, or aggregated.

Support and ordinary communications: for as long as reasonably needed to resolve the matter, maintain an appropriate business record, enforce agreements, and meet legal obligations.

Security and application logs: for as long as reasonably needed to operate and secure the Services, investigate incidents or fraud, troubleshoot errors, resolve disputes, and meet legal obligations.

Expired authentication and verification records: retained after expiration only for as long as reasonably needed for security, fraud prevention, incident investigation, account administration, and legal obligations.

Public profile images: available until removed from the profile or account. Because removing the profile URL may not immediately delete the underlying public object, contact apple@creatorsagency.co for a verified deletion request. The underlying file may remain during request processing, provider backup cycles, an investigation, or a legal hold.

Analytics identifiers: according to the analytics provider’s configured period and only for as long as reasonably needed to measure, secure, and improve the Services, after which the information may be deleted or aggregated.

Backups: overwritten or deleted on the applicable provider’s rolling schedule, subject to secure isolation, disaster-recovery needs, and legal holds.

Marketing suppression and privacy-choice records: minimal information for as long as needed to honor the choice and demonstrate compliance.

We may retain a record longer when required by law, contract, tax or accounting rules, legal hold, fraud investigation, or an unresolved dispute. When possible, we will delete, deidentify, or aggregate information that is no longer needed.

10. Security

We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the personal information. No system is perfectly secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

You should protect account credentials and notify us at apple@creatorsagency.co if you suspect unauthorized access. We will investigate and provide legally required notices if a qualifying security incident occurs.

11. Your privacy choices and rights

Depending on your residence and applicable law, you may have the right to:

(a) confirm whether we process personal information and obtain access to it;

(b) request correction of inaccurate information;

(d) obtain a portable copy of certain information;

(e) opt out of a covered sale, targeted advertising, or significant-effect profiling;

(f) limit certain uses or disclosures of sensitive personal information where applicable;

(g) use an authorized agent;

(h) appeal a denial where applicable; and

(i) receive equal service and not be discriminated against for exercising a privacy right.

Submit a request by emailing apple@creatorsagency.co with the subject “Privacy Request.” Do not email a Social Security number, bank information, password, or full government identifier.

We may request information reasonably necessary to verify identity, account authority, residence, or an authorized agent. We use verification information only for the request and related security. You do not need to create a new account to submit a request.

We will respond within the time required by applicable law. Where the Texas Data Privacy and Security Act applies, this is generally within 45 days, subject to one permitted 45-day extension with notice; an appeal will be decided within the applicable period and a denied appeal will include information about contacting the Texas Attorney General. Where the California Consumer Privacy Act applies, we will provide the methods, verification, authorized-agent, opt-out, Global Privacy Control, and response procedures required by that law.

The availability and scope of a right may differ because some laws exclude information processed in a person’s commercial, employment, or independent-contractor role, apply only to businesses meeting thresholds, or contain exceptions.

12. California disclosures

If the California Consumer Privacy Act applies to Money Matchup, the categories described in the preceding 12 months may include identifiers; customer-record information; commercial and affiliate-program information; internet or other electronic-network activity; professional or employment-related information; financial preferences from quiz responses; inferences used for recommendations, fraud, or program administration; and sensitive personal information used for authentication or another permitted operational purpose.

The sources, business purposes, recipient categories, sale and sharing statements, and opt-out methods are described in Sections 3 through 8. California residents may exercise applicable rights to know, access, correct, delete, opt out, limit, use an authorized agent, and receive nondiscriminatory treatment.

Money Matchup does not use or disclose sensitive personal information to infer characteristics about a person.

13. Communication choices

You may unsubscribe from promotional email by using the link in the message or contacting apple@creatorsagency.co. An unsubscribe from promotional email does not stop necessary authentication, account, security, support, payment, tax, or legal messages. Where UK PECR, Canada’s anti-spam law, or another local rule applies, Company will obtain and document any required consent, identify the sender, provide the required contact information and opt-out method, and honor suppression deadlines.

Money Matchup does not currently operate an SMS marketing program. We will not add SMS or automated-call marketing without separate notice, consent, and controls required by law.

14. Children

The Services and creator accounts are intended for people at least 18 years old and are not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child provided personal information, contact us so we can investigate and delete it as required.

We do not knowingly sell or share the personal information of anyone under 16.

15. Third-party services

Third-party sites and services have their own terms and privacy notices. Review them before providing information. Money Matchup is not responsible for a third party’s privacy practices merely because the Services link or redirect to it.

16. Processing locations

Money Matchup is based in the United States. Public consumer financial-product content is primarily U.S.-focused, but the Creator Program includes supported Creators in the United Kingdom and Canada. Organic Creator Content and affiliate links may be viewed worldwide; that passive availability does not mean a product is offered in every country, but Money Matchup or its providers may process information from an international visitor as described in this Notice. Personal information may be processed in the United States and other countries where Company, Lumanu, affiliate partners, or service providers operate, subject to safeguards required by applicable law.

For Creators in the United Kingdom, Canada, or another jurisdiction with additional privacy requirements, Company will use an applicable legal basis, provide required transparency, honor applicable rights, apply required international-transfer and security safeguards, and use any required consent or opt-out controls. A Creator may contact apple@creatorsagency.co to exercise a right or ask about cross-border processing.

17. Changes to this Notice

We may update this Notice prospectively as practices or legal requirements change. We will post the revised Notice with a new “Last updated” date. For a material change, we will provide additional notice through email, an account notice, or a prominent site notice when appropriate.

We will not apply a materially incompatible new use to previously collected information without additional notice or consent where required.

18. Contact

Money Matchup

Operated by Creators Agency LLC, a Wyoming limited liability company

Attn: Privacy

30 N Gould St, Sheridan, WY 82801

Privacy email: apple@creatorsagency.co

Security email: apple@creatorsagency.co

Privacy requests: apple@creatorsagency.co

Website: https://moneymatchup.com