Privacy Policy

1. Who we are

Outflow is an expense management application operated by STNC and provided at outflow.stnc.com. For privacy questions or requests, contact support@stnc.com.

2. Information we collect

• Account information: name, email address, password (stored as a hash), and multi-factor authentication material (encrypted secrets / hashed backup codes).
• Financial information you connect or upload: bank and card account metadata, transactions, categories, budgets, recurring-charge detections, and statement import contents.
• Connection tokens: encrypted access tokens from aggregators such as Plaid (US) and TrueLayer (UK) when you authorize a link.
• Technical data: standard server and security logs (for example IP address and request metadata) for operating and protecting the service.

3. How we use information

We use your information to provide Outflow: authenticate you, sync or import transactions, categorize spend, detect subscriptions, show budgets and reports, secure the service (including MFA), and respond to support requests. We do not sell your personal financial data.

4. Partners & processors

When you choose to connect an institution, bank data is retrieved through regulated aggregators (for example Plaid and TrueLayer) under their terms and your consent. Hosting and infrastructure providers may process technical data needed to run outflow.stnc.com.

5. Retention & disposal

We keep account and financial data while your account is active, and delete it when you wipe financial data or delete your account, subject to the periods and methods described in our Data Retention & Disposal Policy. You can initiate disposal in Settings → Data after signing in.

6. Security

We use password hashing, encrypted storage of bank tokens and MFA secrets, session controls, and required multi-factor authentication for sensitive connections such as Plaid. No method of transmission or storage is perfectly secure; please use a strong password and protect your authenticator device.

7. Your choices

• Disconnect bank connections to stop sync and remove stored tokens.
• Wipe financial data or delete your account from Settings → Data.
• Email support@stnc.com for access, correction, or deletion requests we cannot complete in-product.

8. International use

Outflow is designed for US and UK banking contexts. If you access the service from elsewhere, your information may be processed in the regions where STNC or its infrastructure providers operate.

9. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Outflow after an update means you accept the revised policy.

10. Contact

STNC — Outflow
Web: outflow.stnc.com
Email: support@stnc.com