Privacy

We keep it to what the product needs to work.

• Sign-in identity. When you sign in through Privy, we receive the email address, social account identifier, or wallet address you chose, plus a Privy user ID. That is how we know it is you next time.
• Wallet addresses. Your Stax smart account address and the wallet that owns it. We store them so the app can show your holdings and so the beta list knows which account is yours.
• On-chain activity. Every deposit, trade, and withdrawal happens on Base, a public blockchain. Those records are visible to anyone, forever, and are not controlled by us. We read them to show you your history and receipts.
• Beta and referral data. If you join the private beta, we store when you joined, your referral code, and who joined with your link.
• Analytics. We use Vercel Analytics to count page views and see which pages people use. It sets no cookies and does not identify you across sites.
• Server logs. Our servers log requests, including your IP address and browser type, for a short time, to keep the service running and to stop abuse. When something breaks we record the error and the page it happened on.

• No card or bank details. When you add money with a card, the payment is handled by a third party. Card numbers never reach us.
• No private keys. Your Stax account is self-custodial. Keys stay with Privy’s embedded wallet or your own wallet. We cannot move your money without you.
• No selling of data. We do not sell your information, and we do not share it with advertisers.
• No tracking cookies. Cookies and local storage are used only to keep you signed in and to remember settings like your theme.

Stax runs on a small set of services. Each one sees only what it needs to do its job.

• Privy handles sign-in and the embedded wallet. It sees your login identity.
• Coinbase issues the tokenized stocks (B20 tokens) on Base. Your trades interact with their contracts on-chain.
• Aave is the protocol that holds your safe dollars. On-chain only.
• Pimlico sponsors the network fees for your transactions and sees the transactions it pays for.
• Relay moves deposits from other chains to Base and sees the addresses involved.
• Neon hosts our database, where the account and beta records above live.
• Vercel hosts the site and the app and provides the cookieless analytics.

Beyond these, we share data only if the law requires it or to protect the people who use Stax from fraud or abuse.

Account, wallet, and beta records stay for as long as you have an account. Server logs are kept for a short time, typically no more than 30 days. Error reports are kept for up to 90 days.

On-chain records are outside our control. They stay on Base permanently, whether or not you still use Stax.

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Deleting removes your account records from our database; it cannot remove anything already written to the blockchain.

Depending on where you live, you may have further rights under laws like the GDPR or the CCPA. We will honour them. Write to us and we will respond within 30 days.

If we change this policy in a way that matters, we will update the date at the top and say so on the site before the change takes effect.

Questions about your data go to hello@stax.best. A real person reads it.