Privacy Policy
Last updated: January 2026
Your privacy is important to us. This policy explains how we collect, use, and protect your information when you use Cashoy.
Table of Contents
1. Information We Collect
Information You Provide
When you create an account and use Cashoy, you provide us with the following information:
- Account Information: Username, email address, first name, last name, and date of birth
- Payment Information: Bank account details for receiving payouts (account holder name, account number, BSB/routing number, SWIFT/BIC code as applicable), billing information for subscription payments
- Subscription Information: Your subscription tier (Free or Pro), billing cycle preference, and subscription status
- Referral Information: Your unique referral code and information about users you refer to the platform
- Communications: Any messages you send us through our contact form or support channels
- Profile Preferences: Notification settings, preferred social media platforms for promotions
Information Collected Automatically
When you use our platform, we automatically collect certain information:
- Click Data: IP address, user agent (browser/device), referrer URL, timestamp when you click affiliate links
- Device Information: Browser type, operating system, device type
- Usage Data: Pages visited, features used, time spent on platform, interaction with offers
- Cookies: Authentication tokens, session data (see Cookies section for details)
Information from Third Parties
We receive limited information from third-party services:
- Affiliate Networks: Conversion data, earnings amounts, transaction IDs for attribution purposes
- Payment Processor: Subscription status, payment confirmations, billing events for Pro subscriptions
- Bank Transfer Providers: Payout confirmation status and transaction references
2. How We Use Your Information
We use the information we collect for the following purposes:
- Platform Operation: To provide and operate the Cashoy platform and its features
- Payment Processing: To process your earnings and send payouts to your bank account
- Subscription Management: To process Pro subscription payments, manage billing cycles, and provide access to Pro features
- Referral Tracking: To track referrals, calculate referral commissions, and attribute referred users to your account
- Conversion Tracking: To track clicks on affiliate links and attribute conversions to your account
- Transactional Communications: To send emails about payout confirmations, account changes, and important platform updates
- Marketing Communications: To send promotional emails about new offers and features (only if you opt in)
- Fraud Prevention: To detect and prevent fraudulent activity, spam, and terms violations
- Service Improvement: To analyze usage patterns and improve our platform's performance and features
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
- Customer Support: To respond to your questions, concerns, and support requests
5. Data Retention
We retain different types of data for varying periods based on legal and operational requirements:
- Account Data: Kept while your account is active, plus 2 years after account deletion (for legal and fraud prevention purposes)
- Click Data: Retained for 2 years from the date of click
- Conversion & Earnings Data: Retained for 7 years (for tax reporting and legal compliance)
- Contact Form Messages: Retained for 1 year
- Payment Records: Retained for 7 years (for tax and financial record-keeping)
- Subscription & Billing Data: Retained for 7 years after subscription ends (for tax and financial record-keeping)
- Referral Data: Retained for 2 years after referral relationship expires (12 months from referred user sign-up)
- Bank Account Details: Retained while your account is active; deleted within 30 days of account deletion (unless required for pending payouts or legal compliance)
You can request deletion of your data at any time (see Your Rights section). However, we may be required to retain certain data for legal compliance even after deletion requests.
6. Data Security
We implement industry-standard security measures to protect your information:
- Password Security: All passwords are hashed using bcrypt; we never store passwords in plain text
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
- Payment Security: Subscription payments are processed securely through our payment processor; we never store your full credit card details on our servers
- Bank Details Protection: Bank account information is encrypted at rest and access is strictly limited to authorized payment processing systems
- Database Access: Access to our databases is restricted to authorized personnel only
- Regular Security Reviews: We conduct regular security assessments and updates to our infrastructure
- Secure Hosting: Our data is hosted on secure, enterprise-grade infrastructure
Important: While we implement strong security measures, no system can guarantee 100% security. You are responsible for keeping your password confidential and logging out of shared devices.
7. Your Rights
Your General Rights
You have the following rights regarding your personal data:
- Access: Request access to your data and download it from your account settings
- Correction: Update or correct inaccurate information in your profile
- Deletion: Request deletion of your account and associated data
- Opt-Out: Unsubscribe from marketing emails at any time
- Withdraw Consent: Withdraw consent for data processing where consent was the legal basis
How to Exercise Your Rights
- Most actions can be performed directly from your account settings page
- To delete your account, visit Settings → Account → Delete Account
- To download your data, visit Settings → Privacy → Download My Data
- For other requests, contact us at [email protected]
For EU/UK Users (GDPR)
If you are located in the European Union or United Kingdom, you have additional rights under GDPR:
- Data Portability: Request your data in a structured, machine-readable format
- Object to Processing: Object to processing of your data for certain purposes
- Restrict Processing: Request restriction of processing under certain circumstances
- Lodge a Complaint: File a complaint with your local data protection supervisory authority
For California Users (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of what personal information we collect, use, and share
- Right to Delete: Request deletion of your personal information (subject to certain exceptions)
- Right to Opt-Out: Opt out of the sale of personal information (note: we do not sell your data)
- Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
To exercise these rights, contact us at [email protected]
8. International Data Transfers
Operating Location: Cashoy operates from Queensland, Australia.
Data Processing Locations: Your data may be processed and stored in the following locations:
- Australia (primary data storage and hosting)
- United States (payment processing and cloud services)
We ensure that appropriate safeguards are in place for international data transfers, including:
- Using service providers that comply with international data protection standards
- Implementing contractual protections with our service providers
- Ensuring data is encrypted in transit and at rest
By using Cashoy, you consent to the transfer and processing of your data in these locations.
9. Children's Privacy
Age Requirement: Cashoy is not intended for use by individuals under 18 years of age. Our Terms of Service require all users to be at least 18 years old.
No Knowing Collection: We do not knowingly collect personal information from children under 18. If we discover that we have inadvertently collected data from a minor, we will delete it promptly.
Parental Notification: If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will delete the information.
10. Third-Party Links
Our platform contains affiliate links to third-party advertiser websites and services. When you click on these links, you will be directed to external sites that are not operated by Cashoy.
Not Responsible: We are not responsible for the privacy practices, content, or security of third-party websites. Each advertiser has their own privacy policy and terms of service.
Review Their Policies: We strongly encourage you to review the privacy policies of any third-party sites you visit before providing them with personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
How We Notify You: When we make material changes to this policy, we will:
- Send an email notification to the address associated with your account
- Post a prominent notice on our platform
- Update the "Last Updated" date at the top of this page
Acceptance: Your continued use of Cashoy after we make changes to this policy indicates your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the platform and close your account.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
Privacy Contact:
Email: [email protected]
We will make reasonable efforts to respond to your inquiry within 2-3 business days.
By using Cashoy, you acknowledge that you have read, understood, and agree to this Privacy Policy.