Privacy Policy

Last updated: June 12, 2026

StashIt is operated by Aryan Bhambhani ("StashIt", "we", "us"). This policy explains what information we collect when you use the StashIt iOS app, its share extension, and stashitai.com (together, the "Service"), how we use it, who we share it with, and the choices you have. Contact us any time at support@stashitai.com.

At a glance

• We collect your name and email when you sign in with Apple or Google, the social-media links you choose to share with us, and basic device data.
• We use AI to analyze the content you share so we can identify products in it. We never keep the raw video — only a thumbnail, the caption, and processing metadata.
• We do not sell your personal information, and we do not use it to train third-party AI models.
• There are no advertising SDKs and no cross-app tracking in the app.
• You can delete your account and all of your data at any time, in the app or by email.

1. Information we collect

Account information. When you sign in with Apple or Google, we receive your name and email address from that provider, and we create a profile for you (name, optional photo). We never see your Apple or Google password.

Content you share. When you share an Instagram, TikTok, or YouTube link with StashIt, we collect that link and retrieve the public content it points to so we can analyze it. From each share we keep: the link, the caption, a thumbnail image, and metadata about how our systems processed it. We do not keep the raw video.

Saves and activity. Products you save to your Vault, your import history, scan results, product feedback you submit, and which product links you open.

Device and log data. A device identifier (Apple's per-app "identifier for vendor"), your push-notification token if you enable notifications, IP address, and basic diagnostic logs. The device identifier is also used to apply fair-use limits.

Delivery location. The country and city you set (or allow us to detect) so we can show relevant prices and delivery options. We do not track your precise GPS location or your movements.

Camera and photos. Only when you actively choose to scan a photo or take a picture. Images you submit are processed to identify products; we do not browse your photo library.

Purchases. Your subscription status, managed by Apple and our subscription-management provider. Payment is handled entirely by Apple — we never see your card details.

Website analytics. On stashitai.com we use a privacy-respecting analytics provider to understand aggregate site usage. The iOS app does not include advertising or cross-app tracking SDKs and does not use Apple's advertising identifier (IDFA).

2. How we use your information

• To provide the Service: we use automated systems and artificial intelligence to analyze the content you share in order to identify the products in it, find matching offers and prices, and save results to your Vault.
• To improve StashIt: we review how well our product identification works (including using past scans to measure and improve accuracy). This stays inside StashIt — we do not use your content to train third-party AI models.
• To run your account: sign-in, subscriptions, support, and service emails.
• To send notifications you've enabled, such as when a scan finishes.
• To keep the Service safe: preventing abuse, enforcing fair-use limits, and debugging.
• To comply with law and enforce our Terms of Use.

3. AI and automated decision-making

Product identification is performed by automated AI systems. Results can be wrong or incomplete — they are suggestions, not guarantees, and you should verify product details with the merchant before buying. We do not make decisions about you that produce legal or similarly significant effects solely by automated means.

4. Who we share information with

We share personal information only with the categories of service providers that help us run StashIt, each only to the extent needed for their job:

• Cloud hosting and infrastructure providers — host the Service, process requests, and store your data and images.
• Database and authentication providers — store your account and saved data and power sign-in.
• Content-retrieval providers — fetch the public social-media content behind the links you share.
• AI and machine-learning providers — receive the content you share solely to identify the products in it.
• Product-search providers — receive product descriptions (not your identity) to find matching offers and prices.
• Payment and subscription providers, including Apple — manage subscriptions and process payments. We never receive your card details.
• Communication providers — send our service emails.
• Analytics providers — measure aggregate usage of stashitai.com only.

We also share information when you ask us to (for example, opening a merchant's site), if required by law or legal process, to protect StashIt or its users, or as part of a business transfer (in which case this policy continues to apply). We do not sell your personal information, and we do not share it with data brokers or advertising networks. You may request the identities of the specific providers we currently use by emailing support@stashitai.com.

5. Affiliate links and click tracking

Some product links in StashIt may in future be affiliate links, meaning we may earn a commission when you use them. Where that applies, the click may be tracked by the affiliate network for commission attribution. This does not change the price you pay.

6. Cookies and analytics

stashitai.com uses analytics to measure aggregate visits and page performance. The iOS app does not use cookies, advertising identifiers, or cross-app tracking.

7. Where your data is processed (international transfers)

StashIt is operated from India, and our service providers process data in the United States, Europe, and other regions. Where required (for example, for users in the EEA, the UK, or Switzerland), transfers are protected by recognized safeguards such as the EU Standard Contractual Clauses or adequacy decisions. For users in the EEA/UK, our legal bases are: performance of our contract with you (providing the Service), our legitimate interests (improving and securing the Service), your consent (where we ask for it, e.g., notifications and location), and legal obligations.

8. Your rights

You can access, correct, download, or delete your personal information, object to or restrict certain processing, and withdraw consent at any time. To exercise any right, email support@stashitai.com — we respond within 45 days.

• EEA / UK: you additionally have the rights to data portability and to lodge a complaint with your local supervisory authority.
• California: you have the rights to know, delete, and correct, and to opt out of "sale" or "sharing" of personal information — though we do not sell or share personal information as the CCPA/CPRA defines those terms. We will never discriminate against you for exercising your rights.
• India: under the Digital Personal Data Protection Act, 2023, you have the rights to access, correction and erasure, grievance redressal, and to nominate someone to exercise your rights.
• Everywhere else: we honor the same access, correction, and deletion requests for all users regardless of where you live.

9. How long we keep information

• Raw video from shared links: never stored. We process it and keep only a thumbnail, caption, and processing metadata.
• Account, Vault, and scan data: for as long as your account exists.
• Merchant offers and prices: expire automatically and are refreshed; stale snapshots are not kept indefinitely as live data.
• Logs and backups: short rolling windows, then deleted automatically.
• After account deletion: all of the above is deleted within 30 days, except minimal records we must keep by law (e.g., payment records).

10. Deleting your account

You can delete your account in the app (Account → Delete Account) or by emailing support@stashitai.com from your account email. Deletion removes your profile, scans, Vault, history, feedback, and uploaded images, and is completed within 30 days. It cannot be undone.

11. Children

StashIt is not directed to children under 13 (or the higher minimum age that applies where you live), and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it promptly.

12. Security

Data is encrypted in transit, access is restricted, and we use reputable infrastructure providers. No service can guarantee perfect security, but if a breach affects you we will notify you as required by law.

13. Changes to this policy

We'll update this page when our practices change and revise the date at the top. For material changes we'll give you notice in the app or by email before they take effect.

14. Contact & grievances

Aryan Bhambhani (operator and grievance contact, per India's Information Technology rules)
Email: support@stashitai.com