Privacy Policy
5Tree LLC ("we," "us," or "our") operates the Stash mobile application and stashers.app website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using Stash, you agree to the collection and use of information as described in this policy.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, and profile photo when you create an account via Google, Apple, or email sign-up.
- Payment Information: Payment card details processed securely through Stripe. We do not store your full card number on our servers.
- Merchant Information: If you register as a merchant, we collect your business name, address, phone number, business description, and banking/payout information via Stripe Connect.
- Communications: Messages, feedback, or support requests you send us.
1.2 Information Collected Automatically
- Location Data: With your permission, we collect your precise location to show nearby deals, calculate distances, and enable location-based features like Stash Boost notifications. You can disable location access in your device settings, though this will limit functionality.
- Device Information: Device type, operating system, unique device identifiers, and push notification tokens.
- Usage Data: Pages and features accessed, interactions with deals (views, claims, redemptions), timestamps, and app performance data.
1.3 Information from Third Parties
- Authentication Providers: When you sign in with Google or Apple, we receive your name, email, and profile image as authorized by you.
- Stripe: Transaction status, payment confirmations, and merchant account verification results.
2. How We Use Your Information
We use the information we collect to:
- Provide and operate the Service — display deals, process claims, handle payments, and facilitate merchant-consumer transactions.
- Send notifications — claim countdown reminders, redemption confirmations, no-show warnings, Stash Boost alerts, and nearby deal notifications (with your consent).
- Process payments — authorize $1.00 pre-authorization holds, capture deal payments, and distribute merchant payouts via Stripe Connect.
- Enforce policies — manage no-show tracking, claim cooldowns, and account restrictions.
- Improve the Service — analyze usage patterns, fix bugs, and develop new features.
- Communicate with you — respond to support requests, send service updates, and (with your consent) marketing communications.
3. How We Share Your Information
We do not sell your personal information. We share information only in these circumstances:
3.1 With Merchants and Consumers
- When you claim a deal, the merchant receives your Stash Code and first name for redemption purposes.
- When you leave a review, your display name and review content are visible to other users.
3.2 With Service Providers
We use trusted third-party services to operate Stash:
| Service | Purpose | Data Shared |
|---|---|---|
| Convex | Backend infrastructure, real-time database, authentication | Account data, deal data, transaction records |
| Stripe | Payment processing, merchant payouts | Payment card info, transaction amounts, merchant banking details |
| Google Maps | Map display, geocoding | Location coordinates |
| Expo | Push notifications, app distribution | Device push tokens |
| Vercel | Website hosting | Web traffic data |
3.3 For Legal Reasons
We may disclose information if required by law, subpoena, or government request, or to protect our rights, property, or safety.
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
4. Data Retention
- Account data: Retained while your account is active and for 30 days after deletion.
- Transaction records: Retained for 7 years for financial/legal compliance.
- Location data: Not stored persistently; used in real-time for distance calculations and notifications.
- Analytics data: Aggregated and anonymized after 12 months.
5. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS/HTTPS)
- Encrypted payment processing via Stripe (PCI-DSS compliant)
- Access controls and authentication for all backend services
- Regular security reviews
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
- Access your personal information
- Correct inaccurate data
- Delete your account and associated data
- Opt out of marketing communications
- Disable location services via device settings
- Withdraw consent for push notifications via device settings
To exercise these rights, contact us at privacy@stashers.app.
California Residents (CCPA)
California residents have additional rights under the CCPA, including the right to know what personal information is collected, request deletion, and opt out of the sale of personal information (we do not sell personal information).
7. Children's Privacy
Stash is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance.
9. Contact Us
If you have questions about this Privacy Policy, contact us at:
5Tree LLC Email: privacy@stashers.app