Privacy policy

What we store

Your account profile (your sign-in ID and display name), your settings, the wallet addresses you link with the labels you give them, and a record that you accepted this version. We do not store seed phrases or private keys. We do not store government ID.

When you accept this policy or our terms, we also keep a hashed copy of your IP address and of your browser details with that record (a code made from each, not the details themselves), so we can show the acceptance was made. Acceptance records are kept even if you erase your profile.

Screening

Before Stu prepares a transfer to an address, it checks that address against a sanctions list kept on Stu’s own systems. If the address matches, Stu will not prepare the transfer. If that list is out of date, Stu will not prepare transfers until the list is updated. We do not send your address to an outside screening service.

Sub-processors

These companies process data for Stu:

• Supabase — database
• Vercel — hosting and request logs
• Auth0 — sign-in
• xAI (Grok) — chat. It receives your chat messages, your first name, your account labels, and short coded IDs for your accounts. It receives live balances only if you turn on Answer in chat in Settings. Your wallet addresses themselves are not sent.
• WalletConnect — connecting your wallet
• Fly.io — runs the checks behind your workflows. It does not receive your account profile.

Your data

You can download a copy of the data we store about your account (a JSON file) and ask us to erase your profile. Records of money you moved are kept. We cannot erase your profile while your account is under a legal hold.