Privacy Policy

Last updated: May 2, 2026·Version: v1.0 — Closed Beta

This is v1.0 — Closed Beta of Stack's Privacy Policy. Updates may occur before public launch.

What we collect

When you use Stack, we collect:

  • Account info: Email address, full name (required), phone number (optional), annual income (optional)
  • Financial data via Plaid: Bank account balances, transaction history, account types — only from accounts you explicitly connect
  • Card information: Cards you add manually or that we identify through Plaid
  • Usage data: How you interact with Stack (which features you use, when)
  • Conversation history: Your messages to Max, our AI assistant

How we use it

Your data powers Stack's core features:

  • Showing your spending, balances, and net worth
  • Recommending which card to use for each purchase (the Optimizer)
  • Personalizing budget recommendations
  • Powering Max's responses to your questions
  • Sending you product updates and service emails

We do not sell your data. We do not share your data with advertisers.

Third parties we work with

Stack uses these services to deliver the product:

  • Plaid — connects to your bank accounts to fetch transactions and balances
  • OpenAI — powers Max conversational AI
  • Supabase — hosts our database and authentication
  • Stripe (post-Sprint 3) — processes subscription payments
  • Resend — sends product emails

Each service has their own privacy policy. We choose providers who meet professional security standards.

Your rights

You can:

  • Access your data — visible throughout Stack
  • Export your data — available in Settings (planned post-beta)
  • Delete your account — Settings → Account → Delete account. This permanently removes your data.
  • Update your information — Settings → Account

Data retention

When you delete your account:

  • Profile data is removed immediately
  • Plaid connections are revoked immediately
  • Transaction history and goals are deleted within 30 days
  • Backup copies are purged within 90 days

If you stop using Stack without deleting, your data remains until you delete the account.

Security

We protect your data with:

  • HTTPS encryption in transit
  • Encrypted at rest in our database
  • Multi-factor authentication available (Sprint 3)
  • Regular security reviews

No system is perfectly secure. We do our best.

Children

Stack is not intended for users under 18. We do not knowingly collect data from minors.

Changes to this policy

If we update this policy, we'll notify users by email and post the updated version with a new “Last updated” date.

Contact

Questions about privacy? Email privacy@usestack.app