Privacy Policy

Our role depends on whose data it is, and the distinction matters for your rights.

For merchant account information — the details of the person and business using Cashundo — we are the data controller. We decide what is collected and why.

For store data and store-visitor data — orders, products, customers and website activity belonging to a merchant’s shop — we act as a data processor on that merchant’s instructions. The merchant is the controller. If you shopped at a store and want your data removed, the merchant is the right first contact, and we will act on their instruction.

When a merchant connects a store, we read the following through that platform’s official API, using access the merchant explicitly grants and can revoke at any time.

Reading is the default and covers almost everything above. Cashundo makes a change only where you have approved that specific change: recording a product cost back to Shopify, adding a tag to an order, creating a discount code you asked for, pausing a Meta campaign, or changing a daily budget.

Each of those arrives as a proposal describing exactly what will happen. Nothing is carried out until you approve it, the approved wording is what executes, and the result is recorded so you can see afterwards what was done. Cashundo never creates campaigns, edits targeting or creative, deletes anything, or acts without being asked.

Merchants may install our first-party analytics script on their storefront. Where they do, we collect the following about visits to that merchant’s store, on the merchant’s behalf:

This data belongs to the merchant whose store it was collected on. It is never combined across different merchants, and never sold, rented, or used to build advertising profiles or audiences.

These are deliberate design choices, not omissions. The application is built so that:

• We do not copy shopper names, email addresses, phone numbers or street addresses out of a merchant’s store.
• We never receive payment card numbers, bank details or any payment credentials. Payments are handled entirely by the store’s own provider and never pass through Cashundo.
• We do not use special category data such as health, biometric, religious or political information.
• We do not track individuals across websites we do not operate for a merchant, and we do not participate in third-party advertising networks.

• Providing the analytics, reporting and attribution the merchant asked for.
• Calculating revenue, costs, profitability and advertising performance.
• Answering a merchant’s questions about their own store through our assistant.
• Keeping accounts secure and preventing abuse.
• Diagnosing faults and improving reliability.
• Sending service messages about the account.

We do not use merchant or visitor data to train machine learning models, and we do not sell data to anyone, for any purpose.

Where the UK GDPR or EU GDPR applies, we rely on:

• Contract — providing the service a merchant has signed up for.
• Legitimate interests — keeping the service secure, reliable and free of abuse, balanced against the rights of the people concerned.
• Consent — where a merchant is required to obtain it for analytics on their storefront, that consent is collected by the merchant, and we process on their instruction.
• Legal obligation — where we must retain records to comply with law.

We use a small number of service providers to run Cashundo. Each acts on our instructions under a written agreement, and none may use the data for their own purposes.

We may also disclose information where required by law, to protect our rights or the safety of others, or to a successor entity in a merger or acquisition — in which case this policy continues to apply until you are told otherwise.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

Cashundo includes an assistant that answers questions about a merchant’s own store. When it is used, the question and the figures needed to answer it are sent to our model provider.

The assistant retrieves aggregated figures — totals, counts and averages — through a fixed set of internal functions. It has no general access to the database and cannot query it freely. Shopper personal details are not present in what it receives, because we do not hold them.

Our model providers do not use data submitted through their APIs to train their models.

On cashundo.com, we set cookies that are strictly necessary to keep you signed in. We do not use advertising or third-party tracking cookies on our own site.

On a merchant’s storefront, where they have installed our script, we set one first-party cookie containing a random visitor identifier, and use the browser’s session storage to hold the current session. These allow a visit to be connected to a later purchase. The cookie expires after twelve months.

Merchants are responsible for any consent banner their jurisdiction requires, and for honouring the choices their visitors make.

Cyberrig Private Limited is established in India. Our service providers operate data centres in several countries, so information may be processed outside the country where it was collected.

Where data protected by the UK or EU GDPR is transferred outside those jurisdictions, we rely on the European Commission’s Standard Contractual Clauses, or an equivalent lawful mechanism, in our agreements with those providers.

We may retain information for longer where the law requires it, or where it is needed to establish or defend a legal claim.

• All traffic is encrypted in transit using TLS, and data is encrypted at rest by our infrastructure providers.
• Every workspace’s data is isolated at the database level by row-level security policies, so one merchant’s records cannot be read by another.
• Platform access tokens are stored separately from ordinary data, in a location no client application can read.
• Access to production systems is limited to personnel who need it.

No system is perfectly secure. If a breach affects your information, we will notify you and the relevant regulator as required by law and without undue delay.

Depending on where you live, you may have the right to access a copy of your information, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where we rely on it.

If you are a California resident, you additionally have the right to know what is collected and to request deletion, and the right not to be discriminated against for exercising either. As stated above, we do not sell personal information.

To exercise any of these, contact us using the details below. We respond within 30 days. There is no charge unless a request is manifestly unfounded or excessive. You also have the right to complain to your local data protection authority.

We hold no name, email address or payment details for you. What we may hold, on behalf of the store, is a random identifier and a record of pages visited and actions taken on that store’s website.

The store is the controller of that information, so please contact the store first — they can instruct us to delete it. You may also contact us directly and we will pass the request on and act on it. Clearing your browser cookies for that store also ends the association immediately.

Cashundo is a business tool and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child’s information has reached us, contact us and we will delete it.

We will update this page when our practices change, and revise the date at the top. If a change materially affects how we handle your information, we will tell account holders by email or in the application before it takes effect.