Privacy Policy

Kashu, Inc (“Kashu,” “we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of your personal information. This Privacy Policy describes the types of data we collect, how we use it, how we secure it, and your rights in relation to your data when you use our services, website, mobile application, and any affiliated platforms (collectively, the “Services”).

We process personal data in compliance with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other applicable data protection laws within the United States and globally, as necessary.

‍

1. Information We Collect

We may collect and process both Personal Information and Non-Personal Information as defined below:

Personal Information includes, but is not limited to:

Full name, address, email address, and telephone number.
Credit card and financial account details.
Government-issued identification (e.g., driver’s license, passport).
Biometric data used for identity verification (e.g., facial recognition).
Transactional and payment history, including timestamps and recipient information.
Location data (where permitted).
Device identifiers and online activity data associated with your account.

Non-Personal Information includes:

Browser and device metadata.
IP addresses, operating system, and access logs.
Session and behavioral analytics (such as pages visited, clicks, or referral URLs).

We collect this information directly from you during registration, when you conduct transactions, through your interactions with our platform, and indirectly via cookies, APIs, service providers, and financial institutions.

2. How We Use Your Information

We use your information for legitimate business purposes, including:

To establish and verify your identity in accordance with KYC (Know Your Customer) obligations.
To process transactions, disburse funds, and deliver Services you request.
To manage your account and send you relevant operational or marketing communications.
To comply with applicable financial regulations, audit requirements, and law enforcement requests.
To detect, investigate, and prevent fraud, cybersecurity threats, and unauthorized use of the platform.
To enhance user experience, develop new features, and maintain platform integrity.
To fulfill contractual obligations with third-party service providers, banking partners, and compliance consultants.

We do not use your personal information for any automated decision-making that produces legal effects or significantly affects you, unless otherwise disclosed and explicitly consented to.

3. Sharing and Disclosure of Information

Kashu does not sell personal information. We may share your data in the following scenarios:

With Service Providers and Vendors: We engage third-party vendors for KYC/AML verification, payment processing, cloud storage, technical support, and regulatory compliance. These parties are contractually bound to confidentiality and must follow stringent data protection obligations.
With Financial Institutions: We work with licensed financial entities to enable credit-to-cash transactions, peer transfers, and account disbursements. Information is shared only to the extent required to fulfill the transaction.
For Legal Compliance and Protection: We may disclose personal information if required by law, subpoena, warrant, or court order; or to respond to a lawful request from a regulatory or law enforcement agency.
In Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, and you will be notified accordingly.

4. Data Security and Integrity

We implement physical, administrative, and technical safeguards to protect the confidentiality, integrity, and availability of your information. These include:

TLS 1.2+ encrypted transmission of all sensitive data.
End-to-end tokenization for payment credentials.
Role-based access controls and multi-factor authentication for internal systems.
Routine vulnerability scanning, penetration testing, and SOC 2 Type II security audits.

Despite our efforts, no system can guarantee absolute security. You are responsible for safeguarding your account credentials and alerting us of any suspected unauthorized access.

5. Data Retention

We retain personal data only for as long as necessary to:

Fulfill the purposes described in this Privacy Policy.
Comply with legal, tax, audit, and regulatory obligations.
Resolve disputes and enforce our agreements.

When no longer needed, your personal data will be securely deleted or anonymized.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access – the right to request a copy of the information we hold about you.
Correction – the right to request correction of inaccurate or incomplete data.
Deletion – the right to request deletion of your data, subject to lawful exemptions.
Restriction – the right to restrict processing in certain circumstances.
Portability – the right to request transfer of your data to another provider.
Objection – the right to object to processing where legally applicable.
Do Not Sell – the right (for California residents) to opt-out of data sales, although Kashu does not sell personal data.

You may submit these requests by emailing help@kashupay.com or writing to our Privacy Office at the address above. We will respond to verifiable requests within the time required by law.

7. Use of Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance the user experience, provide secure logins, analyze user behavior, and improve service functionality. You may control the use of cookies through your browser settings. Disabling cookies may impact your ability to use certain features of the platform.

8. International Users

Our Services are hosted in the United States and governed by U.S. law. If you access our platform from outside the United States, you acknowledge that your personal information will be transferred to, stored, and processed in the U.S., where data protection laws may differ from those of your jurisdiction.

9. Children’s Privacy

Our platform is not intended for children under the age of 18. We do not knowingly collect or solicit personal information from individuals under 18. If we become aware that such data has been collected without verified parental consent, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made, we will revise the “Effective Date” at the top of this policy and notify users through the platform or email where appropriate. Continued use of our Services constitutes your agreement to the revised terms.

Consumer Rights Policy

This CCPA Policy supplements the Kashu, Inc Privacy Policy and applies solely to residents of the State of California (“Consumers”) pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively referred to as the “CCPA”). This Policy is intended to provide Consumers with a clear understanding of their data privacy rights and how to exercise those rights when engaging with Kashu’s products and services.

1. Overview of Rights Under CCPA

As a California resident, you have specific rights concerning your personal information. These rights include:

_{1.1 Right to Know}

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, as well as:

The categories of sources from which the personal information was collected;
The business or commercial purposes for collecting, sharing, or selling personal information;
The categories of third parties to whom the personal information was disclosed;
Whether we sold or shared your personal information.

_{1.2 Right to Delete}

You have the right to request that we delete personal information we have collected from you, subject to certain legal exceptions. For example, we may retain personal information necessary to:

Complete a transaction or fulfill a contract;
Detect security incidents or fraud;
Comply with a legal obligation;
Conduct internal research for technological development;
Use information internally in a lawful manner consistent with your relationship with us.

_{1.3 Right to Correct Inaccurate Information}

You have the right to request that we correct inaccurate personal information we maintain about you.

_{1.4 Right to Opt-Out of Sale or Sharing}

Kashu does not sell your personal information in the conventional sense (for monetary value). However, under the broad definition of “sale” or “sharing” under the CCPA, some data transfers related to targeted advertising or marketing may qualify. You have the right to opt-out of such practices. If applicable, we will provide a “Do Not Sell or Share My Personal Information” link on our website and mobile application.

_{1.5 Right to Limit Use of Sensitive Personal Information}

You may have the right to limit the use and disclosure of sensitive personal information. Kashu uses sensitive personal information (e.g., financial data, identification documents, biometric data) only as necessary to provide our Services, fulfill legal obligations, and ensure platform security.

_{1.6 Right to Non-Discrimination}

We will not discriminate against you for exercising your CCPA rights. This includes denying services, charging different prices, or providing a different level or quality of service.

2. Categories of Personal Information Collected

Over the past twelve (12) months, Kashu has collected the following categories of personal information from Consumers:

Identifiers: Full name, postal address, email address, phone number, government-issued ID.
Financial Information: Credit card numbers, transaction history, bank account details.
Biometric Data: Facial recognition data for identity verification purposes.
Commercial Information: Details of transactions made through our platform.
Internet or Network Activity: IP address, device identifiers, browser type, and usage analytics.
Geolocation Data: When enabled and relevant to transaction routing.
Professional or Employment Information: When necessary for business account verification.
Inferences Drawn: Profiling based on usage patterns to enhance user experience.

This information is collected directly from you and your interactions with our Services, and from third-party verification and service providers.

3. Data Use and Retention

Kashu uses your personal information solely for legitimate business purposes, including but not limited to:

Verifying your identity;
Processing payments and financial transfers;
Detecting and preventing fraud;
Complying with state and federal regulations;
Enhancing our Services and maintaining security.

We retain your personal information only for as long as reasonably necessary to fulfill these purposes, comply with legal obligations, and maintain audit and reporting requirements.

4. Exercising Your Rights

To exercise any of your CCPA rights, you may submit a verifiable request through one of the following methods:

Email: help@kashupay.com
Mail: Kashu, Inc
1603 Capitol Ave Ste 415 #674380 Cheyenne, WY 82001

We will verify your identity by matching the information you provide with the information we maintain. If you have an account with us, we may use your login credentials to authenticate your request. If you do not have an account, we may request additional information to verify your identity. Requests will be processed within forty-five (45) days of receipt, with the possibility of a forty-five (45) day extension where reasonably necessary, and with notice provided to you.

5. Authorized Agents

You may designate an authorized agent to submit a request on your behalf. We may require written proof of the agent’s authority and verification of your identity before acting on the request.

6. Record Keeping and Policy Updates

We will maintain a record of all CCPA-related requests for at least twenty-four (24) months as required by the CCPA. Kashu reserves the right to amend this policy at any time to reflect changes in the law, regulatory guidance, or our data practices. When changes are made, we will update the “Effective Date” and post the revised policy on our website.

Business Owner Rights Policy

1. Introduction

This Business Owner Rights Policy (“Policy”) sets forth the rights, privileges, and protections available to individuals or entities registered with Kashu, Inc (“Kashu,” “we,” “our,” or “the Company”) as business clients (“Business Owners,” “you,” or “your”). This document applies to all Business Owners who use our platform, mobile application, or affiliated services for commercial, entrepreneurial, or investment purposes. Kashu is committed to fostering transparent and ethical business relationships, respecting the operational independence of our clients, and ensuring fair treatment across all touchpoints. This Policy is not exhaustive of your legal rights but is intended to codify the standards of practice Kashu follows to uphold your interests as a business partner and platform user.

2. Right to Access and Use Services

As a Business Owner with an active and verified account, you have the right to access Kashu’s financial tools, technology services, and integrations under the terms of your agreement and in accordance with all applicable laws. This includes the ability to:

Link business credit cards or accounts to your profile;
Initiate credit-to-cash transactions and wire/ACH transfers;
View historical activity and download payment/export logs;
Access tools for transaction management, peer payments, or service provider payments.

Your access is subject to ongoing compliance with our Terms of Service and any applicable usage limitations disclosed in advance.

3. Right to Financial Transparency

You are entitled to full transparency regarding:

Fees: All applicable service fees, processing costs, and any other charges will be disclosed prior to transaction execution. No hidden fees shall be levied.
Processing Timeframes: Kashu shall provide accurate and reliable information about the expected timing for processing, settlement, or refunds related to financial transactions.
Reconciliation and Receipts: For every completed transaction, you have the right to receive detailed documentation outlining the date, amount, payment method, service type, and associated fees.

All financial data provided is subject to your review, dispute, or inquiry. We will investigate any billing discrepancies brought to our attention in a timely and professional manner.

4. Right to Privacy and Confidentiality

Kashu acknowledges your right to maintain the confidentiality of sensitive business data. We are committed to:

Protecting any data submitted to us under applicable data privacy laws (including the CCPA and GLBA);
Preventing unauthorized disclosures of financial or operational data;
Ensuring that your transaction data is not used for marketing purposes without explicit consent;
Encrypting all transactional and identifying data using industry-leading standards.

Your confidential business records will only be shared with service providers or regulators under secure and legal conditions.

5. Right to Independent Business Decisions

As a Business Owner, you retain full autonomy over how and where to use your available funds. Kashu will never:

Interfere with your business decision-making;
Impose limitations on who you pay or transfer funds to (other than for regulatory compliance reasons);
Require exclusive use of our platform as a condition of service.

You are encouraged to use Kashu in a manner that complements your broader financial and operational strategy.

6. Right to Equal Access and Non-Discrimination

All Business Owners shall be treated equitably regardless of size, location, industry, credit profile, or account tenure. We do not discriminate in:

Approval of accounts (except for compliance purposes);
Access to product features;
Platform support;
Pricing or fee structures.

Any eligibility criteria or usage restrictions will be disclosed clearly and consistently.

7. Right to Account Portability and Closure

At any time, you have the right to:

Access and download your transaction history in a structured, portable format;
Request full account closure and data deletion (subject to retention policies governed by law or regulation);
Transition to or from Kashu without penalty, withholding, or obstruction.

Kashu will honor all data export and account termination requests in a manner that respects your independence and time.

8. Right to Dispute Resolution and Escalation

You are entitled to a fair and timely resolution process in the event of:

Unauthorized transactions;
Platform errors;
Support neglect;
Contractual disputes;
Account freezes or service interruptions.

Kashu shall provide:

A dedicated escalation pathway through the Client Success and Legal teams;
A record of your request, issue status, and resolution;
A final written explanation, including your appeal rights if applicable.

If no internal resolution is satisfactory, you may pursue resolution through mediation, arbitration, or the courts as defined in our Terms of Service.

9. Right to Platform Stability and Notification

Kashu commits to delivering a stable and secure platform. You have the right to:

Receive notice of system outages, scheduled maintenance, or substantial changes to service availability;
Be informed of any updates that affect your data, rights, or financial operations;
Access technical support or live chat assistance during defined service hours.

Reasonable efforts will be made to minimize downtime and provide business continuity guidance during outages.

10. Right to Participate in Product Feedback and Roadmap Input

Kashu values the input of its business clientele. As a Business Owner, you are entitled to:

Participate in surveys, beta features, or roadmap discussions;
Provide feedback that may shape future product enhancements;
Submit feature requests or integration ideas through formal channels like email.

Although implementation is not guaranteed, all feedback is reviewed and tracked internally for prioritization.

11. Right to Regulatory Transparency

You have the right to know:

What licenses and regulatory bodies govern Kashu’s financial operations;
How compliance with federal and state-level financial regulations is managed;
How your account activity is reported to or shared with regulators (when applicable).

We are obligated to cooperate with regulatory authorities but will ensure that such compliance does not infringe upon your commercial rights without notice.

12. Right to Amendment Notice

This Business Owner Rights Policy may be amended from time to time to reflect changes in our operations, regulatory guidance, or platform structure. All material changes will be:

Communicated to active users via email and/or in-platform notification;
Reflected by updating the Effective Date listed above;
Implemented no sooner than 15 days from notice unless legally required sooner.

Continued use of the Services constitutes your acceptance of such changes.

13. Enforcement and Contact

Violations of this Policy by internal staff or affiliated partners may result in disciplinary action or termination of access rights. Business Owners who believe their rights have been violated are encouraged to contact us directly: