Stash · Stash Terms of Use · View original document ↗

Third-Party Subscription Data Sharing

Medium severity Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Stash Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

When you sign up for Stash, you agree to let Stash share your name, address, phone number, email, and payment details with third-party companies for identity verification and billing purposes.

This analysis describes what Stash's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes the operational basis for third-party data sharing in the context of account verification and billing functions, defining Subscription Data as a subset of Personal Information governed by the Privacy Policy. This authorization permits information transfer to external verification and payment processors as part of standard account administration.

Consumer impact (what this means for users)

This clause requires you to consent to Stash sharing your legal name, address, phone number, email address, and billing information with third-party companies as a condition of using the service, with no option to opt out while remaining a Stash customer.

How other platforms handle this

Coinbase Medium

We may share personal information with third-party service providers and partners who support our business operations, including identity verification providers, payment processors, analytics providers, marketing partners, and blockchain analytics companies.

Windsurf Medium

You may elect to use or integrate platforms, add-ons, services, or products not provided by Exafunction ("Third-Party Platforms") (e.g. User IDE's, Web Search, MCP Servers) subject to your agreement with the relevant provider and not this Agreement. We do not control nor shall we have liability for ...

Spotify Medium

We receive some of the data mentioned above from third parties... If you connect your Spotify account to a third party application, service or device, we may collect and use information from them. This collection is to make the integration possible... We work with technical service partners that giv...

See all platforms with this clause type →

Monitoring

Stash has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
For purposes of your use of our Services including identification and billing, you agree to provide us with true, accurate and complete information as required by the subscription or sign up process to our Services, including, without limitation, your legal name, address, telephone number, email address and applicable billing information (collectively, "Subscription Data"), and to allow us to share your Subscription Data with third parties for the purpose of verifying the information you provide and charging your account. Subscription Data is a subset of Personal Information and shall be considered Personal Information under our Privacy Policy.

— Excerpt from Stash's Stash Terms of Use

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY FRAMEWORK: Gramm-Leach-Bliley Act (15 U.S.C. §6802-6803) requires financial institutions to provide a privacy notice and opt-out rights for sharing nonpublic personal information with nonaffiliated third parties, subject to exceptions for service provider arrangements under 12 CFR §1016.13-14. CCPA (Cal. Civ. Code §1798.100, §1798.110) grants California residents the right to know what personal information is shared and with whom. FCRA (15 U.S.C. §1681 et seq.) may apply if the third-party verification involves consumer report information. FTC Act Section 5 applies to material omissions about data sharing practices. The FTC and CFPB are primary enforcement authorities. (2)

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • CFPB
    The CFPB enforces GLBA privacy notice and opt-out requirements for financial institutions sharing nonpublic personal information with third parties.
    File a complaint →
  • FTC
    The FTC has authority under Section 5 and the GLBA Safeguards Rule to act against financial institutions that inadequately disclose or protect consumer data shared with third parties.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Stash Terms of Use
Entity
Stash
Document last updated
March 14, 2026
Tracking information
First tracked
March 15, 2026
Last verified
April 27, 2026
Record ID
CA-P-003329
Document ID
CA-D-00060
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
3ffd119a2e224fd289c41ae5feccb032dd206833a7c21b5c7ea093fb8b60ce02
Analysis generated
March 15, 2026 10:47 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Stash
Document: Stash Terms of Use
Record ID: CA-P-003329
Captured: 2026-03-15 10:47:46 UTC
SHA-256: 3ffd119a2e224fd2…
URL: https://conductatlas.com/platform/stash/stash-terms-of-use/third-party-subscription-data-sharing/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Stash's Third-Party Subscription Data Sharing clause do?

The clause establishes the operational basis for third-party data sharing in the context of account verification and billing functions, defining Subscription Data as a subset of Personal Information governed by the Privacy Policy. This authorization permits information transfer to external verification and payment processors as part of standard account administration.

How does this clause affect you?

This clause requires you to consent to Stash sharing your legal name, address, phone number, email address, and billing information with third-party companies as a condition of using the service, with no option to opt out while remaining a Stash customer.

Is ConductAtlas affiliated with Stash?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stash.