How we handle your data.

Effective: [INSERT EFFECTIVE DATE]

This is a plain-language privacy policy. We tried to write it the way we'd want one written for us, with no legalese hiding things and no clever phrasing meant to give us more room than we deserve. If you have questions about anything below, we want to hear them.

Who we are

Qash Plan is a credit-builder fintech being built by a small team based in California. This privacy policy applies to qashplan.com and its subdomains, which currently include:

• survey.qashplan.com
• learn.qashplan.com
• learnmore.qashplan.com
• thanks.qashplan.com

We are currently in pre-launch, which means we are still building the product. The data practices described here cover what happens with information you give us during this pre-launch research period.

What we collect

We try to keep this short. Here is everything we collect:

• Email addresses. If you sign up for the waitlist on our learn page, or if you provide an email at the end of one of our surveys to enter the $250 gift card raffle, we collect that email address.
• Survey responses. If you take Survey A or Survey B, the answers you provide are collected by Tally (the survey platform we use). This includes the demographic and financial-context information the survey asks about, plus any open-text feedback you leave.
• Basic page analytics from our website host. Carrd, the platform that hosts our pages, captures basic page-view counts as part of its standard service. This includes things like how many people visited a page on a given day. It does not include individual identification, IP-level tracking, or device fingerprinting.

What we do NOT collect

We are intentional about this list, and we want to be specific so you know what we mean.

• We do not run Google Analytics, Plausible, Fathom, or any other third-party analytics service on our pages.
• We do not use tracking pixels of any kind. No Facebook Pixel, no LinkedIn Pixel, no TikTok Pixel, no advertising retargeting infrastructure.
• We do not store IP addresses for individual tracking or attribution. Carrd's standard server logging may temporarily process IPs as part of normal web traffic, but we do not use that data for any purpose.
• We do not collect device fingerprints, cookies for tracking purposes, or any data that would let us identify you across sites you visit elsewhere.
• We do not collect names, phone numbers, addresses, or financial account information through these pages. The only personal data we ask for is your email address.

How we use your data

If you join the waitlist or provide your email through a survey, we will use your email to:

• Send you launch updates. When Qash Plan is ready to launch for your audience, we will email you to let you know. We will not email you about anything else.
• Notify you if you win the $250 gift card raffle. If you provide your email through Survey A or Survey B and your entry is selected, we will email you with the details.
• Analyze survey responses to improve the product. Survey answers help us validate what we are building and adjust before launch. This analysis happens internally on our small team. We do not publish individual responses.

What we will never do

We want to be specific here too.

• We will never sell your data. Not to data brokers, not to advertisers, not to anyone. This is not a marketing slogan. It is how we operate.
• We will never share your data with third parties for marketing purposes.
• We will never use your email to send you unrelated promotional content. When we email you, it will be about Qash Plan launch updates or the raffle. That is it.

Where your data is stored

The infrastructure we use to collect and store data:

• Tally (tally.so) hosts the surveys themselves. Survey responses are stored in Tally's systems. Tally's privacy policy is here.
• Make.com processes a webhook that takes email addresses from the waitlist form and the surveys, and writes them to a Google Sheet. Make.com's privacy policy is here.
• Google Sheets stores the consolidated list of email addresses we collect, in a spreadsheet only our small team can access. Google's privacy policy is here.
• Carrd (carrd.co) hosts our website pages. Carrd's privacy policy is here.

These service providers are bound by their own privacy policies and terms. We use them to run the website and collect the data; we do not give them permission to use your data for their own purposes beyond what their policies describe.

How long we keep your data

For email addresses collected through the waitlist or surveys, we plan to keep them until Qash Plan launches plus a reasonable period after launch for follow-up communications. We have not set a fixed deletion timeline yet because we are still pre-launch and the right schedule depends on when we launch and how the launch communications go.

If you ask us to delete your email at any time, we will delete it. See "Your rights" below.

For survey responses, we keep them as long as they are useful for product research, then delete or anonymize them. Survey responses do not contain identifying information beyond the optional email field at the end.

Your rights

You can ask us about your data at any time. Specifically:

• You can ask what we have on you. Email us and we will tell you what we have stored that is associated with your email address.
• You can ask us to delete your data. Email us and we will delete your email address from our systems and any survey responses associated with it.
• You can opt out of any future communications. Either reply to any email we send and ask to be removed, or use the unsubscribe link in any future emails.

California privacy rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you specific rights about your personal information.

You have the right to:

• Know what personal information we have collected about you.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information for cross-context behavioral advertising. (We do not do either of these things, but the right exists.)
• Limit the use of sensitive personal information. (We do not collect sensitive personal information as defined by California law.)

To exercise any of these rights, email us at the address below. We will respond within 45 days as required by California law.

You also have the right to be free from discrimination if you exercise these rights. We will not provide a different level of service, charge a different price, or treat you differently because you exercised your privacy rights.

Children's privacy

Our product and our research are not directed at children under 18. The age routing on survey.qashplan.com only offers paths for ages 18-24 and 25 and older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from someone under 18, please contact us and we will delete it.

Changes to this policy

We may update this policy as our practices change, especially as we approach launch and the data we handle changes. When we update it, we will change the effective date at the top of this page. For significant changes, we will email people on our waitlist to let them know.

If you want to track changes precisely, you can revisit this page periodically. We do not currently maintain a public version history of this policy, but we will keep prior versions internally if anyone ever needs to reference what was in effect on a given date.

Contact us

If you have questions about this policy or about the data we have collected about you, the fastest way to reach us is by email.