jastado

Privacy Policy

1. Introduction

jastado ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share information when you use our website (jastado.com), join our waitlist or early-access programs, and when you use the jastado mobile and web applications (together, the "Services").

Depending on how you interact with us, we may process contact details for the waitlist, account and profile information when you register, usage and device data, optional Match and social features, and financial information when you choose to link a bank or card account.

2. Information We Collect

Information you provide: such as your name, email address, phone number, profile details, compatibility and onboarding answers, communications with support, and any details you share when joining the waitlist or creating an account.

Usage and device data: technical data collected when you use our website or apps, such as IP address, browser or device type, app version, pages or screens visited, and similar logs (including via cookies and similar technologies as described below).

Financial account data (when you connect a bank): if you use Spend, Wealth, or related features and link an account through Plaid, we receive account identifiers, institution name, account name and type, masked account numbers, balances, and transaction history as permitted by your financial institution and Plaid. We do not receive or store your full account or routing numbers through Plaid.

Waitlist (Google Forms): when you click to join the waitlist on jastado.com, we open a Google Form where you submit information such as email and name. Google LLC hosts that form; your responses are stored in our waitlist systems (including Google Workspace) and used as described in this policy.

Identity verification (where applicable): if you complete identity or compliance checks, we or our verification partners may process government ID data, biometric comparison data where you consent, and related verification results as required by law.

3. How We Use Your Information

We use the information we collect to:

  • Manage the waitlist, provide early access, and communicate about jastado.
  • Send product updates, launch announcements, and marketing communications where permitted by law (you can opt out at any time).
  • Create and secure your account, authenticate you, and provide customer support.
  • Operate Match, Spend, Wealth, and related product features you choose to use.
  • Display and analyze linked financial data inside jastado (budgeting, net worth, categorization, projections).
  • Understand how people discover and use our Services, measure interest, and improve our products and business.
  • Improve, personalize, and secure our Services and prevent abuse.
  • Comply with legal, regulatory, and contractual obligations.

We do not sell your personal information.

4. Legal Basis for Processing

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process personal data on the basis of:

  • Your consent (e.g., joining the waitlist, marketing emails, linking a bank, or optional features).
  • Performance of a contract (providing the Services you request).
  • Our legitimate interests in operating, improving, and securing the Services, understanding our audience, and communicating about jastado (balanced against your rights).
  • Compliance with legal obligations.

5. Information Sharing

We do not sell your personal information. We share it only:

  • With service providers who help us operate (e.g., hosting, email, SMS, analytics, identity verification). These providers process data on our instructions and under contractual safeguards.
  • With Google LLC when you submit our waitlist form (Google Forms). Google hosts the form and processes your responses under Google's privacy policy and terms; we receive the submission data to manage the waitlist and communicate with you.
  • With Plaid Inc. when you connect a financial institution (see Section 6).
  • If required by law, regulation, legal process, or to protect rights, safety, and security.
  • With your explicit consent.

Third-Party Disclaimer. While we carefully select third-party providers, we are not responsible for their independent acts, omissions, or failures outside our control. Your use of linked financial institutions is also subject to their terms and privacy practices.

6. Financial Data and Plaid

We use Plaid Inc. to connect to your financial institutions. When you use Plaid Link, you authenticate directly with your institution through Plaid's secure flow. Plaid's collection and use of data is governed by Plaid's privacy policy and your institution's terms.

Plaid-derived data is used only to provide financial features inside jastado. When you disconnect a linked bank, we remove the connection at Plaid and delete associated imported account and transaction data from our systems, except where law requires retention. See our Data Retention and Deletion Policy for details.

7. Data Security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit (TLS 1.2 or higher), encryption of sensitive credentials such as Plaid access tokens at rest, access controls on production systems, and authenticated administrative access.

No system is completely secure. You are responsible for safeguarding your account credentials, app PIN, and devices.

8. Data Retention and Deletion

We retain information for as long as needed to provide the Services, run our business, understand how our products are used, send communications you have not opted out of (where permitted), comply with law, and resolve disputes. Retention varies by data type; sensitive financial and account data follow stricter rules described in our Data Retention and Deletion Policy.

You may unsubscribe from marketing, disconnect linked banks, delete your product account in Settings, or request access or deletion where applicable. See jastado.com/data-retention for category-specific periods and steps.

9. Your Rights

Depending on your location, you may have rights under data protection law (including GDPR and Swiss nFADP), such as the right to:

  • Access, correct, or delete your personal information.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is consent-based.
  • Request a copy of your data in a portable format.
  • Lodge a complaint with a supervisory authority.

To exercise your rights, contact us at contact@jastado.com. For in-app account support: support@jastado.com.

10. International Data Transfers

Your information may be processed in countries outside your country of residence. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

11. Cookies and Similar Technologies

We use cookies and similar technologies on jastado.com and in our web application for essential functions, preferences, and security. See our Cookie Policy at jastado.com/cookies for details and how to manage preferences.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the Services after changes constitutes acceptance where permitted by law.

13. Contact

Privacy questions or requests:

contact@jastado.com

Product and account support: support@jastado.com. Security reports: security@jastado.com.