DRAFT — for legal review. Not in effect. The whole document must be reviewed by counsel before publication.
EZbudget State Privacy Notice (California and other U.S. states)
Effective date: October 16, 2026 Website: https://ezbudget.setitsolutions.com
This notice supplements the EZbudget Privacy Policy. It applies to residents of California and other states with comprehensive consumer privacy laws, such as Colorado, Connecticut, Virginia, Texas, and Oregon. STEL Group LLC, 336 E University Pkwy #1113, Orem, UT 84058, is responsible for the Service.
[Counsel: EZbudget may be below CCPA/CPRA thresholds at launch, and personal information collected under the Gramm-Leach-Bliley Act is exempt from much of the CCPA. We plan to honor these rights voluntarily for all U.S. users. Confirm wording so it doesn't over-commit, and confirm which other state laws apply.]
1. Notice at collection
| Category of personal information | Examples | Source | Purpose | Retention |
|---|---|---|---|---|
| Identifiers | Name, email, account ID, IP address | You; your device | Account, security, support, communications | Life of account + up to 30 days |
| Customer records / financial information | Account names and types, account-number last 4, balances, transactions | Your financial institutions via Plaid or Stripe Financial Connections (with your authorization); you | Provide budgeting, reports, alerts | Life of account + up to 30 days |
| Commercial information | Subscription plan, billing history | You; Stripe | Billing, account management | As required by law (generally up to 7 years) |
| Internet / network activity | Pages viewed, device and browser data, security logs | Your device | Security, fraud prevention, service improvement | Up to 12 months |
| Inferences | Spending categories and budget insights shown to you | Derived from your data | Provide the Service to you only | Life of account |
| Sensitive personal information | Account log-in (handled by our authentication provider), financial account information | You; your institutions via providers | Only to provide the Service you request and to secure it | As above |
We use sensitive personal information only for purposes permitted by law, such as providing the Service you request and security. We do not use it to infer characteristics about you.
2. Do Not Sell or Share
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. Because we don't sell or share, we do not offer a "Do Not Sell or Share" opt-out link. We still honor Global Privacy Control (GPC) signals as an opt-out request. We do not knowingly sell or share the personal information of consumers under 16.
[If any advertising or analytics cookies are ever added that constitute "sharing," add a "Do Not Sell or Share My Personal Information" link and a cookie preference control before deploying them.]
3. Disclosures for business purposes
In the past 12 months we have disclosed the categories above to service providers and contractors for business purposes:
- Plaid and Stripe: account connectivity
- Stripe: payments
- Google Firebase / Identity Platform: authentication
- A third-party transactional email provider: email delivery
- Linode (Akamai): hosting
Plaid processes data under the Plaid End User Privacy Policy (https://plaid.com/legal/#end-user-privacy-policy).
4. Your rights
Depending on your state, you may have the right to:
- Know / access the personal information we collect, use, and disclose, and get a portable copy
- Delete personal information we collected from you
- Correct inaccurate personal information
- Opt out of sale, sharing, targeted advertising, or profiling (we don't do these)
- Limit the use of sensitive personal information (we use it only for permitted purposes)
- Non-discrimination: we will not deny service, charge different prices, or provide a different quality of service because you exercised your rights
- Appeal a decision about your request
5. How to submit a request
- In the app: Settings → Privacy (export and delete)
- Email: support@setitsolutions.com with the subject "Privacy Request"
- [Counsel: confirm whether a toll-free number is required, or whether email is sufficient for an online-only business with direct consumer relationships.]
Verification. We verify requests by confirming control of your signed-in account, which may include multi-factor authentication, or by matching information we hold.
Authorized agents. An agent may submit requests with your signed permission. We may ask you to verify your identity directly.
Timing. We respond within 45 days, extendable once by 45 days with notice.
Appeals. If we deny your request, reply to our decision or email support@setitsolutions.com with the subject "Privacy Appeal." We will respond within the time the law requires. If you are not satisfied, you may contact your state Attorney General.
6. Financial incentives
We do not offer financial incentives in exchange for personal information. [Revisit if referral credits or discounts tied to data are introduced.]
7. Contact
STEL Group LLC · 336 E University Pkwy #1113, Orem, UT 84058 · support@setitsolutions.com