Privacy Policy
Last updated: May 2, 2026·Version: v1.0 — Closed Beta
This is v1.0 — Closed Beta of Stack's Privacy Policy. Updates may occur before public launch.
What we collect
When you use Stack, we collect:
- Account info: Email address, full name (required), phone number (optional), annual income (optional)
- Financial data via Plaid: Bank account balances, transaction history, account types — only from accounts you explicitly connect
- Card information: Cards you add manually or that we identify through Plaid
- Usage data: How you interact with Stack (which features you use, when)
- Conversation history: Your messages to Max, our AI assistant
How we use it
Your data powers Stack's core features:
- Showing your spending, balances, and net worth
- Recommending which card to use for each purchase (the Optimizer)
- Personalizing budget recommendations
- Powering Max's responses to your questions
- Sending you product updates and service emails
We do not sell your data. We do not share your data with advertisers.
Third parties we work with
Stack uses these services to deliver the product:
- Plaid — connects to your bank accounts to fetch transactions and balances
- OpenAI — powers Max conversational AI
- Supabase — hosts our database and authentication
- Stripe (post-Sprint 3) — processes subscription payments
- Resend — sends product emails
Each service has their own privacy policy. We choose providers who meet professional security standards.
Your rights
You can:
- Access your data — visible throughout Stack
- Export your data — available in Settings (planned post-beta)
- Delete your account — Settings → Account → Delete account. This permanently removes your data.
- Update your information — Settings → Account
Data retention
When you delete your account:
- Profile data is removed immediately
- Plaid connections are revoked immediately
- Transaction history and goals are deleted within 30 days
- Backup copies are purged within 90 days
If you stop using Stack without deleting, your data remains until you delete the account.
Security
We protect your data with:
- HTTPS encryption in transit
- Encrypted at rest in our database
- Multi-factor authentication available (Sprint 3)
- Regular security reviews
No system is perfectly secure. We do our best.
Children
Stack is not intended for users under 18. We do not knowingly collect data from minors.
Changes to this policy
If we update this policy, we'll notify users by email and post the updated version with a new “Last updated” date.
Contact
Questions about privacy? Email privacy@usestack.app