Stash · Stash Privacy Policy

Identity Verification Biometric and Selfie Collection

Medium severity
Share 𝕏 Share in Share

Why it matters

Biometric-adjacent data such as facial images used for identity matching may be subject to state biometric privacy laws (e.g., Illinois BIPA) and creates long-term data retention concerns.

Consumer impact

Stash collects highly sensitive personal and financial information — including Social Security numbers, bank account credentials, and behavioral data — and shares it with service providers, financial partners, and marketing companies. Consumers should be aware that their financial activity, location data, and device information may be used for targeted advertising and shared with third parties beyond what is necessary for core financial services. You can opt out of certain data sharing for marketing purposes by contacting Stash at privacy@stash.com or adjusting preferences in your account settings.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Contact privacy@stash.com to request deletion of identity verification documents and photographs held by Stash. Note that some data may need to be retained for regulatory compliance purposes.

Applicable agencies

  • FTC
    FTC oversees biometric data collection practices and has taken enforcement action related to facial recognition and identity data misuse.
    File a complaint →
  • State AG
    State AGs in Illinois, Texas, and Washington have enforcement authority over biometric privacy laws that may apply to selfie and facial data collection.
    File a complaint →

Provision details

Document information
Document
Stash Privacy Policy
Entity
Stash
Document last updated
March 14, 2026
Tracking information
First tracked
March 15, 2026
Last verified
March 15, 2026
Record ID
CA-P-000532
Document ID
CA-D-00061
Evidence Provenance
Source URL
Wayback Machine
SHA-256
c314a917a32611f62e28ff71b79a50309bf3c87dea6cc7bd197833b0719565f8
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Stash | Document: Stash Privacy Policy | Record: CA-P-000532
Captured: 2026-03-15 10:51:58 UTC | SHA-256: c314a917a32611f6…
URL: https://conductatlas.com/platform/stash/stash-privacy-policy/identity-verification-biometric-and-selfie-collection/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document