Skip to main content

Privacy Policy

Last updated: March 1, 2026

Information We Collect

When you use STAX, we may collect the following types of information:

  • Account Information: Name, email address, password, and profile details you provide when creating an account
  • Financial Information: Bank account balances and transaction data (accessed via Plaid), payment information (processed via Stripe)
  • Travel Goals: Destinations, savings targets, travel dates, and trip preferences
  • Usage Data: How you interact with our app, including features used, pages visited, and actions taken
  • Device Information: Device type, operating system, and app version
  • Communications: Messages you send us and feedback you provide

How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Track your savings progress and help you reach your goals
  • Process contributions from family and friends
  • Send you updates about your stacks, contributions, and milestones
  • Provide AI-powered trip cost estimates
  • Process cashback rewards from affiliate bookings
  • Communicate about new features and service updates
  • Ensure security and prevent fraud
  • Comply with legal obligations

Third-Party Services

STAX integrates with trusted third-party services to provide our features:

  • Plaid: We use Plaid to securely connect to your bank accounts and retrieve balance and transaction information. We never see or store your bank login credentials. Plaid's use of your data is governed by their privacy policy. Please review Plaid's End User Privacy Policy for more information.
  • Stripe: We use Stripe to process payments for contributions to stacks and to facilitate payouts to stack owners. Payment card information is handled directly by Stripe and is not stored on our servers. Please review Stripe's Privacy Policy for more information.
  • Affiliate Partners: When you book travel through our affiliate partners (such as Booking.com or Viator), your booking information may be shared with those partners to process your reservation and calculate cashback rewards.
  • Anthropic: We use Anthropic's AI technology to power trip cost estimates and travel planning features. When you create a stack or request a cost estimate, trip details such as destination, dates, and travel preferences may be processed by Anthropic's API. No bank account data, financial credentials, or transaction history is shared with Anthropic. Please review Anthropic's Privacy Policy for more information.

Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

  • All data is encrypted in transit using TLS/SSL
  • Sensitive data is encrypted at rest
  • We never store your bank login credentials
  • Access to user data is restricted to authorized personnel only
  • Regular security audits and monitoring

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your personal data only as long as necessary to provide our services and fulfill the purposes described in this policy.

  • Account information: Retained for the duration of your active account. Upon account deletion, your data is soft-deleted immediately and permanently removed after 30 days.
  • Bank connection data (Plaid access tokens): Retained until you disconnect your bank account or delete your account, at which point tokens are revoked via Plaid's API and purged from our database.
  • Transaction history: Retained for the duration of your active account and deleted when your account is permanently removed.
  • Financial records related to Stripe payments: Retained for 7 years as required by applicable tax and financial regulations.
  • Server logs: Automatically rotated and purged after 90 days.
  • Database backups: Automatically expired after 30 days via lifecycle policy.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request that we correct inaccurate or incomplete data
  • Deletion: Request that we delete your personal data (you can delete your account at any time through the app)
  • Portability: Request a copy of your data in a portable format
  • Opt-out: Unsubscribe from marketing communications at any time
  • Disconnect: Disconnect your linked bank accounts at any time through the app

To exercise any of these rights, please contact us using the information below.

Children's Privacy

STAX is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected personal data from a user under 18, we will take steps to delete that information promptly. If you believe we may have inadvertently collected information from a minor, please contact us at privacy@stax.cash.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
  • Right to Opt-Out: You may opt out of the sale of your personal information. STAX does not sell your personal information to third parties.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us at privacy@stax.cash. We will respond to verifiable requests within 45 days.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@stax.cash