This is Stash's privacy policy explaining what personal information they collect about you, how they use it, and who they share it with. Stash collects a significant amount of sensitive data including your Social Security number, bank account credentials, financial details, location, and behavioral data, and shares it with business partners and marketing companies. If you live in California, you have extra rights to see, delete, or limit how your data is used.
Technical Summary
Stash Financial, Inc.'s Privacy Policy (effective May 21, 2025) governs the collection, use, processing, and disclosure of personal information across Stash Financial, Inc. and its affiliates (Stash Investments LLC, Stash Capital LLC, Stash Cash Management LLC, and Stash Insurance Services LLC). The policy covers an extensive range of personal data including financial account credentials, Social Security numbers, biometric identifiers, geolocation, device data, and behavioral tracking. Data is shared with service providers, financial partners, marketing partners, and may be disclosed to regulators and law enforcement. California residents are granted specific rights under CCPA including the right to know, delete, and opt out of data sale or sharing. The policy explicitly states that Stash does not honor browser Do Not Track signals.
Institutional Analysis
This policy engages multiple regulatory frameworks including Gramm-Leach-Bliley Act (GLBA) nonpublic personal information obligations, CCPA/CPRA for California residents, FINRA Rule 3210 compliance d…
This policy engages multiple regulatory frameworks including Gramm-Leach-Bliley Act (GLBA) nonpublic personal information obligations, CCPA/CPRA for California residents, FINRA Rule 3210 compliance data collection, and SEC-registered investment adviser data handling requirements. The breadth of dat…
🔒
Compliance intelligence locked
Regulatory exposure, material risk, and due diligence action items.
Stash collects highly sensitive information including your Social Security number, bank account numbers, bank login credentials, passport number, employment details, and whether you are a politically exposed person or FINRA control person.
Stash shares your personal information with marketing and advertising partners, including for targeted advertising campaigns, and uses tracking technologies such as pixels, cookies, and analytics tools from Facebook, Google, and others.
Stash shares your personal information with service providers, financial partners, credit bureaus, payment processors, and other non-affiliated third parties to facilitate its services and for its own business purposes.
California residents have specific rights under CCPA/CPRA including the right to know what data is collected, the right to delete their data, the right to correct inaccurate data, the right to opt out of data sale or sharing, and the right to limit use of sensitive personal information.
Stash explicitly states that it does not respond to browser 'Do Not Track' signals, meaning that even if your browser is set to request that websites not track you, Stash will continue to track your behavior.
Stash states that anonymized or aggregated customer data is not covered by this Privacy Policy and may be used for any business purpose, including marketing, analytics, and detecting security threats.
Stash collects government-issued identification documents and self-portrait photographs ('Selfies') for identity verification purposes as required by federal and industry regulations.
Stash collects your precise and approximate geolocation data, device identifiers, IP addresses, browser type, clickstream data, and behavioral information about how you use the app and website.
Stash retains your personal information for as long as your account is active and for a period after your account is closed, as required by law or for legitimate business purposes.
Stash sends promotional and marketing communications and allows you to opt out of marketing emails, but notes that you cannot opt out of service-related communications while your account is active.