top of page

Privacy Policy

Effective Date: August 12, 2026
Last Updated: August 12, 2026

​

Stashem believes financial participation should be built on trust.

​

This Privacy Policy explains how  (Stashem,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when you use the Stashem mobile application, website, Stashem Wallet, Creator profiles, Creator Tokens, Transfer Market, payment features, and related services (collectively, the “Platform”).

​

It also explains the choices and privacy rights that may be available to you.​​​​​

Who Can Use Stashem

​​Stashem is intended only for adults who are 18 years of age or older.

​

You may not create or use a Stashem account if you are under 18.

​

Stashem uses identity-verification services to verify eligibility for financial features and may restrict, suspend, or close an account if we determine that the user does not meet our age or identity requirements.

​

We do not knowingly permit anyone under 18 to maintain a Stashem account.

​

If you believe someone under 18 has provided personal information to Stashem, contact us at support@stashem.com.

Information We Collect

The information we collect depends on how you use Stashem.

​

A. Account Information​

​

When you create or maintain a Stashem account, we may collect:

  • name;

  • username;

  • email address;

  • mobile number;

  • password or authentication information;

  • profile settings;

  • communication preferences;

  • account status; and

  • other information you choose to provide.

​

​

B. Creator Profile Information

​

If you create or maintain a Creator profile, we may collect:

  • Creator name;

  • ticker;

  • profile and cover images;

  • biography;

  • status messages;

  • Creator description;

  • social-media profiles;

  • audience information;

  • social-media performance information;

  • Creator benefits or offers;

  • content you submit;

  • Token pricing and availability; and

  • information you choose to make visible to other Stashem users.

​

Certain Creator information is intended to be public within Stashem.

​

You control the information you choose to publish, subject to Stashem's Platform Rules.

​

 

C. Identity and Verification Information

​​

Stashem uses Didit to support identity verification, age verification, KYC, fraud prevention, and related eligibility checks.

​

Depending on the verification process, Didit may collect information such as:

  • legal name;

  • date of birth;

  • residential address;

  • government-issued identification;

  • identification-document images;

  • information extracted from identification documents;

  • selfie or facial images;

  • liveness information;

  • biometric information or information derived from facial scans;

  • device and network information;

  • fraud indicators;

  • sanctions or watchlist information; and

  • verification results.

​

Stashem may receive information and results from Didit that are necessary to determine whether you have successfully completed our verification requirements.

​

Where possible, Stashem may rely on verification results rather than retaining copies of all underlying identity materials.

​

Didit may process information according to its own applicable privacy notices and terms.

​

Where biometric or similar sensitive information requires separate consent under applicable law, that consent will be presented as part of the identity-verification experience.

 

​

D. Payment and Wallet Information

​

Stashem uses PayPal and its affiliated or supported payment services to process eligible funding, card transactions, refunds, payouts, Monthly Investor Payouts, and related payment activity.

​

Depending on the transaction, we may receive or process information such as:

  • payment transaction identifiers;

  • payment-method type;

  • limited card information, such as the last four digits;

  • payment status;

  • authorization status;

  • transaction amount;

  • funding date;

  • refund information;

  • payout information;

  • payment failures;

  • chargebacks or disputes; and

  • other information needed to reconcile a transaction.

​

Full payment-card credentials may be collected and maintained directly by PayPal or the applicable payment provider rather than by Stashem.

​

PayPal processes information under its own privacy terms and practices.

 

​

E. Stashem Wallet Information

​

We maintain records relating to your Stashem Wallet, including:

  • funds added;

  • available Wallet balance;

  • amounts used to acquire Creator Tokens;

  • pending transactions;

  • eligible refunds;

  • refund requests;

  • earnings;

  • payouts;

  • fees;

  • reversals; and

  • Wallet transaction history.

​

Funds you add to your Stashem Wallet are recorded separately from earnings generated through Stashem.

 

​

F. Token and Transfer Information

​

Stashem maintains information necessary to operate and protect the Creator Token ecosystem.

​

This may include:

  • Tokens owned;

  • Creator associated with each Token;

  • Token quantity;

  • Token price;

  • Token or Token batch ID;

  • acquisition price;

  • buy orders;

  • transfer orders;

  • completed transfers;

  • order status;

  • transaction IDs;

  • transaction dates and times;

  • transfer proceeds;

  • Monthly Investor Payout eligibility;

  • Monthly Investor Payouts received;

  • portfolio values;

  • gains and losses displayed by the Platform;

  • fees; and

  • complete Token ownership history.

​

Stashem may maintain these records even after a Token is transferred so that Token ownership and transaction provenance remain traceable.

​

​​

G. Monthly Investor Payout Information

​

If you are a Creator, we may process information relating to your Monthly Investor Payout, including:

  • payout amount;

  • billing schedule;

  • payment authorization;

  • payment method identifier;

  • payment status;

  • successful and unsuccessful payment attempts;

  • amount distributed;

  • eligible Token Owners;

  • individual allocations; and

  • historical payout activity.

​

If you own eligible Creator Tokens, we may maintain records of Monthly Investor Payouts allocated and paid to you.

​

 

H. Device, Security and Usage Information

​

When you use Stashem, we may automatically collect:

  • IP address;

  • device type;

  • device identifiers;

  • operating system;

  • browser type;

  • application version;

  • login activity;

  • timestamps;

  • pages or screens viewed;

  • Platform interactions;

  • crash or diagnostic information;

  • security logs;

  • approximate location derived from IP or network information;

  • referral information; and

  • cookie, SDK, or similar technology information.

​

We use this information to operate, secure, understand, and improve Stashem.

 

​

I. Communications

​

We may collect information when you communicate with Stashem, including:

  • support requests;

  • emails;

  • messages;

  • feedback;

  • complaints;

  • dispute information;

  • survey responses; and

  • other communications with us.

​

​

​

Where We Get Information

We may collect personal information:

​

Directly From You

​

For example, when you:

  • create an account;

  • build a Creator profile;

  • place an order;

  • add funds;

  • request a refund;

  • contact support; or

  • change your account information.

​

From Didit

​

When you complete identity, age, fraud, or eligibility verification.

​

From PayPal and Payment Providers

​

When you fund your Wallet, make a payment, receive earnings, receive a refund, fund a Monthly Investor Payout, or complete another payment-related action.

​

From Your Use of Stashem

​

Including Token transactions, Wallet activity, Creator activity, orders, transfers, and Platform interactions.

​

From Devices and Technology

​

Including cookies, SDKs, security systems, logs, browsers, and mobile devices.

​

From Social Platforms or Public Sources

​

Where you choose to connect, provide, or authorize Creator-related social information, or where collection is otherwise permitted by law.

​

From Fraud, Security or Compliance Sources

​

Where reasonably necessary to protect Stashem, verify eligibility, investigate misconduct, or satisfy applicable legal obligations.

How We Use Your Information

We use personal information to operate The People Investment Ecosystem.

​

This includes using information to:

​

Create and Manage Your Account

  • register your account;

  • authenticate you;

  • maintain your profile;

  • provide account settings; and

  • communicate with you.

​

​

Verify Identity and Eligibility

  • confirm identity;

  • verify that users meet Stashem's age requirements;

  • perform KYC and related checks;

  • prevent identity fraud;

  • screen for prohibited or suspicious activity; and

  • determine eligibility for financial functionality.

​

​

Operate Creator Tokens

  • create and maintain Creator Token records;

  • record Token ownership;

  • process Creator Token sales;

  • administer transfers;

  • maintain Token provenance;

  • calculate portfolio information; and

  • create transaction records.

​

​

Operate the Stashem Wallet

  • record funds added;

  • provide buying power;

  • fund Token acquisitions;

  • process eligible refunds;

  • maintain Wallet balances; and

  • reconcile payment activity.

​

​

Process Earnings and Payouts

  • record Creator Token-sale earnings;

  • record transfer proceeds;

  • administer Monthly Investor Payouts;

  • calculate eligible payout amounts;

  • facilitate automatic earnings payouts; and

  • maintain payout records.

​

​

Operate the Transfer Market

  • receive orders;

  • match compatible orders;

  • complete permitted Token transfers;

  • determine the current Token Owner;

  • display appropriate market information; and

  • maintain transaction history.

​

​

Protect Stashem and Its Users

  • prevent fraud;

  • identify unauthorized transactions;

  • detect manipulation;

  • investigate suspicious behavior;

  • secure accounts;

  • protect payment activity;

  • enforce Stashem agreements; and

  • protect the integrity of the Transfer Market.

​

​

Meet Legal and Compliance Requirements

We may use information to:

  • respond to lawful requests;

  • comply with tax requirements;

  • maintain required records;

  • investigate disputes;

  • establish or defend legal claims;

  • comply with payment-network requirements; and

  • satisfy other applicable legal obligations.

​

​

Improve Stashem

We may use information to:

  • understand how people use Stashem;

  • improve features;

  • diagnose technical problems;

  • measure Platform performance;

  • develop new functionality;

  • improve user experience; and

  • conduct internal analytics.

​

​

Communicate With You

We may send:

  • account notifications;

  • verification messages;

  • trade and transfer confirmations;

  • Wallet notifications;

  • payout notifications;

  • Monthly Investor Payout reminders;

  • security alerts;

  • service announcements;

  • support communications; and

  • marketing communications where permitted.

​

You may opt out of non-essential marketing communications, but you cannot opt out of communications necessary to operate your account or complete transactions.

How We Disclose Information

We do not disclose personal information simply because it has value.

​

We disclose information when it is necessary to operate Stashem, provide a service you request, protect the Platform, satisfy legal obligations, or as otherwise described below.

​

A. Didit

​

We may provide information to Didit to initiate and complete identity, age, fraud, and eligibility verification.

​

Didit may return verification results and related information to Stashem.

​

Didit may also process certain information for its own legally permitted security, fraud-prevention, service-integrity, or compliance purposes.

 

​

B. PayPal and Payment Providers

​

We disclose information to PayPal and applicable payment partners where necessary to:

  • add funds;

  • authorize payments;

  • process Monthly Investor Payouts;

  • issue refunds;

  • deliver earnings;

  • process payouts;

  • handle disputes;

  • manage chargebacks; and

  • prevent payment fraud.

​

PayPal and other financial-service providers may independently collect and use personal information according to their own privacy practices.

 

​

C. Other Stashem Users

​

Some information is visible to other Stashem members because it is necessary to operate the Platform.

​

For example, other users may be able to see:

  • your public Creator profile;

  • Creator ticker;

  • Creator images;

  • Creator status;

  • Token price;

  • Token availability;

  • public Creator performance information;

  • market activity; and

  • other information intentionally displayed by Stashem.

​

Stashem does not publicly display your government identification, full payment-card information, verification documents, or other sensitive identity-verification information.

​

Transaction information may be displayed in aggregated, anonymized, pseudonymous, or limited form where appropriate.

 

​

D. Technology and Service Providers

​

We may disclose information to providers that help us operate:

  • cloud infrastructure;

  • application hosting;

  • databases;

  • cybersecurity;

  • fraud prevention;

  • analytics;

  • customer support;

  • email;

  • SMS or push notifications;

  • monitoring;

  • document storage;

  • accounting; and

  • other business systems.

​

These providers receive information only as reasonably necessary for the applicable service and subject to appropriate contractual or legal safeguards.

​

 

E. Professional Advisers

​

We may disclose information where reasonably necessary to:

  • lawyers;

  • accountants;

  • auditors;

  • insurers;

  • consultants; and

  • other professional advisers.

​

 

F. Legal, Regulatory and Safety Requests

​

We may disclose information if we reasonably believe disclosure is necessary to:

  • comply with applicable law;

  • comply with a subpoena, court order, or other lawful process;

  • respond to a regulator or law-enforcement authority;

  • investigate fraud;

  • protect users;

  • prevent financial crime;

  • enforce Stashem agreements;

  • protect Stashem's rights or property; or

  • address a safety or security threat.

 

​

G. Corporate Transactions

​

If Stashem is involved in a:

  • merger;

  • acquisition;

  • financing;

  • restructuring;

  • bankruptcy;

  • sale of assets; or

  • similar corporate transaction.

​

Personal information may be disclosed or transferred as part of that transaction, subject to applicable law and appropriate confidentiality protections.

Information We Do Not Make Public

Stashem is built around people, but privacy still matters.

​

We do not intentionally make the following information publicly visible through your Stashem profile:

  • government identification numbers;

  • identity documents;

  • facial-verification images;

  • biometric verification information;

  • full date of birth;

  • full debit or credit card numbers;

  • payment security codes;

  • private contact information unless you choose to publish it;

  • verification results intended only for compliance purposes; or

  • security credentials.

How Long We Keep Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to operate Stashem and satisfy legal, financial, security, tax, fraud-prevention, contractual, and dispute-resolution requirements.

 

Retention depends on the type of information.

​

Account and Profile Information

​

Generally retained while your account remains active and for a reasonable period afterward where necessary for legal, security, fraud-prevention, or dispute purposes.

​

​

Token Ownership and Transaction Records

​

May be retained for an extended period after account closure because Stashem must preserve accurate records of Token issuance, ownership, transfers, payouts, and transaction provenance.

​

​

Payment and Wallet Records

​

Retained as necessary for payment reconciliation, refunds, chargebacks, accounting, tax, fraud prevention, dispute handling, and applicable recordkeeping obligations.

​

​

Identity and Verification Records

​

Stashem retains verification information only for as long as reasonably necessary for eligibility, security, compliance, fraud prevention, dispute resolution, and applicable legal requirements.

​

Didit's retention of information is additionally governed by Stashem's configuration of the Didit service, our agreement with Didit, applicable law, and Didit's applicable privacy notices.

​

​

Communications

​

Support and account communications may be retained as necessary to resolve requests, maintain service history, enforce agreements, and establish or defend legal claims.

​

When information is no longer reasonably necessary, we may delete, anonymize, de-identify, or securely dispose of it.

​

Stashem will maintain an internal retention schedule specifying the applicable retention period for each material category of personal information.

Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • know whether we process your personal information;

  • access personal information we maintain about you;

  • obtain a copy of certain personal information;

  • correct inaccurate personal information;

  • request deletion of certain personal information;

  • opt out of certain sales or sharing of personal information;

  • opt out of targeted advertising where applicable;

  • limit certain uses of sensitive personal information where applicable;

  • withdraw certain consent;

  • request portability of eligible information; and

  • appeal certain decisions we make regarding your privacy request.

​

We will not discriminate against you for exercising a privacy right.

​

To submit a privacy request, contact: support@stashem.com

​

We may need to verify your identity before completing a request.

​

Certain information may not be deleted where we need it to:

  • complete a transaction;

  • maintain Token ownership history;

  • satisfy financial or tax recordkeeping obligations;

  • prevent fraud;

  • protect security;

  • exercise or defend legal claims;

  • comply with law; or

  • fulfill another legally permitted purpose.

Authorized Agents

Where applicable law permits you to use an authorized agent to exercise privacy rights, we may require:

  • evidence that you authorized the agent;

  • verification of your identity; or

  • direct confirmation that you authorized the request.

​

This helps protect your information from unauthorized requests.

​

 

​

California Privacy Rights

​

This section applies to California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to Stashem.

​

Depending on applicability and applicable exceptions, California residents may have the right to:

  • know the categories and specific pieces of personal information collected;

  • know the sources of personal information;

  • know why personal information is collected, used, or disclosed;

  • know the categories of third parties receiving personal information;

  • request deletion;

  • request correction;

  • receive certain information in a portable format;

  • opt out of the sale or sharing of personal information;

  • limit certain uses of sensitive personal information; and

  • receive equal service and pricing when exercising privacy rights.

​

Categories We May Collect

​

Within the preceding 12 months, depending on the user's activity, Stashem may have collected categories such as:

  • identifiers;

  • customer-record information;

  • commercial information;

  • financial and transaction information;

  • internet or electronic-network activity;

  • approximate geolocation information;

  • sensory information used in verification;

  • sensitive personal information;

  • authentication information; and

  • inferences or risk information used for security or fraud prevention.

​

Sources

​

These categories may come from:

  • you;

  • your Stashem activity;

  • Didit;

  • PayPal and payment providers;

  • devices and browsers;

  • social platforms you provide or connect;

  • security and fraud providers; and

  • legally permitted public or third-party sources.

​

Purposes

​

We use this information for the purposes described throughout this Privacy Policy, including:

  • operating Stashem;

  • identity and eligibility verification;

  • payment processing;

  • Wallet functionality;

  • Token transactions;

  • Transfer Market administration;

  • payouts;

  • security;

  • fraud prevention;

  • compliance;

  • analytics; and

  • customer support.

​

Disclosure

​

We may disclose relevant categories to:

  • identity-verification providers;

  • payment providers;

  • technology providers;

  • fraud and security providers;

  • professional advisers;

  • government or regulatory authorities where legally required; and

  • transaction counterparties or other users only to the extent required to operate Stashem.

​

Sensitive Personal Information

​

Stashem uses sensitive personal information primarily to:

  • provide requested services;

  • verify identity;

  • confirm eligibility;

  • process payments;

  • secure accounts;

  • prevent and investigate fraud;

  • maintain Platform integrity; and

  • comply with applicable requirements.

​

We do not use sensitive identity-verification information to infer characteristics about you for advertising.

​

Requests

​

California residents may exercise applicable rights through: support@stashem.com

​

Stashem will process applicable browser-based opt-out preference signals where legally required.

​

​

​

Privacy Notice At Collection

​

At or before collecting personal information, Stashem may provide a shorter Notice at Collection identifying:

  • the categories of personal information being collected;

  • sensitive personal information being collected;

  • the purposes for collecting or using it;

  • applicable retention information;

  • whether it is sold or shared as those terms are legally defined; and

  • a link to this Privacy Policy.

​

Feature-specific notices may also appear before:

  • identity verification;

  • biometric verification;

  • Wallet funding;

  • payment-method collection; or

  • another collection involving sensitive information.

 

​

Identity Verification Requests

​

Because Didit provides Stashem's identity-verification technology, privacy requests concerning information used in a Stashem verification may involve both Stashem and Didit.

​

You should first contact Stashem at: support@stashem.com

​

Where appropriate, we may coordinate with Didit to fulfill the request.

​

Certain Didit processing performed independently by Didit may be subject to rights exercised directly with Didit under its own privacy notices.

 

​

​

PayPal Privacy Requests

​

PayPal independently controls certain information it processes through its own services.

​

Requests relating specifically to a PayPal account, PayPal Wallet, or information maintained independently by PayPal should be directed to PayPal through its applicable privacy controls.

​

Requests concerning information Stashem receives from PayPal can be submitted to Stashem.

​

​

​

Automated Systems & Fraud Prevention

​

Stashem and its providers may use automated systems to:

  • detect fraud;

  • identify suspicious activity;

  • assess verification information;

  • detect duplicate or manipulated identities;

  • protect payment activity;

  • identify prohibited Transfer Market behavior; and

  • protect the Platform.

​

Where applicable law provides rights relating to decisions based solely on automated processing that produce legally or similarly significant effects, Stashem will provide those rights as required.

​

​

 

International Processing

​

Some Stashem service providers may process information in locations different from where you live.

​

Where required by applicable law, Stashem and its providers use appropriate contractual, technical, organizational, or other safeguards for such processing.

​

​

 

Third-Party Links & Services

​

Stashem may link to third-party websites, applications, social platforms, or services.

​

Their privacy practices are governed by their own policies.

​

Stashem is not responsible for the privacy practices of an unrelated third party merely because Stashem provides a link to it.

 

​

​

Do Not Provide Information For Another

Person Without Authority

​

You may not provide another person's:

  • identity information;

  • government identification;

  • payment information;

  • financial information; or

  • other personal information

unless you are authorized to do so.

 

​

​

Changes To This Privacy Policy

​

Stashem may update this Privacy Policy to reflect:

  • new Platform functionality;

  • changes to our information practices;

  • changes to service providers;

  • changes in applicable law; or

  • security and operational developments.

​

The Last Updated date at the top identifies the current version.

​

If a change materially affects how we use personal information, we will provide additional notice or obtain consent where required by applicable law.

​

​

 

Contact Stashem

​

Questions, concerns, or requests about this Privacy Policy or Stashem's privacy practices may be directed to:

Stashem
Email: support@stashem.com

​

​

​

Your Privacy, In Simple Terms

​

Stashem uses your information to know who you are, protect your account, move money securely, maintain accurate Token ownership, and make the Platform work.

​

We use Didit to help verify identity.

​

We use PayPal to help process payments.

​

Your financial and identity information is not part of your public Creator profile.

​

We do not need everyone on Stashem to know everything about you.

​

They need to know who you are in the market. We need to know that you are really you.

bottom of page