Draft — not legal advice
This describes how the product works today. It must be replaced with terms drafted for each jurisdiction before CASH takes real money.
Privacy policy
Version draft
What we collect
Your name, email address, phone number and country of residence when you register. Your identity document and a selfie when you verify. Your recipients' names and bank details when you add them. A record of every transfer you make.
Why we collect it
To operate your account, to move your money, and because the law requires us to verify who our customers are and to monitor for financial crime. We keep records for as long as financial regulation requires, which is longer than your account may be open.
How it is protected
Your password is hashed and can never be recovered, only reset. Your identity documents are stored privately, never on the public web, and every time one is opened it is recorded against the person who opened it. Recipient account numbers are encrypted and are only decrypted at the moment a payment is sent.
Who we share it with
Our identity verification, payment and payout providers, so that we can verify you and move your money. Regulators and law enforcement where we are legally required to. We do not sell your data.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct it, and ask us to delete it — though we must keep some records for a legally required period even after your account closes. Contact support to make a request.
Contacting you
We send security notices — a new sign-in, a password change — whatever your settings say, because those messages are how you find out about a problem. You control everything else in Settings.