Effective Date: 4/4/2026

1. Introduction

Vuestash, developed by Sveltify LLC ("we," "us," or "our"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we handle your data across our marketing website and all versions of the Vuestash application. Vuestash is available in three editions with different data storage models:

2. What Data We Collect

Marketing Website

Our marketing website does not collect any personal data or use cookies, tracking technologies, or analytics.

Vuestash Desktop and Web – Private Edition

The Vuestash Desktop app and Web – Private Edition (`private.vuestash.com`) do not collect, store, or transmit any personal data or financial information to our servers. All financial data is stored locally — on your device (Desktop) or in your browser's IndexedDB (Web – Private Edition) — and is never sent to our servers or any third party.

Vuestash Web – SaaS Edition (`app.vuestash.com`)

The SaaS Edition stores your financial data in the cloud using Dexie Cloud, a third-party cloud database service. This enables multi-device sync and cloud backup. By using the SaaS Edition, you consent to your financial data being stored and processed by Dexie Cloud in accordance with their Privacy Policy. See Section 5 for full details.

Optional Bank Sync via Teller

The SaaS Edition includes optional bank account synchronization powered by Teller. This feature is available only to users with a valid paid license and is entirely opt-in — you must actively connect your bank accounts to enable it. When in use, Teller securely retrieves your transaction history via their open banking API. You may disconnect your bank accounts at any time. See Section 6 for full details.

3. Payments and Licensing

Vuestash uses PayHip as our e-commerce platform for handling payments and purchases. PayHip may utilize Stripe or LemonSqueezy as their payment processing partners. When you purchase a license, all payment information is processed directly by PayHip, Stripe, or LemonSqueezy. Vuestash does not collect, process, or store your payment information. Upon completing the purchase, PayHip/Stripe/LemonSqueezy communicates with our licensing partner KeyGen to issue your license key, which will be sent to you via email. Minimal information necessary for order fulfillment (such as your email address) may be collected by these processors. For more information about their respective policies, please see: - PayHip Privacy Policy - Stripe Privacy Policy - LemonSqueezy Privacy Policy

4. License Validation

Vuestash uses KeyGen (https://keygen.sh/) to manage software license keys and activations. When activating your license, KeyGen may collect information such as your license key, device identifier, and activation details. Vuestash does not collect or store this data. For more information, please refer to: KeyGen Privacy Policy.

5. Dexie Cloud – Cloud Data Storage (SaaS Edition)

The SaaS Edition uses Dexie Cloud (provided by Awarica AB) to store and synchronize your financial data across devices. By using the SaaS Edition, you agree to Dexie Cloud's data processing terms. Data stored in Dexie Cloud includes the financial records you enter into Vuestash (transactions, accounts, categories, budgets, and related items). Data is associated with your user identity within the Dexie Cloud service. For more information, please refer to: Dexie Cloud Privacy Policy.

6. Teller – Bank Account Sync (SaaS Edition, Optional)

The SaaS Edition includes optional bank account synchronization powered by Teller (Teller Inc.). This feature requires a valid paid license and must be explicitly activated by you. Teller connects to your bank using industry-standard open banking protocols. When you use Teller bank sync: - Your bank credentials are authenticated directly with your bank via Teller's secure infrastructure and are not stored by Vuestash. - Teller may store access tokens and transaction data as required to provide the sync service. - Sync requests are proxied through a Vuestash Cloudflare Worker to protect our API credentials; your banking data is not logged by this proxy. You can revoke Teller's access and disconnect your bank accounts at any time through the Vuestash app settings. For more information, please refer to: Teller Privacy Policy.

7. Data Sharing

We do not sell your personal data. The third-party services involved in operating Vuestash are: We use UserMaven to collect anonymous analytics about how visitors interact with our marketing website (vuestash.com). UserMaven collects aggregated, anonymized data such as page views and feature interactions. No personal data is collected. For more information on UserMaven's data practices, please refer to: UserMaven Privacy Policy.

8. License Duration and Updates

- 1-year and 3-year licenses: These licenses will expire 1 year or 3 years from the date of first activation. - Lifetime license: This license does not expire and remains valid indefinitely. All licenses grant access to all updates released during the period they are valid.

9. Your Rights (GDPR Compliance)

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights: - Right to Access: You may request a copy of data held about you by KeyGen (license data) or Dexie Cloud (financial data, SaaS users). - Right to Rectification: You have the right to have inaccurate data corrected by the relevant processor. - Right to Erasure: You may request deletion of your data from KeyGen and/or Dexie Cloud. - Right to Object: You may object to the processing of your data by any of the above processors. - Right to Data Portability: You may request a machine-readable copy of your data from KeyGen or Dexie Cloud. To exercise these rights, please contact the relevant third-party processor directly, or reach out to us through the support contact form and we will assist you.

10. Your Rights (CCPA Compliance for California Residents)

If you are a resident of California, the CCPA provides you with specific rights. Vuestash does not directly collect personal information; however, KeyGen and (for SaaS users) Dexie Cloud may handle certain data. - Right to Know: You have the right to request disclosure of what personal information has been collected or shared in connection with your use of Vuestash. - Right to Delete: You have the right to request deletion of personal information collected by our third-party processors. - Right to Opt-Out: Vuestash does not sell personal information. This right does not apply in our context. - Right to Non-Discrimination: You will not be discriminated against for exercising your CCPA rights. To exercise these rights, please contact us through the support contact form or reach out to the relevant processor directly.

11. Data Retention

- Desktop and Web – Private Edition: Vuestash does not retain any personal or financial data. Your data exists only on your local device or browser. - SaaS Edition: Financial data is retained in Dexie Cloud for as long as your account is active. You may request deletion of your cloud data at any time by contacting us. - License data: KeyGen retains license-related data as necessary for activation and compliance. Please refer to KeyGen's Privacy Policy for details.

12. Security

We take the security of your data seriously. For the Desktop and Web – Private editions, all financial data remains on your local device and is never transmitted to external servers. For the SaaS Edition, data in transit is encrypted using TLS and stored securely by Dexie Cloud. We encourage all users to follow standard security best practices: use strong passwords, keep your operating system and browser up to date, and protect physical access to your device. No electronic system can be guaranteed to be 100% secure.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website, and the "Effective Date" will be updated.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us through the support contact form on this website. Alternatively, you may reach us at Sveltify LLC.