Skip to main content
Back to Home

Privacy Policy

Last updated: January 2026

Your privacy is important to us. This policy explains how we collect, use, and protect your information when you use Cashoy.

Table of Contents

1. Information We Collect

Information You Provide

When you create an account and use Cashoy, you provide us with the following information:

  • Account Information: Username, email address, first name, last name, and date of birth
  • Payment Information: Bank account details for receiving payouts (account holder name, account number, BSB/routing number, SWIFT/BIC code as applicable), billing information for subscription payments
  • Subscription Information: Your subscription tier (Free or Pro), billing cycle preference, and subscription status
  • Referral Information: Your unique referral code and information about users you refer to the platform
  • Communications: Any messages you send us through our contact form or support channels
  • Profile Preferences: Notification settings, preferred social media platforms for promotions

Information Collected Automatically

When you use our platform, we automatically collect certain information:

  • Click Data: IP address, user agent (browser/device), referrer URL, timestamp when you click affiliate links
  • Device Information: Browser type, operating system, device type
  • Usage Data: Pages visited, features used, time spent on platform, interaction with offers
  • Cookies: Authentication tokens, session data (see Cookies section for details)

Information from Third Parties

We receive limited information from third-party services:

  • Affiliate Networks: Conversion data, earnings amounts, transaction IDs for attribution purposes
  • Payment Processor: Subscription status, payment confirmations, billing events for Pro subscriptions
  • Bank Transfer Providers: Payout confirmation status and transaction references

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Platform Operation: To provide and operate the Cashoy platform and its features
  • Payment Processing: To process your earnings and send payouts to your bank account
  • Subscription Management: To process Pro subscription payments, manage billing cycles, and provide access to Pro features
  • Referral Tracking: To track referrals, calculate referral commissions, and attribute referred users to your account
  • Conversion Tracking: To track clicks on affiliate links and attribute conversions to your account
  • Transactional Communications: To send emails about payout confirmations, account changes, and important platform updates
  • Marketing Communications: To send promotional emails about new offers and features (only if you opt in)
  • Fraud Prevention: To detect and prevent fraudulent activity, spam, and terms violations
  • Service Improvement: To analyze usage patterns and improve our platform's performance and features
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Customer Support: To respond to your questions, concerns, and support requests

3. How We Share Your Information

Service Providers We Share With

We share your information with trusted third-party service providers who help us operate our platform:

  • Payment Processor: To process Pro subscription payments and manage billing
  • Bank Transfer Providers: To process payout requests and send earnings to your bank account
  • Email Service (SendGrid): To send transactional and marketing emails
  • Hosting Providers: To host our application and store data securely
  • Affiliate Networks: We only share click IDs for conversion attribution; networks do NOT receive your personal information

What We Do NOT Do

  • We do NOT sell your personal information to third parties
  • We do NOT share your data with advertisers for marketing purposes
  • We do NOT give affiliate networks access to your personal details (name, email, etc.)

Required Disclosures

We may disclose your information if required to do so:

  • To comply with applicable laws, regulations, or valid legal processes
  • To protect and defend our rights, property, or safety and that of our users
  • In connection with a business transfer, merger, acquisition, or sale of assets

4. Cookies & Tracking

Cookies We Use

We use the following cookies to operate our platform:

CookiePurposeDuration
auth_tokenUser authenticationSession (expires when you close browser)
refresh_tokenKeep you logged in7 days
stripe_sessionSubscription checkout sessionSession

What We Do NOT Use

  • Third-party advertising cookies
  • Social media tracking pixels
  • Analytics services like Google Analytics

Click Tracking

When you click on affiliate links generated through Cashoy, we track certain information to attribute conversions to your account:

  • IP address (for fraud detection and geographic analysis)
  • User agent (browser and device information)
  • Referrer URL (where the click originated)
  • Timestamp

This data is used solely for conversion tracking and fraud prevention. We do not use it for advertising or share it with third parties except for conversion attribution purposes.

5. Data Retention

We retain different types of data for varying periods based on legal and operational requirements:

  • Account Data: Kept while your account is active, plus 2 years after account deletion (for legal and fraud prevention purposes)
  • Click Data: Retained for 2 years from the date of click
  • Conversion & Earnings Data: Retained for 7 years (for tax reporting and legal compliance)
  • Contact Form Messages: Retained for 1 year
  • Payment Records: Retained for 7 years (for tax and financial record-keeping)
  • Subscription & Billing Data: Retained for 7 years after subscription ends (for tax and financial record-keeping)
  • Referral Data: Retained for 2 years after referral relationship expires (12 months from referred user sign-up)
  • Bank Account Details: Retained while your account is active; deleted within 30 days of account deletion (unless required for pending payouts or legal compliance)

You can request deletion of your data at any time (see Your Rights section). However, we may be required to retain certain data for legal compliance even after deletion requests.

6. Data Security

We implement industry-standard security measures to protect your information:

  • Password Security: All passwords are hashed using bcrypt; we never store passwords in plain text
  • Encryption in Transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
  • Payment Security: Subscription payments are processed securely through our payment processor; we never store your full credit card details on our servers
  • Bank Details Protection: Bank account information is encrypted at rest and access is strictly limited to authorized payment processing systems
  • Database Access: Access to our databases is restricted to authorized personnel only
  • Regular Security Reviews: We conduct regular security assessments and updates to our infrastructure
  • Secure Hosting: Our data is hosted on secure, enterprise-grade infrastructure

Important: While we implement strong security measures, no system can guarantee 100% security. You are responsible for keeping your password confidential and logging out of shared devices.

7. Your Rights

Your General Rights

You have the following rights regarding your personal data:

  • Access: Request access to your data and download it from your account settings
  • Correction: Update or correct inaccurate information in your profile
  • Deletion: Request deletion of your account and associated data
  • Opt-Out: Unsubscribe from marketing emails at any time
  • Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

How to Exercise Your Rights

  • Most actions can be performed directly from your account settings page
  • To delete your account, visit Settings → Account → Delete Account
  • To download your data, visit Settings → Privacy → Download My Data
  • For other requests, contact us at [email protected]

For EU/UK Users (GDPR)

If you are located in the European Union or United Kingdom, you have additional rights under GDPR:

  • Data Portability: Request your data in a structured, machine-readable format
  • Object to Processing: Object to processing of your data for certain purposes
  • Restrict Processing: Request restriction of processing under certain circumstances
  • Lodge a Complaint: File a complaint with your local data protection supervisory authority

For California Users (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: Request disclosure of what personal information we collect, use, and share
  • Right to Delete: Request deletion of your personal information (subject to certain exceptions)
  • Right to Opt-Out: Opt out of the sale of personal information (note: we do not sell your data)
  • Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at [email protected]

8. International Data Transfers

Operating Location: Cashoy operates from Queensland, Australia.

Data Processing Locations: Your data may be processed and stored in the following locations:

  • Australia (primary data storage and hosting)
  • United States (payment processing and cloud services)

We ensure that appropriate safeguards are in place for international data transfers, including:

  • Using service providers that comply with international data protection standards
  • Implementing contractual protections with our service providers
  • Ensuring data is encrypted in transit and at rest

By using Cashoy, you consent to the transfer and processing of your data in these locations.

9. Children's Privacy

Age Requirement: Cashoy is not intended for use by individuals under 18 years of age. Our Terms of Service require all users to be at least 18 years old.

No Knowing Collection: We do not knowingly collect personal information from children under 18. If we discover that we have inadvertently collected data from a minor, we will delete it promptly.

Parental Notification: If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will delete the information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You: When we make material changes to this policy, we will:

  • Send an email notification to the address associated with your account
  • Post a prominent notice on our platform
  • Update the "Last Updated" date at the top of this page

Acceptance: Your continued use of Cashoy after we make changes to this policy indicates your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the platform and close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

Privacy Contact:

Email: [email protected]

We will make reasonable efforts to respond to your inquiry within 2-3 business days.

By using Cashoy, you acknowledge that you have read, understood, and agree to this Privacy Policy.