Privacy policy

01What we collect

Sign-in: the account ID Google or Facebook gives us, your name, and your email address if the provider shares it. We never see your password.
Cashback activity: the cashback links you create, and the orders the marketplace reports for those links, with order value, commission and status.
Payout account: your bank, the account holder name and the account number. Payout account details are stored encrypted, and the account number is only ever shown back masked.
Payment PIN: stored only as a one-way hash, so no one, not even us, can ever read it. We never ask for your PIN by phone, chat or email.
Passkeys: the public key of each passkey you add, its label (such as the device name), and when it was added and last used.
Sessions and devices: a browser or device label and a masked IP address for each signed-in device, so you can review them.
Logs: technical records of requests and errors, used to keep the service running and secure.
Your consents: which version of these terms and of this policy you accepted and when, and when you turned notifications or offers on or off, from the website or the app.

We never post anything for you, and we don’t read your messages, contacts or friends list.

When you confirm with a passkey, your face or fingerprint is checked on your own device, by Apple, Google or the device maker.
We never receive or store your face or fingerprint data.
We only keep a public key for each passkey, and the confirmations (cryptographic signatures) your device sends each time you confirm.
We handle personal data under Decree 13/2023/NĐ-CP on personal data protection and the Personal Data Protection Law (in effect from 1 January 2026). We don’t process biometric data, which these rules treat as sensitive personal data.

We don’t sell your data.
Marketplaces (Shopee and Lazada) only receive the tracking ID inside your cashback link. It doesn’t contain your name or contact details.
Product photos on Lazada links load from Lazada’s servers, so Lazada can see your device’s IP address when they load (we ask Lazada for a product’s name and photo with the product ID only).
Our payout provider and banks receive what they need to send your money: bank, account number, holder name and amount.
Google and Facebook confirm who you are when you sign in. Their own privacy policies apply to what you do with them.
When you are not signed in, our website loads Google’s sign-in tool so you can sign in with one tap. Google can see that you visited those pages, under Google’s own privacy policy.
Authorities, only when the law requires it.

Cashback, order and withdrawal records are kept for as long as accounting and legal rules require, also after an account is closed.
Sign-in links stay until you unlink them or your account is deleted.
Session and log records are kept for a limited time, for security.
Records of your consents are kept as proof of what you agreed to, also after an account is deleted, without your name or contact details.
A copy of your data that you ask for is stored encrypted and deleted 7 days after you ask for it.

Unlink Google or Facebook in Account › Sign-in methods. You need to keep at least one way to sign in.
Sign out any device in Account › Sessions.
Download a copy of your data in Account › Your data: your profile, sign-in methods, devices, links, orders and cashback, withdrawals, notifications and consents. You confirm the download with your passkey or PIN.
Delete your account in Account › Delete account. We remove your sign-in and profile details; records we must keep by law stay, as described above.
Turn notifications and offers on or off at any time in Account › Notifications.
Facebook data: remove ecashmi in your Facebook settings (Apps and websites), or contact us. Facebook gives you a confirmation code to check the status.

Questions or requests about your data: support@ecashmi.com. We usually answer within a few working days.