This analysis describes what Stash's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
If the CPRA does not apply to most data Stash collects, customers cannot rely on CPRA rights — such as the right to know, delete, or opt out of sale — for the majority of their personal information held by Stash.
Interpretive note: The word 'most' is Stash's own qualifier — some personal information Stash collects may still fall under the CPRA. The canonical claim preserves this qualifier exactly.
For most of the personal information Stash collects, you cannot exercise CPRA rights because Stash claims that data falls under a federal financial institution exemption.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"The CPRA does not apply to non-public personal information collected by financial institutions governed by certain federal regulations. As a result, the CPRA does not apply to most of the personal information that Stash collects from you as a customer.Excerpt from Stash's Privacy Policy
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
If the CPRA does not apply to most data Stash collects, customers cannot rely on CPRA rights — such as the right to know, delete, or opt out of sale — for the majority of their personal information held by Stash.
For most of the personal information Stash collects, you cannot exercise CPRA rights because Stash claims that data falls under a federal financial institution exemption.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stash.