Privacy Policy

Cashlo is not a lender and does not make credit decisions. We help businesses prepare funding requests and connect with third-party funding providers. Approval, available amounts and financing terms are determined by the provider. Funding is not guaranteed.

Effective October 12, 2026. This policy covers Cashlo’s business-funding workspace, operated by Royal Boudoir Inc. Contact support@cashlo.net with privacy questions.

Information you provide

We collect your account email and a protected password verifier; business and owner contact information, addresses, dates of birth, identity and tax numbers, ownership details, requested funding, business financial information, self-reported credit information, application certifications, uploaded documents and messages to our team. Provide another owner’s information only with their permission. We do not ask for your bank-login password.

How we use information

We use this information to maintain your account, save and review applications, manage documents, respond to messages, arrange requested lender referrals, provide account recovery, prevent abuse and measure use of the service. Our team reviews application information for completeness; this is not underwriting or a credit decision. Saving a request does not authorize a credit inquiry or automatically send it to a lender. Before a referral, our team will explain the intended recipient and obtain the required authorization.

Service providers and sharing

Cloudflare hosts the service, database and document storage. Twilio SendGrid delivers account emails. If you enable notifications, Expo and Apple process device push tokens and generic update notifications. Our authorized team can access information needed to support and review your request. We may disclose information when legally required. This app does not sell personal information or use advertising trackers. A lender receiving information with your authorization will have its own privacy practices.

Activity, devices and permissions

We record account IDs and dates of signed-in activity, draft starts and saved applications for service analytics. Network requests include technical information such as IP addresses; hashed IP and email values support rate limits, and service logs support reliability and security. Optional notifications use a device token. Camera access is used only when you choose to scan documents. Face ID or Touch ID is handled by your device; Cashlo does not receive biometric templates. App-lock preferences stay on your device.

Storage and deletion

Applications and messages are encrypted for storage. Documents are stored privately and retrieved through authenticated requests. Identity numbers are masked in ordinary app responses. We retain account content while you use the service, until you delete it or request deletion. Daily activity records are removed after 90 days and notification delivery records after 7 days. Sessions expire after 7 days or are revoked by logout, password reset or account deletion. Document-preview cache files are removed when the preview closes; copies you choose to export remain under your control.

You can delete your account in Profile, or use Account help & deletion during setup. Deletion removes account content and uploaded files from the active service. Service-provider backups and security records may persist under their retention procedures or legal requirements. Information already shared with a lender under separate authorization may need to be requested from that lender. Deleting this account does not cancel an earlier Apple subscription.

Your choices

You can correct saved information where editing is available, contact support for access or correction requests, decline optional notifications, and manage camera or notification permissions in device settings. Only adults aged 18 or older may provide owner information. Do not send identity numbers or financial documents through ordinary support email.

Changes

We will update the effective date when this policy changes and provide additional notice when appropriate.