Privacy Policy

1. Introduction

K-Stack LLC ("we", "our", or "us") respects your privacy and is fundamentally committed to protecting your personal banking data. This Privacy Policy describes how we collect, use, and protect your information when you use our services at kstack.app and gateway.kstack.app.

2. Data Collection & Usage

We only collect the absolute minimum data required to provide our primary service: real-time Profit & Loss aggregation.

• Financial Data: Through our integration with Plaid Inc. ("Plaid"), we retrieve read-only historical transaction ledgers and current account balances. We do not have the ability to move money or initiate transfers on your behalf.
• Account Information: We store your email address and encrypted password hashes to authenticate your secure login sessions.

3. Data Protection (Zero-Knowledge)

We utilize a strictly enforced "Zero-Knowledge" cryptographic architecture. This means your external financial tokens (such as Plaid Access Tokens) and sensitive transaction data are symmetrically encrypted at rest using AES-256. The decryption keys are mathematically derived from your personal password, ensuring that K-Stack administrators cannot read or access your plaintext financial data.

4. Data Sharing & Selling

We absolutely do not sell, rent, or trade your personal or financial data to third parties.

Your data is only processed by necessary underlying infrastructure sub-processors (e.g., our secure data centers and Plaid). By using our service, you acknowledge that Plaid will also process this data subject to their Privacy Policy (plaid.com/legal).

5. Your Rights & Data Deletion

You maintain full ownership of your data. You may request the immediate deletion of your entire account, including the cryptographic purging of all imported external financial ledgers, at any time by contacting us.

6. Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data, please contact our administrative team at: admin@kstack.app.