StoneLedger Privacy Policy Last updated: September 7, 2026 Stone Ledger Financial LLC (“StoneLedger,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use the StoneLedger website, mobile application, and related services. Please also review our Terms of Service, which govern your use of StoneLedger. 1. Information We Collect The information we collect depends on how you use StoneLedger. Account Information We may collect: • Name. • Email address. • Account role, such as renter, landlord, property owner, property manager, or maintenance user. • Login and authentication information. • Other information you provide when creating or maintaining your account. StoneLedger does not store passwords in plaintext. Property and Rental Information We may collect information such as: • Property information. • Monthly rent. • Lease-related information entered into StoneLedger. • Landlord and renter relationships. • Roommate or occupancy information. • Rent-payment amounts. • Payment dates and history. • Payment status. Payment Information Payments are processed through third-party payment providers, including Stripe. StoneLedger does not intentionally store complete payment-card numbers or complete bank-account credentials on its own servers. Depending on the payment services used, StoneLedger may receive limited payment-related information such as: • Payment status. • Transaction amount. • Transaction identifiers. • Payment method type. • Financial institution name. • Limited account identifiers, such as the final digits of an account. • Verification or connection status. Stripe and its financial partners process payment and banking information according to their own terms and privacy policies. Payment History and Reliability Information We may collect and process: • Rent-payment history. • Payment dates. • Successful payments. • Failed payments. • Returned or reversed payments. • Pending transactions. • On-time payment information. • Payment-consistency or reliability indicators generated through StoneLedger. Unless expressly disclosed otherwise, StoneLedger reliability indicators are informational features and are not credit scores or consumer reports. Savings and Goal Information If you use StoneLedger's savings or homeownership tools, we may collect information you choose to provide, such as: • Down-payment goals. • Current savings amounts. • Target home information. • Property addresses. • Photos or image URLs associated with goals. Maintenance Information We may collect: • Maintenance-request descriptions. • Photos or attachments. • Urgency selections. • Status updates. • Property information. • Maintenance-provider notes. • Communications related to maintenance requests. Communications We may collect communications you send through StoneLedger or directly to our support team. Device and Usage Information We may automatically collect certain technical information, such as: • IP address. • Device type. • Operating system. • Application activity. • Log information. • Error and crash information. • Security information. • Interaction with StoneLedger features. We may use this information for security, troubleshooting, analytics, fraud prevention, and product improvement. 2. Cookies, Analytics, and Similar Technologies StoneLedger's website or application may use cookies, local storage, software development kits, analytics technologies, or similar tools where applicable. These technologies may be used to: • Maintain login sessions. • Remember preferences. • Protect accounts and detect fraud. • Diagnose errors and crashes. • Understand how users interact with StoneLedger. • Improve performance and functionality. Some technologies may be provided by third-party service providers. Our use of these technologies may change as StoneLedger evolves. Where applicable law requires consent or additional choices regarding tracking technologies, we will provide those choices. StoneLedger does not use cookies or tracking technologies to sell your personal information for monetary consideration. 3. How We Use Information We may use personal information to: • Create and maintain user accounts. • Authenticate users. • Provide StoneLedger functionality. • Facilitate rent payments through third-party payment providers. • Display payment and transaction history. • Calculate payment-history or reliability information. • Manage landlord, renter, property, and maintenance relationships. • Process and communicate about maintenance requests. • Provide savings and homeownership-goal tools. • Send payment confirmations and transactional communications. • Provide security alerts. • Respond to support requests. • Detect and prevent fraud, abuse, and security incidents. • Troubleshoot and improve the Service. • Analyze use of StoneLedger. • Develop new features. • Maintain appropriate business records. • Protect our legal rights. • Comply with applicable law. StoneLedger does not currently use information to make lending or mortgage-approval decisions. If we introduce credit-reporting, consumer-reporting, lending, cryptocurrency, or other materially different financial services in the future, we may provide additional notices, consents, or terms before those features are used. 4. How Information May Be Shared We may share personal information when reasonably necessary to provide and protect StoneLedger. Other StoneLedger Users Certain information may be visible to users associated with the same property, lease, transaction, or maintenance request. For example: • A landlord may receive payment information associated with that landlord's property. • A renter may receive information provided by the landlord relating to that renter's property or account. • A landlord or property manager may receive maintenance information submitted by a renter. • Maintenance personnel may receive information reasonably necessary to address an assigned request. We seek to limit these disclosures to information reasonably related to the functionality being provided. Service Providers We may disclose information to companies that provide services on our behalf. Current providers may include: Stripe Payment processing and related financial technology services. Neon PostgreSQL database and related data infrastructure services. Render Application hosting and related infrastructure services. Resend Transactional email services. We may add, remove, or replace service providers as StoneLedger evolves. When changes to service providers materially affect our privacy practices, we may update this Privacy Policy and provide additional notice where required by applicable law. Professional Advisers We may share information when reasonably necessary with attorneys, accountants, auditors, insurers, or other professional advisers assisting Stone Ledger Financial LLC. Legal and Safety Purposes We may disclose information where reasonably necessary to: • Comply with law, regulation, subpoena, court order, or legal process. • Protect StoneLedger or our users. • Investigate fraud, abuse, security incidents, or unlawful activity. • Enforce our agreements. • Protect the rights, property, or safety of Stone Ledger Financial LLC or others. Business Transactions If Stone Ledger Financial LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law. 5. We Do Not Sell Personal Information StoneLedger does not sell personal information to third parties for monetary consideration. If our practices materially change in the future, we will update this Privacy Policy and provide any notices or choices required by applicable law. 6. Payment Processing StoneLedger uses third-party payment providers to facilitate payments. When you connect a bank account, payment card, or other payment method, certain financial information may be provided directly to the applicable payment provider rather than to StoneLedger. StoneLedger may receive information reasonably necessary to operate payment functionality, including transaction status and limited payment-method information. The payment provider's collection and processing of financial information is also governed by its own privacy policy and terms. 7. Data Storage and Security StoneLedger uses technical, administrative, and organizational safeguards designed to protect personal information. Our infrastructure currently includes PostgreSQL database services provided through Neon and application hosting and related infrastructure services provided through Render. Information transmitted between users and StoneLedger is protected using encrypted connections where supported. Authentication credentials are protected through appropriate authentication and password-security technologies. However, no website, application, database, or transmission method can guarantee absolute security. Users should protect their passwords and promptly contact us if they believe an account has been compromised. 8. Data Retention We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or for another legitimate business or legal purpose. Retention periods may vary depending on the type of information involved. Factors we may consider include: • How long an account remains active. • Whether information is necessary to complete or document a financial transaction. • Fraud-prevention and security needs. • Accounting and tax requirements. • Dispute-resolution requirements. • Contractual obligations. • Applicable statutes of limitation. • Other legal or regulatory requirements. For example, certain payment or transaction records may need to be retained after an account is deleted even when other account information can be removed sooner. When personal information is no longer reasonably necessary, we may delete, anonymize, or de-identify it. 9. Account Deletion Users may request deletion of their StoneLedger accounts and associated personal information. Where available, account deletion may be initiated directly through StoneLedger's account settings. You may also contact: info@stoneledger.io We may need to verify your identity before completing a deletion request. Deletion of an account does not necessarily result in immediate deletion of every record. We may retain certain information where reasonably necessary or legally required, as described in the Data Retention section. 10. Your Privacy Rights Depending on where you live and the law applicable to StoneLedger, you may have certain rights concerning your personal information. These rights may include the ability to: • Confirm whether we process personal information about you. • Request access to personal information we maintain about you. • Request correction of inaccurate personal information. • Request deletion of certain personal information. • Request a portable copy of certain information. • Obtain information about certain categories of information we collect or disclose. • Opt out of certain forms of processing where applicable. • Appeal certain decisions regarding a privacy request where applicable law provides that right. Not every right applies in every jurisdiction or circumstance. To submit a privacy request, contact: info@stoneledger.io We may take reasonable steps to verify your identity before responding. We will process qualifying requests in accordance with applicable law. 11. Children's Privacy StoneLedger is intended for individuals who are at least 18 years old. We do not knowingly collect personal information from children under 18 through accounts intended for adult users. If you believe a minor has provided personal information to StoneLedger, contact us at info@stoneledger.io. 12. Third-Party Links and Services StoneLedger may contain links to or integrations with third-party websites, applications, or services. Those third parties have their own privacy practices. Stone Ledger Financial LLC is not responsible for the privacy or security practices of independent third parties. 13. International Users and Data Transfers StoneLedger is currently operated from the United States. If you access StoneLedger from outside the United States, information you provide may be processed or stored in the United States or in other locations where our service providers operate. Privacy and data-protection laws in those jurisdictions may differ from the laws where you live. If StoneLedger expands services into jurisdictions requiring specific international-transfer mechanisms or disclosures, we will implement additional measures where required by applicable law. 14. Changes to This Privacy Policy We may update this Privacy Policy as StoneLedger evolves, our service providers change, or applicable legal requirements change. If we make material changes, we may notify users through: • The StoneLedger application. • Email. • A notice on our website. • Another reasonable method. The date at the top of this Privacy Policy identifies the latest revision. 15. Contact Us For privacy questions, requests, or concerns: Stone Ledger Financial LLC info@stoneledger.io
