Draft — not yet reviewed by a lawyer.
This page describes what Cashout actually collects and does with it today, based on the codebase. It is not final legal advice and has not been reviewed by a qualified Australian lawyer. Get that review, and confirm it against your actual hosting/provider setup, before relying on this to operate a live service.
Privacy Policy
This policy explains what personal information Cashout collects, how it's used, and your rights. It's intended to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1. What we collect
- Account details: name, email, and a hashed password (we never store your password in plain text).
- Contact and address details you provide in your profile: phone number, address, city, state, postcode.
- Deal, submission, quote, and drop-off history: what you've committed to, shipped, and been paid, and any messages exchanged with our staff.
- Payout details: for a bank transfer, only the last 4 digits of your account number plus your BSB (the full account number is never stored); for PayID, the identifier itself.
- Session and audit information: login sessions and a record of account and financial changes, for security and dispute resolution.
We don't collect government ID numbers, and we don't collect payment card details.
2. How we use it
To run your account and the deals/submissions/payouts you use it for; to verify submissions and resolve content mismatches; to email you about your account, submissions, and payouts; and to detect and prevent fraud or abuse of the service.
3. Who we share it with
We don't sell your personal information. We share what's necessary with service providers that help us run Cashout — for example, an email delivery provider to send you account and submission notifications, and (once configured) a shipping carrier to generate labels and track parcels. We may disclose information if required by law.
4. Storage and security
Your password is hashed, never stored or logged in plain text. Sessions are random, revocable tokens, not something that can be decoded to reveal your identity on their own. Full bank account numbers are never persisted — only the last 4 digits, after the full number has been used once to extract them. Changing your payout method requires a one-time email code, not just being logged in.
5. Access, correction, and complaints
You can view and update most of your information yourself in Settings. To request a copy of your information, correct it, or raise a privacy complaint, contact us via the details on our Contact page. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
6. Retention and account closure
If you close your account, we anonymize your profile (name, phone, address) rather than deleting your transaction history outright, since financial and audit records need to be kept for tax and record-keeping purposes — they're just no longer linked to an identifiable account after closure.
7. Changes to this policy
We may update this policy from time to time; the current version number is shown in the admin Settings page.