Privacy Notice — Financial Information (GLBA)

This notice explains how Cash’On collects, uses, shares and protects the financial information of people who hold an account with us. It is written to meet the privacy requirements of the Gramm-Leach-Bliley Act (“GLBA”) and the FTC Privacy and Safeguards Rules. “Cash’On,” “we,” and “us” refer to the service operator, whose legal identity and contact details must be confirmed before launch. Cash’On is not a bank, a licensed money transmitter, or a deposit-insured institution, and this notice does not represent that it is. Our general Privacy Policy and Terms of Service also apply.

1. Who this notice covers

This notice applies to customers — people who open and hold a Cash’On account — and to their nonpublic personal information. “Nonpublic personal information” means personally identifiable financial information, such as your name and contact details, account balance, payment history, fees, and the payment methods you connect. Information that is publicly available or that we receive about someone who does not hold an account is handled under our Privacy Policy instead.

2. Information we collect

• Information you give us: name, email address, phone number, $cashtag, password, verification codes, account settings, payment-method labels and last four digits, and the notes you attach to payments.
• Information about your account: balances, deposits, transfers, Tap to Pay charges, fees and who paid them, payment requests, bill splits, referral rewards, and the dates and amounts of those records.
• Information from your use of the service: device and browser details, sign-in and session records, error and request logs, and camera frames used only on your device to read a QR code — those frames are not uploaded or saved by Cash’On.
• Information we receive from others: confirmation that you control an email address or phone number, and — if live financial services are introduced — the identity, card, and bank information our payment partners provide so they can process payments for you.

3. Why we collect it

We collect information to open and maintain your account, display your balance and activity, find the person you want to pay, complete payments and charges, calculate fees, deliver referral rewards, prevent fraud and scams, respond to support requests, and meet applicable legal obligations. We do not use your financial information to build advertising profiles.

4. Who we disclose it to

• Service providers that act for us: our hosting and account platform, message delivery for verification codes, and — when live payments are enabled — the named payment partners that move or hold funds. They receive only what they need to perform their role and are bound to keep it confidential and use it for us only.
• People you transact with: the other side of a payment or request can see the amount, date, note, and your display name and $cashtag.
• Legal and safety disclosures: when required by law, in response to a valid legal process, to protect rights or safety, or in a business transfer subject to confidentiality obligations.
• Authorized Cash’On staff: a limited number of administrators may review accounts, balances, transactions, and scam reports for oversight and fraud review.

5. Sharing for marketing and your opt-out choice

We do not share your nonpublic personal information with nonaffiliated third parties so that they can market their own products or services to you, and we do not sell your personal information. Because we do not share for that purpose, we do not offer an opt-out of third-party marketing sharing. If we ever decide to share your information in a way that would give you a right to opt out, we will tell you first and give you a clear way to exercise that choice before the sharing begins.

6. How we protect your information

We maintain a written information security program designed to meet the FTC Safeguards Rule. It includes a designated person responsible for the program, regular risk assessments, access controls and multi-factor authentication for staff systems, encryption of information in transit and of sensitive data at rest, secure disposal and retention limits, vetting and monitoring of service providers, change and development controls, and a written incident-response plan. Optional device unlock uses your device’s own authentication, so Cash’On does not receive your face image or fingerprint. No method of protection is perfect, and you should protect your password and device and never share a verification code.

7. Never give out your codes

Cash’On staff will never ask you for your password, PIN, or a one-time verification code. Anyone who does is committing a scam attempt, which the law treats as pretexting. Report it through the Block and Report actions in the app.

8. Keeping your information accurate

You can correct your display name, $cashtag, contact details, and device-unlock preferences from Account settings, and you can stop sharing your payment link at any time. Some records — such as completed transactions involving another person — cannot be rewritten because they are also that person’s record. Ask us about any other correction and we will handle it as our retention rules and the law allow.

9. How and when you receive this notice

We provide this notice when you open an account, publish it at this address, and deliver or make it available to you annually while your account is open. When our practices change materially we update this page with a new date and, where the law requires, give additional notice or ask for your agreement.

10. Other rights you may have

Depending on where you live, state privacy laws and other federal rules may give you rights to access, correct, delete, or obtain a copy of your information, to restrict certain uses, and to complain to a regulator. GLBA and this notice do not reduce any consumer, payment-dispute, unauthorized-transaction, or error-resolution rights that apply to you. We may need to verify your identity before acting on a request.

11. Contact

A verified privacy and support email address, the operator’s legal business name, and a mailing address have not yet been supplied and must be published before launch, together with a working channel for security complaints and privacy requests. Until then, do not send identity documents, card numbers, or verification codes to any address claiming to be Cash’On.