Privacy Policy

How PayOrPoints collects, uses, and protects your data.

Overview

We respect your privacy. This policy describes what we collect, how we use it, and the choices you have. Our products are built with minimal data collection in mind.

Definitions

  • "Services" means websites, apps, and features operated by PayOrPoints.
  • "Personal data" means information that identifies or can reasonably be linked to an individual.
  • "Process" means collect, store, use, share, or otherwise handle data.

What we collect

Calculator inputs: information you enter into calculators (e.g., rank, years of service, VA disability %) to produce an estimate. We aim to process these inputs in-session and do not require an account.
Runtime data: standard logs and telemetry for reliability and security (e.g., request metadata).
Account data: we do not require accounts to use the calculator.
Device & usage: non-identifying information like browser type, OS, language, approximate region, and interactions to improve UX and stability.
Support communications: messages you send to us (e.g., email content, troubleshooting details).
Payment or commerce data: PayOrPoints does not process payments for the calculator today. If monetization is added later, this policy will be updated.

How we use data

  • Provide, maintain, and improve PayOrPoints services.
  • Communicate updates you opt into, such as annual pay scale updates.
  • Prevent abuse, secure the platform, and comply with law.
  • Diagnose issues and analyze aggregate service reliability.
  • Personalize features where you explicitly opt in.

Legal bases

  • Consent (e.g., subscribing to the update list).
  • Performance of a contract (providing requested features).
  • Legitimate interests (e.g., platform security, product improvement).
  • Legal obligations (e.g., record-keeping where required).

Sharing

We don’t sell your data. We may share limited data with service providers strictly to operate our services, under appropriate agreements. We may also share in connection with a merger, acquisition, or asset sale, or where required by law.

Retention

We retain data only as long as necessary to fulfill the purposes above or as required by law. You may request removal where applicable.

  • Update and newsletter emails: until you unsubscribe or we purge dormant lists.
  • Logs and telemetry: short, rotating windows for security and reliability.
  • Support communications: as long as needed to resolve your request.

Security

We apply industry practices to protect data in transit and at rest where applicable. Access is restricted to personnel who need it to operate the services. No system is perfectly secure—contact us promptly if you see an issue.

  • Encryption in transit by default; encryption at rest where applicable.
  • Principle of least privilege and access reviews.
  • Secure development lifecycle and dependency management.
  • Responsible disclosure: if you believe you’ve found a vulnerability, please contact us; we will investigate and remediate as appropriate.

Data controller

PayOrPoints is the data controller for personal data processed in connection with the Services.

International transfers

We may process and store data in countries other than your own. Where required, we use appropriate safeguards (e.g., standard contractual clauses) for cross‑border transfers.

Regional rights

Depending on your region, you may have rights to access, correct, download, or delete your data. We honor applicable legal frameworks (e.g., GDPR/CCPA equivalents) to the extent they apply to our services.

Exercising your rights

To exercise rights available in your region, contact us atprivacy@payorpoints.org. We may need to verify your request to protect your data.

Product-specific notes

  • No sign-in: the calculator is designed to work without accounts.
  • Third-party links: external sites (e.g., VA or DFAS) have their own policies.

Cookies

We aim to minimize cookies. If used, they are to maintain essential session state or preferences. You can control cookies at the browser level; disabling them may impact features.

  • Essential: required for core functionality (e.g., preferences).
  • Optional: only with consent where required; you can opt out anytime.
  • We honor applicable browser Global Privacy Control (GPC) signals where feasible.

Analytics

We prioritize privacy-friendly analytics and avoid invasive tracking. If we use a third‑party provider, it will be limited to aggregate usage and subject to this policy.

Data processors

We may rely on limited, reputable providers (e.g., infrastructure, email) who process data on our behalf under appropriate agreements. We keep this list as small and transparent as possible.

Do Not Track

Our Services currently do not respond to browser "Do Not Track" signals. We will update this policy if that changes.

Children’s privacy

Our Services are not directed to children under the age of 13 (or as defined by your local law). We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy to reflect product improvements or legal requirements. We’ll revise the “Last updated” date and, when appropriate, provide additional notice.

Your choices

  • Unsubscribe from emails via the link in any message.
  • Request access or deletion of your data where applicable by contacting us.

Contact

For privacy questions or requests, contact us atprivacy@payorpoints.org.

Last updated: 2026-05-23