Privacy Policy

Who we are

Stirpi is a private household ledger operated by an independent team ("we," "us"). This policy explains what personal and financial information we collect when you use the Stirpi application, how we use it, and the choices you have.

This policy is written for individuals using the product. It is not legal advice. Questions about this policy or your data can be sent to privacy@stirpi.com.

Data we collect

Directly from you

• Account credentials (email address, password hash).
• Household profile information you enter (household name, member names).
• Manual assets you record (real estate, private holdings, collectibles).
• Optional identifying information you provide when requesting a consumer credit report (full legal name, date of birth, Social Security Number, current address). This information is transmitted directly to our consumer-reporting agency partner and is not stored in plaintext on our servers.

From Plaid Inc.

When you link a bank, brokerage, or credit-card account, we use Plaid Inc. as our data provider. Plaid, acting on your behalf, connects to your financial institution and returns:

• Account identifiers, names, types, subtypes, and masks.
• Current and available balances.
• Historical and ongoing transactions.
• Liability details (loan balances, interest rates, minimum payments).
• Investment holdings and transactions.
• When you specifically request it: a consumer credit report from a nationwide consumer reporting agency.

Plaid's own end-user privacy policy governs Plaid's collection and use of this data and is available at plaid.com/legal.

From other integrations

• Fanatics Collect vault contents when you link your account (card inventory, comp values, images).
• Real-estate valuations from RentCast when you enable auto-refresh on a property.

Automatically

• Standard server logs (IP address, user agent, request timestamps) retained for security monitoring for up to 30 days.
• No third-party advertising cookies or cross-site tracking.

How we use your data

We use your data solely to operate the features you use in the product:

• Displaying your accounts, balances, transactions, net worth, and credit profile.
• Refreshing linked-account and valuation data on the schedule you enable.
• Generating alerts and monitoring events you subscribe to.
• Household sharing among members you explicitly invite.
• Debugging errors and preventing abuse (rate limiting, fraud signals).

We do not sell your personal or financial data. We do not share it with advertisers. We do not use it to train machine-learning models.

Who we share it with

We share data only with the service providers required to run the product:

• Plaid Inc. — bank, brokerage, and credit-report connectivity.
• Fanatics Collect — when you link a vault account.
• RentCast — when you enable auto-valuation on a property.
• Hosting and database providers that run the underlying infrastructure. Data is stored in the United States.
• Law enforcement, when compelled by valid legal process.

Each provider is contractually restricted from using your data for any purpose other than delivering the service they provide to us.

Security

• All traffic uses TLS 1.3 (TLS 1.2 minimum). HTTP is redirected to HTTPS at the edge.
• Data at rest is encrypted with AES-256 at the storage layer.
• Access to your data is enforced at the database layer through row-level policies keyed to your account identity.
• Plaid access tokens are stored only in server-controlled tables and never transmitted to the browser.
• Administrative access requires multi-factor authentication.

Retention and deletion

We retain your data while your account is active. When you close your account or request deletion, we complete the deletion within 30 days, including revocation of every linked Plaid item. Backups age out on a 30-day rolling window.

You can trigger deletion at any time from Settings. Full retention details are on the Data Retention Policy page.

Your rights

• Access. Request a copy of the data we hold about you.
• Correction. Ask us to correct inaccurate personal information.
• Deletion. Delete your account and all associated data.
• Withdraw consent. Unlink any Plaid item or third-party integration at any time.
• Complaint. Residents of jurisdictions with consumer-privacy laws (including California, Colorado, Virginia, and the EU/EEA) have additional rights and may lodge complaints with their supervisory authority.

To exercise any of these rights, email privacy@stirpi.com. We respond within 30 days.

Consumer credit data (FCRA)

When you request a credit report, we act as an authorized user acting on your behalf under the Fair Credit Reporting Act (15 U.S.C. §§ 1681 et seq.). You provide explicit written consent before any request is made. Consent is recorded per-user with a timestamp and disclosure version, is a soft inquiry that does not affect your credit score, and can be withdrawn at any time from Settings.

Children

Stirpi is not directed to children under 13. We do not knowingly collect information from children. If we learn we have, we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app at your next sign-in and posted here with an updated effective date. Continued use after a change constitutes acceptance of the revised policy.

Contact

Privacy inquiries: privacy@stirpi.com
Security disclosures: security@stirpi.com