CashFirst · Liberty Digital Agency LLC
Privacy policy
Updated: 19 September 2026
Who processes data
Liberty Digital Agency LLC, 6300 Riverside Plaza Lane NW, Suite 100, Albuquerque, NM 87120, United States, is the controller for business account data and website operations. For a business’s customer records, that business determines the purposes of its programme and CashFirst provides processing under its instructions. Contact and requests: libertydigital.agency.
Data and purposes
We process business name, email, hashed password, sessions and programme transactions to provide the service and protect accounts. Cards can work without a name or email. Businesses adding names, contact details or birthdays must inform customers and have the appropriate legal basis. Health data and special categories must not be entered, including by clinics.
Legal bases
Account management is based on providing the service. Security and abuse prevention serve the legitimate interest of protecting it. Legal obligations are met where applicable. Optional analytics and communications requiring consent rely on revocable consent. Accepting terms does not constitute marketing consent.
Infrastructure and recipients
The service runs on Docker infrastructure managed by the owner. Operational data is stored in PostgreSQL. The owner is a US company; we do not claim all potential access is restricted to the European Union. Stripe, card manufacturers and Google Analytics are initially inactive. Information about recipients, locations and applicable transfer safeguards will be updated before activation.
Retention
Sessions expire after seven days. Cookie preferences are reviewed after six months. Programme records are retained while providing the service and managed according to business instructions, retention obligations and applicable deletion requests. Records subject to legal retention may be restricted instead of deleted.
Your rights
You may request access, correction, deletion, restriction, objection and portability where applicable, and withdraw consent. Use the corporate contact channel at libertydigital.agency, identify CashFirst and the relevant business, and do not send passwords. For loyalty card data you may also contact the business. You may complain to the competent supervisory authority, including the AEPD in Spain.
Security and limitations
Accounts are separated by business, passwords are not stored in plain text and sessions use HttpOnly cookies. No system eliminates all risks. Businesses should protect credentials and control staff access. The initial version provides one owner account per business. Customers can create an optional profile with email, password and an activated card’s opaque code. The code allows the card to be linked once; do not share it.
Referral programme
Liberty Digital Agency LLC manages referrer accounts: name, email, hashed password, session, referral code, accepted terms, attributed businesses, commissions and withdrawal requests with PayPal recipients. These support programme performance, fraud prevention and retention obligations. Referrers receive the name and plan of businesses entering their code at registration, never their customers or sales. Manual payments share necessary recipient and amount details with PayPal. We do not access address books or send invitations automatically. Rights and account closure requests are handled through the corporate contact channel. See referral programme terms for attribution and settlement details.