Overview
Kashu is built on the principle that your money and data must always remain secure. We combine bank-level encryption, biometric authentication, and strict privacy standards to protect your account and personal information.
This statement outlines how Kashu protects you and what we expect from our users in return.
Key Points
All transactions are encrypted and monitored for fraud.
Kashu never sells personal data.
You are responsible for keeping your login credentials private.
Kashu’s Security Practices
Encryption: All sensitive data is encrypted in transit and at rest (TLS 1.2+).
Fraud Monitoring: Our Fraud Shield system flags unusual activity for review.
Biometric & 2FA: Face ID, fingerprint, and one-time passcodes are supported for secure login.
Access Controls: Only authorized Kashu staff may access limited user data for support or compliance.
Compliance Frameworks: Kashu maintains safeguards consistent with PCI DSS, SOC 2, ISO 27001, and AML/KYC requirements.
User Responsibilities
✅ Do
Keep your password and PIN private.
Enable two-factor authentication (2FA) and biometric login.
Regularly review your account activity for suspicious transactions.
Report suspected fraud immediately to [email protected].
❌ Do Not
Share your Kashu credentials or 2FA codes with anyone.
Use another person’s identity or payment information.
Ignore security alerts from your bank or Kashu.
Privacy Commitments
No Selling of Data: Kashu does not sell personal information to third parties.
Data Sharing: We share only what is necessary with banking partners and regulators to process your transactions lawfully.
Retention: Data is stored only as long as required for regulatory, tax, or service purposes.
User Rights: Depending on your jurisdiction, you may request access, correction, or deletion of your personal data (CCPA, GDPR, etc.).
Cookies & Tracking: Kashu uses cookies to enhance performance and detect fraud; see our [Cookie Policy] for details.
Compliance Statement
Kashu complies with all applicable U.S. federal and state regulations, including the Gramm-Leach-Bliley Act (GLBA), the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and card network rules.
Use of Kashu is subject to our Terms of Service, User Agreement, and Privacy Policy. We may update this statement as laws or technology change.
Need Help?
If you have questions about Kashu’s security or privacy protections, contact us at [email protected]