Privacy Notice
Last updated: May 26, 2026
This notice explains how Hope Kamara ("we") collects and uses personal data when you use the Stash service.
Controller
Hope Kamara is the data controller for personal data processed in connection with the Service.
Address: 29 Tudor Court, Dover, DE 19901, United States.
Contact: support@gigsavvy.org.
Data we collect
- Account data: email, password hash, display name.
- Profile data: home state, filing status, self-employment flag.
- Service data: gigs, expenses, mileage trips, invoices you create.
- Support data: messages you send us.
- Technical data: IP, device, browser, log events for security and reliability.
How we use it
- Provide and operate the Service (contract).
- Secure the Service and prevent fraud (legitimate interests).
- Improve the product (legitimate interests).
- Respond to support requests (contract / legitimate interests).
- Send service notices and, with consent, product updates.
Who we share it with
- Subprocessors: hosting and database providers that run the Service.
- Merchant of Record: Paddle.com processes your purchase, manages subscriptions, payments, tax compliance, and invoicing. See Paddle's Privacy Policy.
- Professional advisers: legal, accounting where necessary.
- Authorities: where required by law.
Retention
We keep account and service data for the life of your account plus a reasonable period (typically 12 months) for backups, dispute, and compliance. You can delete your data by deleting your account.
Your rights
Subject to applicable law you can request access, correction, deletion, restriction, portability, and object to processing. To exercise these rights email support@gigsavvy.org. EU/UK residents have the right to complain to their supervisory authority.
International transfers
Our infrastructure and Paddle may transfer personal data outside your country. Where applicable we rely on Standard Contractual Clauses or equivalent safeguards.
Security
We use industry-standard technical and organizational measures (encryption in transit, access controls, audit logs). No system is perfectly secure; you are responsible for keeping your password safe.
Cookies
We use strictly necessary cookies to keep you signed in. We do not currently use marketing cookies.
Children
The Service is intended for users old enough to enter contracts under their local law, or for younger users with parental consent. We do not knowingly collect data from children under 13.