Your data should not become pressure.

This policy explains how CashMaya handles personal data for account creation, identity verification, loan review, disbursement, repayment, support, fraud prevention, and legal compliance in the Philippines.

CashMaya does not use contact lists, social media accounts, photos, or device files for public shaming, harassment, or pressure on people who are not the borrower.

1. Who controls your personal data

CashMaya controls borrower data processed through the website, app, customer support, payment servicing, and loan account records.

2. Data we collect

Account details, including name, mobile number, email address, login records, and account security events.
Identity information, including date of birth, address, ID details, selfie or liveness check, and verification result.
Application information, including requested amount, income or cash-flow details, employment or source-of-funds information, and submitted documents.
Loan account records, including offer details, service fees, repayment schedule, payment references, receipts, disputes, and support cases.
Device and security signals needed to prevent fraud, secure the account, and keep the service working.

3. Why we use the data

To create and secure your CashMaya account.
To verify identity, detect fraud, assess affordability, and review loan eligibility.
To show loan offers, fees, due dates, official payment routes, receipts, and account status.
To send OTPs, due-date reminders, repayment confirmations, account notices, and support updates.
To respond to complaints, disputes, privacy requests, legal requests, audits, and regulatory obligations.

4. App permissions

CashMaya asks for permissions only when needed for a clear purpose. Camera access may be used for ID capture, selfie checks, or receipt upload. Notifications may be used for OTPs, account alerts, due-date reminders, and support updates. Permission choices can be changed in your device settings, but some features may stop working.

5. Sharing and service providers

We may share data with service providers that help operate CashMaya, such as:

identity verification, fraud prevention, hosting, analytics, customer support, SMS, email, and payment service providers;
banks, payment partners, collection service providers, auditors, advisers, and regulators when required;
authorized public authorities when disclosure is required by law, lawful order, or regulatory process.

Service providers must process borrower data only for authorized CashMaya purposes.

6. Collections and borrower protection

CashMaya may send repayment reminders and account notices using official channels. We do not publish debts, threaten borrowers through their contacts, or use unrelated personal data for public pressure.

7. Retention and security

We keep personal data for as long as needed to provide the service, manage active or closed loan accounts, resolve disputes, detect fraud, comply with law, and maintain business records. We use access controls, encryption where appropriate, monitoring, and staff restrictions to protect borrower data.

8. Your privacy rights

Subject to the Data Privacy Act of 2012 and applicable rules, you may request access, correction, deletion, blocking, objection, data portability, or information about how your data is processed. Privacy requests are handled inside the CashMaya account after identity verification.

9. Updates

We may update this policy when CashMaya changes its services, partners, legal obligations, or security practices. The latest version will be posted on this page with the effective date.

Effective date: July 17, 2026