Privacy Policy

Last updated: May 25, 2026

Stashii ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service available at app.stashii.space and stashii.space.

1. Information We Collect

We collect information you provide directly to us, such as:

  • Account information: email address and password when you register.
  • Phone number: collected when you verify your account at sign-up. We store it in normalized form and use it solely to confirm you are a real person and to prevent fraudulent or automated sign-ups — never for marketing.
  • Media content: photos and videos you upload to Stashii.
  • Usage data: information about how you use Stashii, including features accessed and actions taken.
  • Device information: device type, operating system, and browser type.
  • Payment information: processed securely through Stripe. We do not store your full card details.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve Stashii.
  • Process transactions and send related information.
  • Send technical notices, updates, and support messages.
  • Respond to your comments and questions.
  • Monitor and analyze usage patterns to improve our service.
  • Verify your account at sign-up via a one-time SMS code to confirm you are a real person.
  • Detect, prevent, and address technical issues or abuse.

3. How We Share Your Information

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share your information:

  • With service providers who assist us in operating Stashii (e.g., cloud storage via Supabase, payment processing via Stripe), subject to confidentiality obligations.
  • If required by law, or to protect the rights, property, or safety of Stashii, our users, or others.
  • In connection with a merger, acquisition, or sale of all or a portion of our assets.

4. Data Storage and Security

Your media files and personal data are stored securely using Supabase infrastructure. We implement industry-standard security measures including encryption in transit (TLS) and at rest. However, no method of transmission over the internet or electronic storage is 100% secure.

5. Your Content

You retain full ownership of all media you upload to Stashii. We do not access, view, or use your content for any purpose other than to provide the service to you. We never use your photos or videos for advertising or to train AI models.

6. Sharing Features

When you share a file or folder using a Stashii share link, anyone with that link (and the correct password, if set) can access that content. You are responsible for managing and revoking share links.

7. Data Retention

We retain your account data and uploaded content for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

8. Children's Privacy

Stashii is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it.

9. Cookies

We use cookies and similar tracking technologies to maintain your session and improve your experience. You can control cookies through your browser settings, though some features may not function properly without them.

10. Third-Party Services

Stashii integrates with the following third-party services. Each handles only the data needed to perform its function and is bound by its own privacy policy:

11. Connected services — Claude / MCP

Stashii supports connecting to AI assistants (such as Claude by Anthropic) via the open Model Context Protocol (MCP). When you connect Stashii to an AI assistant:

What the assistant can access

  • Metadata about your media: file names, captions, ratings, color labels, tags, and timestamps.
  • Your collections, folders, projects, and people lists in the workspace you connect.
  • The assistant does not receive the binary content of your photos or videos — only metadata and structure.

What we log

  • Each tool call the assistant makes: which tool, when, success or failure, how many items were affected. We retain a one-line human-readable summary for 90 days, then prune.
  • We do not log the assistant's prompts or your conversations with the assistant.

Scopes

  • stashii.read: the assistant can only view your library.
  • stashii.read_write: the assistant can also modify your library (rate, label, organize). Free and Creator tiers are limited to stashii.read; Pro and above can grant write access.

How to revoke

Disconnect any time from Settings → Connections in the Stashii app. Revocation is immediate; the assistant cannot make further changes.

12. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Object to or restrict our processing of your data.
  • Data portability.

To exercise any of these rights, contact us at hello@stashii.space.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of Stashii after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: hello@stashii.space