Privacy Policy

1. Introduction

Stackup Finance, Inc. ("By Morning," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our website and desktop application (collectively, the "Service").

2. Information We Collect

Website

When you join our waitlist, we collect your email address. This is the only personal information we collect through our website.

Desktop Application

The By Morning desktop application is installed locally on your computer and operates primarily offline. We do not collect any user data through the application. Your files, content, and AI-generated output remain entirely on your device.

3. OAuth and Third-Party Services

The By Morning application allows you to connect third-party services such as Gmail and Slack through OAuth authentication. When you initiate an OAuth connection:

• The authentication flow may pass through a secure tunnel service operated by By Morning to facilitate the handshake between your device and the third-party service.
• OAuth tokens are stored locally on your device. By Morning does not retain or have ongoing access to your third-party credentials.
• We do not access, read, or store any data from your connected third-party accounts.

Your use of third-party services is governed by their respective privacy policies. We encourage you to review the privacy policies of any services you connect.

4. How We Use Information

We use the email address you provide solely to:

• Manage your place on our waitlist.
• Send you updates about By Morning's availability and launch.

We do not sell your personal information.

5. How We Share Information

We share personal information only in limited circumstances, including the following categories of recipients:

• Service providers that help us operate our website and waitlist infrastructure.
• Professional advisors when necessary for legal, security, or compliance purposes.
• Government authorities or other parties when required by law or legal process.

We do not sell your personal information and do not share personal information for third-party behavioral advertising.

6. Cookies and Similar Technologies

Our website may use essential cookies or similar technologies to support core site functionality, security, and basic performance monitoring. You can control cookies through your browser settings.

We do not currently use third-party advertising cookies for interest-based advertising on this website.

7. Data Storage, Security, and Retention

Waitlist email addresses are stored securely using Cloudflare infrastructure. We implement appropriate technical measures to protect against unauthorized access, alteration, or destruction of your information.

All application data, including any content you create or process with By Morning, remains stored locally on your device. We have no access to this data.

We retain your email address for as long as necessary to operate the waitlist and communicate product updates. You may request removal of your email at any time by contacting us at hello@bymorning.com.

8. Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction, subject to applicable law.

9. De-Identified and Aggregated Data

We may create and use de-identified or aggregated information that cannot reasonably identify you. We may use this information for lawful business purposes, including analytics and service improvement.

10. Your Rights and How to Exercise Them

You have the right to:

• Request access to the personal information we hold about you.
• Request deletion of your personal information.
• Opt out of any future communications.

To exercise these rights, email us at hello@bymorning.com with enough information for us to understand and verify your request. We will respond within a commercially reasonable timeframe and, where required by law, within the statutory response period.

11. U.S. State Privacy Disclosures

If you are a resident of California, Nevada, or another U.S. state with applicable privacy laws, you may have additional rights regarding your personal information. We do not sell personal information as that term is defined under applicable law.

You may submit privacy requests by emailing hello@bymorning.com. We will not discriminate against you for exercising your privacy rights.

12. International Users and Cross-Border Transfers

If you are accessing the Service from the European Union or European Economic Area, you may have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, or erase your personal data, and the right to data portability. To exercise these rights, please contact us at hello@bymorning.com.

Our service providers may process data in the United States and other jurisdictions. By using the Service, you understand that your information may be transferred to and processed in countries that may have data protection laws different from those in your place of residence.

13. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us so we can promptly remove it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.