Stashly™

Legal

Privacy Policy

Last updated: March 20, 2026

INTRODUCTION

Stashly (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our personal finance management application and services (collectively, the “Service”). Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

INFORMATION WE COLLECT

We collect several types of information from and about users of our Service:

  1. Personal Information

    • Name (first name and last name)
    • Email address
    • Phone number (optional, if you choose to enable SMS notifications)
    • Password (stored in encrypted form)

  2. Financial Information

    • Bank account information and account balances (collected through Plaid, a third-party financial data aggregator)
    • Credit card account information and balances (collected through Plaid)
    • Transaction data including amounts, dates, merchant names, descriptions, and categories
    • Account numbers and routing information (processed securely through Plaid and not stored by us in readable form)

  3. Financial Management Data

    • Stashes (virtual budget categories) you create or that are automatically generated
    • Stash balances and allocations
    • Transaction-to-Stash associations
    • Recurring transfer settings
    • Life Profile information (assets, dependents, housing status, hobbies, and other personal financial context)

  4. Device and Technical Information

    • Device tokens for push notifications
    • Device identifiers (for multi-device support)
    • IP address
    • Browser type and version
    • Operating system information
    • Usage data and app interaction patterns

  5. Notification Preferences

    • Your preferences for receiving push notifications, SMS messages, and email notifications
    • Notification delivery settings and opt-in status

HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

  1. To Provide and Maintain the Service

    • Process your registration and manage your account
    • Link and sync your financial accounts through Plaid
    • Track and categorize your transactions
    • Automatically associate transactions with your Stashes
    • Generate personalized Stash recommendations based on your spending patterns
    • Calculate and maintain virtual Stash balances
    • Provide account balance monitoring and alerts

  2. To Improve and Personalize the Service

    • Analyze your transaction history to identify spending patterns
    • Generate AI-powered recommendations for Stash creation and funding
    • Customize your experience based on your Life Profile information
    • Improve our algorithms for transaction categorization

  3. To Communicate With You

    • Send you notifications about transactions that require your attention
    • Alert you about account balance warnings
    • Notify you about check payments that need categorization
    • Send service-related updates and important account information
    • Provide customer support and respond to your inquiries
    • Send reminders to complete your Life Profile (if applicable)

    If you enable SMS notifications, Stashly may send text messages regarding account activity, transaction alerts, or requests for additional information. Message frequency varies. Message and data rates may apply. You may opt out at any time by replying STOP to a message or disabling SMS notifications in your account settings.

  4. To Ensure Security and Prevent Fraud

    • Verify your identity and authenticate your account
    • Detect and prevent fraudulent activity
    • Protect against unauthorized access to your account
    • Monitor for security threats and suspicious activity

  5. To Comply With Legal Obligations

    • Comply with applicable laws, regulations, and legal processes
    • Respond to lawful requests from government authorities
    • Enforce our Terms and Conditions

DATA SHARING AND DISCLOSURE

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your information for marketing or promotional activities. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We may share your information only in the following limited circumstances:

  1. Service Providers

    • We share information with trusted third-party service providers who assist us in operating the Service, including:
      • Plaid Technologies, Inc. - for secure bank account linking and transaction data retrieval
      • Twilio - for SMS notification delivery (only if you opt-in to SMS notifications)
      • Email service providers - for sending email notifications
      • Cloud hosting and infrastructure providers - for secure data storage and processing
    • These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

  2. Legal Requirements

    • We may disclose your information if required by law, court order, or government regulation
    • We may disclose information to protect our rights, property, or safety, or that of our users or others
    • We may disclose information in connection with legal proceedings or investigations

  3. Business Transfers

    • In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, but will remain subject to this Privacy Policy

  4. With Your Consent

    • We may share your information with your explicit consent for specific purposes

DATA SECURITY

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Secure password hashing (we never store your password in plain text)
  • Regular security assessments and updates
  • Access controls and authentication requirements
  • Secure connections (HTTPS/TLS) for all data transmission

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

YOUR RIGHTS AND CHOICES

You have the following rights regarding your personal information:

  1. Access and Correction

    • You can access and update your personal information through the Service settings
    • You can view and modify your Stashes, Life Profile, and notification preferences

  2. Account Deletion

    • You can request deletion of your account and associated data by contacting us
    • We will delete your information in accordance with applicable law, except where we are required to retain it for legal or regulatory purposes

  3. Notification Preferences

    • You can opt-in or opt-out of push notifications, SMS messages, and email notifications at any time through your account settings
    • For SMS notifications, you can opt-out by replying STOP to any SMS message or by updating your preferences in the app

  4. Financial Account Disconnection

    • You can disconnect your linked bank accounts and credit cards at any time through the Service
    • Disconnecting accounts will stop new transaction data from being collected

DATA RETENTION

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information, except where we are legally required to retain certain records.

CHILDREN’S PRIVACY

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately so we can delete that information.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy in the Service and updating the “Last Updated” date. Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

CONTACT US

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: stashly@astersmith.com

We will respond to your inquiry as soon as possible.