Your Data Matters to Us
When you apply for a pay advance, you are sharing sensitive information — your name, address, bank statements, and income details. That is a significant amount of trust, and we take it seriously.
Here is exactly how CashLift protects your data, explained without jargon.
Bank-Grade Encryption
Every piece of data you share with CashLift is encrypted — both when it is moving between your device and our servers (in transit) and when it is stored (at rest).
- TLS 1.3 encryption protects all data in transit. This is the same standard used by Australian banks, government services, and major financial institutions.
- AES-256 encryption protects data at rest. This is the encryption standard approved by the Australian Signals Directorate for protecting classified information.
- Secure cloud infrastructure — Our systems run on enterprise-grade cloud platforms with 24/7 monitoring, automatic threat detection, and regular security audits.
In practical terms, this means that even if someone intercepted the data moving between your phone and our servers, they would see nothing but meaningless scrambled text.
Secure Identity Verification
Before we approve any application, we need to verify that you are who you say you are. We use a trusted third-party identity verification service that:
- Checks your identity documents against government databases (e.g. the Document Verification Service) in real time
- Performs AML/CTF screening as required under Australia's Anti-Money Laundering and Counter-Terrorism Financing Act
- Does not store copies of your ID documents on our servers longer than required by law
This protects you in two ways — it prevents someone else from taking out a loan in your name, and it ensures we meet our legal obligations under Australian financial regulations.
We Do Not Sell Your Data
This one is simple and non-negotiable: CashLift does not sell, rent, or trade your personal information to third parties.
Your data is used for:
- Assessing your loan application
- Managing your account and repayments
- Meeting our legal and regulatory obligations
- Improving our service (in aggregated, de-identified form)
That is it. We do not pass your details to marketing companies, data brokers, or anyone else looking to profit from your information. Our privacy policy spells this out clearly, and we stand behind it.
ASIC Regulated
CashLift operates under an Australian Credit Licence regulated by the Australian Securities and Investments Commission (ASIC). This means we are legally required to:
- Comply with the National Consumer Credit Protection Act (NCCP) — including responsible lending obligations
- Maintain proper records and handle complaints through an approved external dispute resolution scheme
- Protect consumer data in accordance with the Australian Privacy Principles under the Privacy Act 1988
- Submit to regular compliance reviews and ASIC oversight
Regulation is not just a badge — it is an enforceable set of standards that protects you as a borrower. If we fail to meet these standards, ASIC has the power to take action.
Privacy-First Design
Beyond encryption and regulation, we have built privacy into how our systems work from the ground up:
- Minimal data collection — We only collect what we need to assess your application and manage your loan. Nothing more.
- Role-based access controls — Not every team member can see every piece of data. Access is restricted based on job function.
- Automatic data retention limits — Personal data that is no longer needed for legal or operational purposes is securely deleted.
- Bank statement analysis, not storage — When we review your bank statements, we analyse the data to assess your application. We do not keep a permanent copy of every transaction you have ever made.
What You Can Do
Data security is a shared responsibility. Here are a few things you can do on your end:
- Use a strong, unique password for your CashLift account
- Do not share your login details with anyone
- Contact us immediately if you suspect unauthorised access to your account
- Keep your contact details up to date so we can reach you if we detect anything unusual
Our Commitment
Trust is earned, not assumed. We protect your data because it is the right thing to do — and because, as a regulated lender, it is the law. If you have questions about how we handle your information, our privacy policy is available on our website, and our team is happy to walk you through it.