Privacy Policy

Last updated:

January 11, 2026

Your privacy is a priority. Here is how StashFlow handles your data.

Table of Contents

1. Definitions

StashFlow

StashFlow refers to the web application accessible at stashflow.app, developed and operated by StashFlow. It is a personal finance analysis assistance tool.

User

User refers to any natural person accessing the StashFlow Service and using its features.

Personal Data

Personal Data refers to any information relating to an identified or identifiable natural person, directly or indirectly, including financial data, bank transactions, and any other information that may allow identification of a person.

Service

Service refers to all features made available by StashFlow, including the web application, analysis tools, and any other functionality accessible via the site.

2. Who is Responsible for Data Processing

StashFlow is responsible for processing personal data in the context of using the Service.

StashFlow

Email : privacy@stashflow.app

Juridiction : France / European Union

3. Data Collected

Data that StashFlow May Process

  • Data imported by the user: CSV files containing your bank transactions, amounts, dates, labels
  • Minimal technical data: error logs, navigation information (via essential cookies), technical metadata
  • Account-related data: if you create an account (future feature), authentication information

Data NOT Collected

  • No access to bank accounts: StashFlow never connects to your bank accounts
  • No bank scraping: no automatic reading of your bank data
  • No data sale: we never sell your data to third parties
  • No automatic email reading: we do not access your emails
  • No invasive advertising tracking: no targeted advertising based on your financial data
  • No biometric data: no collection of fingerprints, photos, or other biometric data

4. Where Data is Stored

Local Storage (default)

By default, all your financial data is stored locally on your device, in your browser's local storage (LocalStorage). It never leaves your device and is never transmitted to our servers.

Cloud Storage (optional, future)

An optional cloud synchronization feature may be offered in a future version (StashFlow Pro+). This feature will be strictly optional and will require your explicit consent. Data will be encrypted before any transfer.

5. Purpose of Processing

  • Display and analysis of financial data that you import
  • Projection and analysis calculations to help you understand your cashflow
  • Service improvement: anonymized error analysis to improve the application
  • User support: processing your support requests (if you contact us)

7. Data Retention

Your data is retained for as long as you use the Service. You can delete all your data at any time by using the "Clear Data" feature in the application.

Data deletion is immediate and final. No data is retained after deletion. No copy is retained on our servers (because data is never sent to our servers).

8. Data Sharing

No data sale: we never sell your personal data, whether for commercial or other purposes.

No transmission to commercial third parties: we do not transmit your data to advertisers, data brokers, or other commercial companies.

Technical providers only: we may use technical providers for website hosting and support email sending. These providers are subject to strict confidentiality obligations and only have access to necessary technical data (not your financial data, which remains on your device).

9. Security

We implement technical and organizational security measures to protect your data: encryption of data in transit (HTTPS), secure local storage, no transmission of sensitive data to our servers. However, since your data is stored locally on your device, you are also responsible for the security of your device and browser.

No system is perfectly secure. We cannot guarantee absolute security, but we are committed to taking all reasonable measures to protect your data.

10. Your Rights (GDPR)

Right of Access

You have the right to access all your data. Since your data is stored locally on your device, you already have direct access via the application.

Right to Rectification

You can modify your data at any time directly in the application.

Right to Erasure

You can delete all your data at any time by using the "Clear Data" feature in the application.

Right to Data Portability

You can export your data at any time by downloading your original CSV files or by exporting data from the application.

Right to Object

You can object to the processing of your data at any time by deleting your data or by ceasing to use the Service.

To exercise these rights, you can delete your data directly in the application, or contact us at privacy@stashflow.app.

11. Cookies

StashFlow uses essential cookies for the site's operation (for example, remembering your cookie preferences) and, with your consent, analytics cookies to improve the service.

Essential cookies are necessary for the site to function. Analytics cookies help us understand how the site is used to improve it (anonymized data).

You can manage your cookie preferences at any time by using the "Manage cookies" button at the bottom of the page. Essential cookies cannot be disabled as they are necessary for the site to function.

12. Minors

StashFlow is not intended for minors under 16 years of age without parental authorization. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at privacy@stashflow.app so that we may delete such data.

13. Policy Changes

We reserve the right to modify this Privacy Policy at any time. Changes will take effect upon their publication on the site. The date of last update is indicated at the top of this page. In case of significant changes, we will notify you via a notice on the site or by email (if you have provided an email address). It is recommended to regularly consult this page to be aware of any changes.

14. Contact

For any questions regarding this Privacy Policy or to exercise your rights, you can contact us: