1. Overview
AutoCash (“we”, “us”) provides autonomous freelancing automation services. This policy explains what data we collect, how we use it, and the choices you have. We collect the minimum data needed to operate the platform and we never sell personal information.
2. Data we collect
Account data. Your email address, your password (stored only as a hash, never in readable form), your name and company if you give them, your payout currency, and your plan.
Marketplace connections. Which marketplaces you have connected, the label and handle you gave each connection, and the access key for it. An access key is encrypted before it is stored and is never readable afterwards — not by you, not by our support staff, and not in any export. What the app can display is its last four characters.
Activity data. Your gigs, the orders won against them, the deliverables produced, your earnings and payouts, and a record of each automation run with its counts and outcome.
Payment data. We do not collect or store card numbers. Where a payment or payout is handled by a regulated payment provider acting for us, that provider holds those details and we hold only a reference to the transaction.
3. How we use data
To operate the service: to find and carry out work on your behalf on the marketplaces you have connected, to record what you earned and what it cost, to pay you out, and to detect abuse. We do not sell personal data and we do not share it for advertising. We use a small number of processors to run the service — categories rather than names here, because the specific suppliers can change: a managed database and authentication provider, an application host, a transactional email provider, a payment and payout provider, and an inference provider that generates proposal and deliverable text. Each is bound to use the data only to provide that service to us. The current list, with names, is available on request from the address below.
4. Data retention
An active account keeps its data until you ask us to delete it. When an account is closed we delete its personal data within 30 days, except records we are required to keep — financial records, which we hold for as long as tax law requires, and the audit log of privileged changes, which exists so that a change cannot be made without a trace. Deleting a marketplace connection destroys its stored access key at the same time.
5. Your rights
You can request export or deletion of your personal data at any time by emailing privacy@autocash.app. EU and California residents have additional rights under GDPR and CCPA — we honor all of them.
6. Security
Data is encrypted in transit, and marketplace access keys are additionally encrypted by us before storage with a key the database itself does not hold. Access is enforced per account in the database as well as in application code, so no page, action or endpoint can reach another account’s records. Privileged changes are appended to a log that cannot be edited from the application. We hold no third-party security certification and we do not claim one; if you need a specific assurance before connecting an account, ask us what is actually in place rather than assuming.
7. Contact
Questions? privacy@autocash.app