Privacy Policy

Effective Date: December 1, 2024

Last Updated: February 28, 2026

01 Introduction

Stablish Solutions Inc. (“Stablish,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you:

Visit our websites (including stablish.io and related domains)
Use our church giving and donation management platform
Use our financial wellness tools
Interact with a church using our platform
Communicate with us

Stablish operates exclusively in the United States and provides services to U.S.-based churches, nonprofit organizations, and donors.

02 Who We Are

Stablish Solutions Inc.

A Delaware corporation

Operating in Los Angeles County, California

Email: support@stablish.io

Stablish provides:

Online giving and donation management software for churches
Donor engagement tools
Financial wellness tools for individual givers
Website and engagement solutions for churches

In most cases:

Churches are the owners of donor data collected through their accounts.
Stablish acts as a service provider processing information on behalf of churches.
For direct user accounts, subscriptions, and financial wellness tools, Stablish acts as the business collecting your information.

03 Information We Collect

We collect information in the following categories:

A. Information You Provide Directly

Name Email address Phone number Mailing address Church affiliation Donation information Account login info Subscription details Support comms

B. Payment Information (Stripe)

All payments and donation transactions are processed by Stripe, Inc.

When you make a donation or subscription payment:

Payment details (such as credit/debit card information or bank account information) are collected directly by Stripe.
We do not store full credit card numbers or full bank account numbers.

We receive limited transaction data necessary to:

Confirm payment
Prevent fraud
Maintain transaction records
Provide customer support

Stripe may collect and process:

Payment instrument information
Billing address
IP address
Device information
Transaction history
Fraud detection signals

Stripe processes personal information in accordance with its own Privacy Policy and security standards, including encryption and PCI-DSS compliance.

C. Financial Account Connectivity (Plaid)

If you use our financial wellness tools and choose to connect a financial account, we use Plaid Inc. to enable secure financial account linking.

What We Do Not Collect

We do not collect or store your bank login credentials.
We do not store your username or password for your financial institution.

What Happens Instead

You enter your credentials directly into Plaid’s secure interface.
Plaid provides us with a secure access token.
We use that token to retrieve only the data necessary to provide the features you request.

Data that may be accessed via Plaid (depending on permissions you grant):

Account balances
Transaction history
Account type
Institution name

We only access the financial data necessary to provide financial wellness tools you enable.

C.1 Plaid Technical & Device Information

When you connect a financial account through Plaid, Plaid and/or our application as part of that process may collect certain technical information, including:

IP address
Device identifiers
Device type
Operating system
Browser type
App version
Usage and authentication data

This information is used for:

Identity verification
Fraud detection and prevention
Security monitoring
Maintaining the integrity of financial connections

We do not independently use this data for advertising purposes. Plaid’s use of data is governed by Plaid’s Privacy Policy.

D. Automatically Collected Information

When you access or use our Services, we may automatically collect:

IP address Device type Operating system Browser type App interaction data Log data Referring URLs Session duration Crash data

We use this information to maintain platform performance, detect and prevent fraud, improve functionality, and analyze product usage.

E. Analytics (PostHog)

We use PostHog (cloud-hosted) for product analytics. PostHog may collect:

Device information and IP address
Browser type and pages visited
Feature usage and click/interaction data
Session and timestamp data

We use PostHog to understand how users interact with our Services, improve user experience, diagnose performance issues, and develop new features.

PostHog processes data on our behalf as a service provider. We do not use PostHog to sell personal data.

F. Advertising & Tracking (Meta Pixel)

We use Meta Pixel and similar technologies to measure the effectiveness of advertising campaigns, deliver relevant ads for Stablish services, and understand how users found our platform.

Meta may collect:

IP address and device identifiers
Browser data and pages visited
Interaction events

Under certain U.S. state privacy laws, this may qualify as “sharing” for targeted advertising. We do not sell your personal information for monetary compensation. You may opt out of targeted advertising as described below.

04 How We Use Your Information

We use personal information to:

Provide donation processing services
Deliver financial wellness features
Process subscriptions
Support churches using our platform
Provide customer service
Improve platform performance
Detect and prevent fraud
Comply with legal obligations
Send service communications
Send marketing communications (with opt-out ability)

06 Data Retention

We retain personal information only as long as necessary to:

Maintain active accounts
Provide services
Comply with tax and financial regulations
Resolve disputes
Prevent fraud

General Guidelines

Account data: retained while active and up to 12 months after closure
Financial transaction records: retained as required by law
Church donor records: churches control retention within their accounts

07 Data Security

We implement commercially reasonable safeguards including:

Encrypted transmission (TLS/HTTPS)

Tokenized financial access (via Plaid)

PCI-compliant payment processing (via Stripe)

Role-based access controls

Secure cloud hosting

Vendor security assessments

No system is completely secure, but we take appropriate measures to protect your information.

08 Children's Privacy

Our Services are not directed to children under 13.

We do not knowingly collect personal information from children under 13.

09 Your U.S. Privacy Rights

Depending on your state of residence, you may have rights to:

Access personal information
Correct inaccurate information
Delete personal information
Opt out of targeted advertising
Limit use of sensitive personal information
Not be discriminated against for exercising rights

To exercise your rights:

Email us at support@stablish.io

We may verify your identity before fulfilling requests.

10 Opt-Out of Targeted Advertising

You may opt out by:

Adjusting cookie settings
Using browser privacy controls
Enabling Global Privacy Control (where supported)
Contacting support@stablish.io

11 International Users

Stablish operates exclusively in the United States and does not target services to individuals in the European Union or other international jurisdictions.

If you access our Services from outside the U.S., your data will be processed in the United States.

12 Changes to This Policy

We may update this Privacy Policy periodically.

If changes are material, we will provide notice via website notice or email notification (if appropriate).

Continued use of the Services constitutes acceptance of the revised policy.

13 Contact Us