Privacy Policy
This Privacy Policy explains how CashVera collects, uses, discloses and protects personal data in connection with our website and services related to values-based funds decisions. The policy describes the categories of information we process, the purposes for processing, legal bases where applicable, data retention and user rights. We aim to be clear about data handling practices so individuals can make informed choices.
Definitions
Key terms used in this policy are defined below to help you understand how we handle personal data and what the terms mean in practice.
Data We Collect
We collect personal data directly from users, automatically through technical means, and occasionally from third parties. The details and examples are provided below.
Data You Provide
When you interact with CashVera we may collect data you actively provide, for purposes such as account setup, support and communications.
- Contact details: name, email address, telephone number.
- Account information: username, password hash, profile preferences and subscription choices.
- Communications: messages, feedback, survey responses and support requests.
- Business context: high-level budget categories, values preferences and optional budgeting inputs provided to use the service features (we do not require sensitive business account credentials to use core informational features).
- Transaction-related details: when users choose to use payment services, limited billing and payment information necessary to complete the transaction may be collected via third-party processors.
- Marketing preferences and consent records for communications you agree to receive.
Automatically Collected Data
We collect certain data automatically when you use our site or services to support functionality, security and analytics.
- Device and browser information such as operating system, browser type and version.
- Usage data such as pages visited, time spent on pages and navigation paths.
- IP address and approximate geolocation derived from IP for security and analytics.
- Cookies and similar identifiers for session management and preferences.
- Performance and diagnostic data to detect and resolve technical issues.
- Analytics data aggregated to understand feature usage and improve service design.
Data from Third Parties
We may receive personal data about you from third parties where you have engaged them or where integration is necessary to provide a feature.
- Payment processors providing transaction confirmation and limited billing details.
- Analytics providers that supply aggregated reporting and performance metrics.
- Identity verification providers where required for compliance or account setup.
Purposes of Processing
We process personal data for specific, limited purposes described below. Each purpose is necessary for the service feature or legal requirement identified.
- To provide and operate our services, including account administration and feature delivery.
- To communicate with users about account status, service updates and support requests.
- To process payments and manage billing through third-party payment processors.
- To analyze usage patterns and improve the design, performance and security of the service.
- To comply with legal obligations, dispute resolution and to respond to lawful requests from authorities.
- To deliver marketing and informational communications where you have consented to receive them.
- To personalise content and settings consistent with user preferences and cookie choices.
- To detect and prevent fraud, abuse and other security incidents.
Legal Bases for Processing
Where applicable, we rely on one or more lawful bases to process personal data, including those listed below. This section summarizes common bases used for different processing activities.
- Performance of a contract: processing necessary to provide requested services or fulfil contractual obligations.
- Consent: processing based on an individual’s explicit consent for optional features, marketing communications or cookies where required.
- Legal obligation: processing necessary to comply with applicable laws, regulatory requests or court orders.
- Legitimate interests: processing necessary for our legitimate operational interests, such as security, fraud prevention and business continuity, balanced against individual rights and interests.
Data Subject Rights (where applicable)
If EU data protection rules apply to you, you may have the following rights with respect to your personal data. We describe how to exercise these rights and any applicable limitations.
- Right of access: request confirmation of whether we process your personal data and obtain a copy of that data.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of personal data where retention is not required by law or contract.
- Right to restriction of processing: request the limitation of certain processing activities in specific circumstances.
- Right to data portability: receive personal data you provided in a structured, commonly used and machine-readable format.
- Right to object: object to processing based on legitimate interests or direct marketing profiling where applicable.
Data Sharing and Disclosures
We share personal data only as necessary to provide services, comply with legal obligations, or with your consent. Third parties that receive data are subject to contractual restrictions on use and retention.
- Service providers and processors who support payments, hosting, analytics and customer support.
- Professional advisors such as auditors and legal counsel where required to manage legal obligations.
- Affiliated entities assisting with service delivery under data processing agreements.
- Law enforcement, regulators or courts when required by law or to respond to lawful requests.
- Marketing and communication partners when you opt in to receive promotional materials.
- Third-party platforms that you link or integrate with, according to the permissions you grant.
International Transfers
Personal data may be transferred to or accessed from jurisdictions outside your country for operational, hosting and service support reasons. Such transfers are managed in accordance with applicable data protection laws.
Where transfers occur, we rely on appropriate safeguards such as recognised contractual clauses, data processing agreements and, where available, adequacy decisions to protect personal data.
Data Retention
We retain personal data only as long as necessary to fulfil the purpose for which it was collected, to meet legal obligations, and to resolve disputes.
Account records and related data are retained for the duration of the active account and for a reasonable period thereafter to address billing, security and legal requirements.
User communications and support correspondence are retained for as long as needed to provide support, manage disputes and for record-keeping in line with applicable laws.
System logs and diagnostic records are retained for a limited period to support security, incident contribute and service stability.
When data is no longer required, we securely delete or anonymize it in line with our retention schedules and legal obligations.
Security Measures
CashVera implements administrative, technical and physical safeguards to protect personal data against unauthorized access, disclosure, alteration and destruction. Security practices are regularly reviewed and updated in response to evolving risks.
- Encryption of data in transit (TLS) and, where applicable, encryption at rest for sensitive elements.
- Access controls, role-based permissions and periodic access reviews to limit data access to authorized personnel.
- Regular security assessments, patch management and incident response procedures to identify and address vulnerabilities.
How to Exercise Your Rights
You can exercise your rights by contacting us. We will respond within applicable legal timeframes and may require verification of identity to protect privacy and security.
- Access and correction: request access to your personal data and request correction of inaccuracies.
- Deletion and restriction: request erasure or restriction of processing when permitted by law or contractual requirements.
- Object and portability: object to certain processing activities and request a portable copy of data you provided.
- Request correction of inaccurate or incomplete personal data held by CashVera.
- Request portable copies of personal data provided in a structured, commonly used and machine-readable format.
- Object to processing based on legitimate interests where applicable, subject to applicable law and review.
- Request restriction of processing in specific circumstances, for example while a dispute about accuracy is being resolved.
- Withdraw consent to processing where processing is based on consent; withdrawal does not affect processing carried out prior to withdrawal.
Exercising Your Privacy Rights
To exercise any privacy rights listed above, users may submit a request to CashVera. We will verify the requestor's identity and may ask for additional information to process the request. Requests should specify the right being exercised and include enough detail for us to locate the relevant records.
CashVera aims to respond to verified data access, correction and erasure requests within 30 days. Complex requests or those requiring additional verification may take longer, in which case we will inform you of the expected timeline.
Marketing Communications
We may send informational or promotional communications about services, events or updates from CashVera where you have provided consent or where permitted by applicable law. Communications are limited to topics relevant to values-based business decision content and service updates offered through valcashh.pro.
You may opt out of marketing communications at any time by following the unsubscribe link in an email or by contacting our privacy team at [email protected]. Processing of non-marketing communications related to your account or legal obligations will continue.
Children's Privacy
CashVera services are intended for adults. We do not knowingly collect personal data from children under the age of 16. If we become aware that we have collected personal data from a minor without appropriate parental or guardian consent, we will take steps to delete that data in accordance with applicable law.
Third-Party Links and Services
Our website may contain links to third-party sites or integrate services provided by third parties. Those third parties have their own privacy practices and governance. CashVera is not responsible for the privacy practices or content of external sites. Review the privacy policies of any third-party service before providing personal data.
Changes to This Privacy Notice
We may update this privacy notice to reflect changes in practices, legal requirements, or service offerings. Material changes will be communicated on the site or via direct notice where appropriate. The effective date listed in the terms indicates the last substantive update.