Privacy Policy

This Privacy Policy explains how we collect, use, disclose and protect personal information when you use our website, mobile app and related services (together, the Service). It should be read together with our Terms of Use, which govern your access to and use of the Service.

1. Overview

  • We comply with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs).
  • We don't do credit checks and we don't use or share information with credit reporting bodies. Using our Service won't put anything on your credit report.
  • We collect only what we need to run the Service (for example, identity information to meet Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) obligations, account/transaction data you authorise us to view for eligibility, and contact details so we can communicate with you).
  • We use third-party providers (for example, for identity verification and bank connection). We don't receive or store your online banking passwords.
  • When you connect your online banking profile, we can access a read-only copy of your account and transaction information. We may retrieve updated information from time to time.
  • You can access and correct your information, opt out of marketing, and complain to us or the OAIC if you're not satisfied.

2. Who we are and scope

MyPayNow Pty Ltd (ACN 635 410 909) ("we", "us" or "our") operates the Service in Australia. This Policy applies to personal information about individuals who use or interact with the Service in Australia.

3. Regulatory status

We provide advances that are not regulated under the National Consumer Credit Protection Act 2009 (Cth) or the National Credit Code. We do not exchange information with credit reporting bodies, obtain your credit report, or make credit enquiries. Using the Service does not create a hard or soft credit enquiry and does not affect your credit score.

4. Minors

Our Service is for Australian residents aged 18 or over. We do not knowingly collect personal information from individuals under 18. If we learn that a minor has provided information or created an account, we will close the account and delete the information to the extent lawful, or otherwise retain only what is required by law. If you believe a minor has provided information to us, please contact us.

5. What we collect

  • 5.1 Information you provide
    • Identity details: name, date of birth, residential address and contact details.
    • Verification data: ID details you enter (eg driver licence number/card number/expiry/issuing state) and the verification result from our identity provider. To verify your identity documents, your details may be checked using the Document Verification Service (DVS), which returns a result about whether your details match official records. We do not receive or store images from the verification process. If the provider collects images as part of their process, they handle those directly and do not give them to us - unless you send us an image directly (for example, in a support email or chat), in which case we may store it with your enquiry.
    • Account data: information you submit in forms, chats or emails (eg support enquiries).
    • Repayment/advance information: details of any advance (including amount, schedule and status).
  • 5.2 Information we collect automatically
    Device and usage data when you use our website or app (for example, IP address, device/advertising IDs, pages/screens viewed, timestamps, referring URLs, session analytics, crash/performance data), collected via cookies and similar technologies. See Section 14 (Cookies and analytics) for controls.
  • 5.3 Bank connection information
    • When you connect your online banking profile with a bank, our third-party provider retrieves a read-only copy of account and transaction information for all bank accounts linked under that profile. We do not receive or store your online banking passwords (these are handled by our provider).
    • We may collect up to 90 days of transactions (per linked account) to assess eligibility, verify information/identity, set up and service your account, prevent and detect fraud and security threats, and meet legal obligations (including under AML/CTF laws). We may retrieve updated information from time to time for these purposes.
    • Our access is read-only - we cannot move money or take other actions in your banking.
  • 5.4 Employment applications
    If you apply for a job with us, we may collect information relevant to your application (for example, work history, qualifications, references and, where disclosed, sensitive information such as criminal history).
  • 5.5 Sensitive information
    We generally don't collect sensitive information (such as health information). Where you provide it to us - for example, when you tell us about your personal or financial circumstances - we collect it only with your consent or where we're required or permitted by law, and we use and disclose it only for the purpose for which you provided it or as the law allows.

6. How we collect information

We collect personal information:

  • Directly from you (including via online forms, in-app flows, email and chat).
  • Automatically through the Service (see Section 5.2).
  • From third parties where you authorise it or where it is unreasonable or impracticable to collect it from you (for example, identity verification providers, bank connection providers, or referees/employers in recruitment).

Where lawful and practicable, you may interact with us anonymously or using a pseudonym. We must verify your identity before providing an advance or where required by law.

Where you authorise someone to act on your behalf (for example, by providing a Letter of Authority), we may deal with and disclose relevant information to your authorised representative (for example, a credit repair body or financial counsellor) for the limited purpose of handling your request.

When we collect personal information from another source, we take reasonable steps to notify you of the collection and the key details required by the Australian Privacy Principles at or as soon as practicable after the collection.

7. How we use your information

We collect, use and disclose personal information to:

  • Provide and operate the Service - including assessing eligibility for advances, managing your account, processing advances and repayments and providing support.
  • Manage risk, recovery and compliance - including preventing and detecting fraud, managing defaults and recovering amounts owing (for example, via debt collection agencies), and meeting our legal and regulatory obligations.
  • Handle disputes and legal matters - including responding to complaints, investigations and regulatory requests, and establishing, exercising or defending legal claims.
  • Verify your identity (KYC) - including where required by law or where reasonably necessary for our functions and activities, such as assessing and providing the Service and managing fraud and compliance risk.
  • Communicate with you about the Service - including important notices.
  • Improve the Service and our business - including analytics, understanding how customers use the Service, improving our marketing and operations and troubleshooting.
  • Publish your feedback - including as testimonials or reviews in marketing materials.
  • Send marketing communications - you can opt out at any time (see Section 12).
  • Deliver targeted advertising - including by sharing your information with advertising and social media platforms.
  • Share your information with selected third parties - including financial and referral service providers, for their own purposes, including marketing their products and services to you or other commercial purposes.
  • Manage our business - including audits, finance/governance, any potential sale or restructure, and any sale or assignment of debts owed to us.
  • Assess employment applications - including verifying qualifications, contacting referees, and making hiring decisions.

We may disclose personal information to third parties where reasonably necessary for these purposes.

If you choose not to provide information we reasonably need, we may not be able to provide or continue the Service (for example, we may be unable to assess eligibility or process repayments).

8. Automated decision-making

We use automated systems to verify your identity, assess your eligibility for advances and determine your advance limit. These systems use personal information including your identity details and bank account and transaction data to make decisions about whether to approve an advance and the amount available to you. These decisions are generally made without human involvement, although we may manually review some decisions and, if we identify an error, the outcome may change. You can also contact us to request a review of any decision.

9. Third-party service providers

We use third-party service providers to help operate the Service (for example, identity verification, bank connection, hosting, analytics, and email/SMS delivery). They may receive, store or process your information on our behalf for these limited purposes. We only disclose what's reasonably necessary and require appropriate safeguards. Some of our service providers may also de-identify and aggregate your information and use it for their own commercial purposes, such as analytics or product development. We don't control (and aren't responsible for) third-party websites or services you visit via links.

We may engage debt collection agencies and legal advisers to help recover amounts owing. For that purpose, we may disclose the information reasonably necessary, including your name, contact details, account and repayment information, relevant communications and the amount outstanding.

10. Overseas disclosures

Some service providers or systems may be located outside Australia (for example, the United States and other countries where our vendors operate). When we disclose personal information overseas, we take reasonable steps to ensure recipients handle it in a way that is consistent with the APPs.

11. Security

We use reasonable safeguards to protect personal information, including secure facilities, access controls, encryption and password protection for electronic records. No system is 100% secure; please also protect your own devices and logins.

12. Marketing

We may send you marketing about our products, services and offers and those of our related companies or selected partners by email and SMS. You can opt out at any time using the unsubscribe link in our messages, through our app, or by contacting us.

We may also share your information with selected third parties, including financial and referral service providers, for their own purposes including marketing, and with advertising and social media platforms to deliver targeted ads (see Section 7). If you do not want us to do so, you can opt out by contacting us.

We may receive your contact details from third parties for our marketing, and we rely on those third parties to ensure the information was collected lawfully and permits us to contact you.

13. Retention and de-identification

We keep personal information only as long as needed for the purposes in this Policy or as required by law (for example, AML/CTF record-keeping). Where appropriate, we de-identify information so it can no longer reasonably identify you.

If you ask us to delete personal information, we will do so where we can and where the law permits.

14. Cookies and analytics

We use cookies and similar technologies for functionality and analytics to understand and improve how people use the Service. We may also allow third-party advertising tags (for example, from our media partners) to measure campaigns and show you our ads on other sites. You can control cookies in your browser and, on mobile, limit tracking in your device settings; some features may not work properly if disabled.

15. Data breaches (NDB scheme)

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in line with the Notifiable Data Breaches scheme.

16. Access and correction

You can request access to, or correction of, the personal information we hold about you. We'll need to verify your identity and may refuse access in limited cases permitted by law (for example, where providing access would unreasonably impact another person's privacy or reveal commercially sensitive information). If we refuse, we'll tell you why in writing and explain the options available to you.

    Email: customerservice@mypaynow.com.au
    Please include "Privacy" in the subject line.

17. Complaints and contact

If you have concerns about our handling of your personal information, or would like to make a privacy complaint, please contact us first so we can try to resolve it. We'll respond as soon as reasonably practicable. Please include your name, contact details and a brief description of your concern or complaint.

    Email: customerservice@mypaynow.com.au
    Please include "Privacy" in the subject line.

If you're not satisfied, you can contact the OAIC:

    Phone: 1300 363 992
    Website: oaic.gov.au/contact-us

18. Changes to this Policy

We may update this Policy from time to time (for example, if laws or our systems change). We'll post the updated version on our website or app and, where required by law or where changes are material, we'll let you know in our app or on our website.

Last updated: 06 August 2026