Privacy Policy

Last Updated: February 28, 2026

Introduction

Stablish Solutions Inc. ("Stablish," "we," "us," or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you:

• Visit our websites (including stablish.io and related domains)
• Use our church giving and donation management platform
• Use our financial wellness tools
• Interact with a church using our platform
• Communicate with us

Stablish operates exclusively in the United States and provides services to U.S.-based churches, nonprofit organizations, and donors.

Who We Are

Stablish Solutions Inc.

• A Delaware corporation
• Operating in Los Angeles County, California
• Email: support@stablish.io

Stablish provides:

• Online giving and donation management software for churches
• Donor engagement tools
• Financial wellness tools for individual givers
• Website and engagement solutions for churches

In most cases:

• Churches are the owners of donor data collected through their accounts.
• Stablish acts as a service provider processing information on behalf of churches.
• For direct user accounts, subscriptions, and financial wellness tools, Stablish acts as the business collecting your information.

Information We Collect

We collect information in the following categories:

A. Information You Provide Directly

• Name
• Email address
• Phone number
• Mailing address
• Church affiliation
• Donation information
• Account login info
• Subscription details
• Support comms

B. Payment Information (Stripe)

All payments and donation transactions are processed by Stripe, Inc.

When you make a donation or subscription payment:

• Payment details (such as credit/debit card information or bank account information) are collected directly by Stripe.
• We do not store full credit card numbers or full bank account numbers.

We receive limited transaction data necessary to:

• Confirm payment
• Prevent fraud
• Maintain transaction records
• Provide customer support

Stripe may collect and process:

• Payment instrument information
• Billing address
• IP address
• Device information
• Transaction history
• Fraud detection signals

Stripe processes personal information in accordance with its own Privacy Policy and security standards, including encryption and PCI-DSS compliance.

C. Financial Account Connectivity (Plaid)

If you use our financial wellness tools and choose to connect a financial account, we use Plaid Inc. to enable secure financial account linking.

What We Do Not Collect

• We do not collect or store your bank login credentials.
• We do not store your username or password for your financial institution.

What Happens Instead

• You enter your credentials directly into Plaid's secure interface.
• Plaid provides us with a secure access token.
• We use that token to retrieve only the data necessary to provide the features you request.

Data that may be accessed via Plaid (depending on permissions you grant):

• Account balances
• Transaction history
• Account type
• Institution name

We only access the financial data necessary to provide financial wellness tools you enable.

C.1 Plaid Technical & Device Information

When you connect a financial account through Plaid, Plaid and/or our application as part of that process may collect certain technical information, including:

• IP address
• Device identifiers
• Device type
• Operating system
• Browser type
• App version
• Usage and authentication data

This information is used for:

• Identity verification
• Fraud detection and prevention
• Security monitoring
• Maintaining the integrity of financial connections

We do not independently use this data for advertising purposes. Plaid's use of data is governed by Plaid's Privacy Policy.

D. Automatically Collected Information

When you access or use our Services, we may automatically collect:

• IP address
• Device type
• Operating system
• Browser type
• App interaction data
• Log data
• Referring URLs
• Session duration
• Crash data

We use this information to maintain platform performance, detect and prevent fraud, improve functionality, and analyze product usage.

E. Analytics (PostHog)

We use PostHog (cloud-hosted) for product analytics. PostHog may collect:

• Device information and IP address
• Browser type and pages visited
• Feature usage and click/interaction data
• Session and timestamp data

We use PostHog to understand how users interact with our Services, improve user experience, diagnose performance issues, and develop new features.

PostHog processes data on our behalf as a service provider. We do not use PostHog to sell personal data.

F. Advertising & Tracking (Meta Pixel)

We use Meta Pixel and similar technologies to measure the effectiveness of advertising campaigns, deliver relevant ads for Stablish services, and understand how users found our platform.

Meta may collect:

• IP address and device identifiers
• Browser data and pages visited
• Interaction events

Under certain U.S. state privacy laws, this may qualify as "sharing" for targeted advertising. We do not sell your personal information for monetary compensation. You may opt out of targeted advertising as described below.

How We Use Your Information

We use personal information to:

• Provide donation processing services
• Deliver financial wellness features
• Process subscriptions
• Support churches using our platform
• Provide customer service
• Improve platform performance
• Detect and prevent fraud
• Comply with legal obligations
• Send service communications
• Send marketing communications (with opt-out ability)

SMS Communications

If you provide your mobile phone number to Stablish or to a church using our platform, you may receive SMS or text messages related to:

• Donation confirmations
• Account notifications
• Church communications
• Customer support responses
• Platform updates
• Optional service or marketing communications

Messaging is conversational and user-driven, not promotional or bulk marketing.

Users provide consent to receive SMS messages by entering their phone number on a public web form or during account registration and affirmatively agreeing to receive messages from Stablish. Consent is not a condition of purchase.

Message frequency varies depending on your activity and the services you use.

Message and data rates may apply depending on your mobile carrier and plan.

You may opt out of receiving SMS messages at any time by replying STOP to any message you receive from us. After you send the message "STOP," we will send you a confirmation message and you will no longer receive SMS messages from that program.

For assistance, reply HELP to any message or contact support@stablish.io.

Additional information about our messaging programs, including detailed terms governing SMS communications, is available in our SMS Terms and Conditions.

Your mobile phone number will not be sold or shared with third parties for their own marketing purposes.

Stablish Church Assistant SMS

Program Description: Two-way SMS assistant for church pastors and staff providing giving insights, donor reminders, and weekly summaries.

Message Frequency: Message frequency varies.

Message and Data Rates: Message and data rates may apply.

Opt-Out: Reply STOP to unsubscribe.

Help: Reply HELP for help or email support@stablish.io.

Full Terms: Full messaging terms are available at https://stablish.io/sms-terms.

How We Share Information

We share information only as necessary.

A. Service Providers

We may share information with:

• Stripe (payment processing)
• Plaid (financial account connectivity)
• PostHog (analytics)
• Cloud hosting providers
• Email service providers
• Security and fraud-prevention vendors

These providers are contractually obligated to protect your data.

B. Churches Using Our Platform

If you donate to or engage with a church:

• Your donation information is shared with that church.
• The church controls its use of donor data.
• Stablish acts as a service provider to the church.

C. Advertising & Analytics Partners

Certain identifiers (such as cookies or device identifiers) may be shared with advertising partners to measure ad performance and deliver relevant Stablish advertisements.

D. Legal & Business Transfers

We may disclose information:

• To comply with law
• To enforce agreements
• To protect users and our platform
• In connection with mergers or asset sales

Data Retention

We retain personal information only as long as necessary to:

• Maintain active accounts
• Provide services
• Comply with tax and financial regulations
• Resolve disputes
• Prevent fraud

General Guidelines

• Account data: retained while active and up to 12 months after closure
• Financial transaction records: retained as required by law
• Church donor records: churches control retention within their accounts

Data Security

We implement commercially reasonable safeguards including:

• Encrypted transmission (TLS/HTTPS)
• Tokenized financial access (via Plaid)
• PCI-compliant payment processing (via Stripe)
• Role-based access controls
• Secure cloud hosting
• Vendor security assessments

No system is completely secure, but we take appropriate measures to protect your information.

Children's Privacy

Our Services are not directed to children under 13.

We do not knowingly collect personal information from children under 13.

Your U.S. Privacy Rights

Depending on your state of residence, you may have rights to:

• Access personal information
• Correct inaccurate information
• Delete personal information
• Opt out of targeted advertising
• Limit use of sensitive personal information
• Not be discriminated against for exercising rights

To exercise your rights, email us at support@stablish.io. We may verify your identity before fulfilling requests.

Opt-Out of Targeted Advertising

You may opt out by:

• Adjusting cookie settings
• Using browser privacy controls
• Enabling Global Privacy Control (where supported)
• Contacting support@stablish.io

International Users

Stablish operates exclusively in the United States and does not target services to individuals in the European Union or other international jurisdictions.

If you access our Services from outside the U.S., your data will be processed in the United States.

Changes to This Policy

We may update this Privacy Policy periodically.

If changes are material, we will provide notice via website notice or email notification (if appropriate).

Continued use of the Services constitutes acceptance of the revised policy.

Contact Us

Stablish Solutions Inc.

Los Angeles County, California

Email: support@stablish.io