Privacy Policy

Last updated: June 19, 2026

Stashii ("we," "our," or "us") is committed to protecting your privacy. Stashii is a media workspace used by teams and organizations of all sizes. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service available at app.stashii.space and stashii.space.

Workspaces and administrators

Stashii is organized around workspaces. When you create an account, a workspace is created for you, and you can invite others to join it as members. If you join a workspace created by someone else, the workspace owner and administrators may be able to access, manage, and control the content and member accounts within that workspace. Content uploaded to a workspace is associated with that workspace.

1. Information We Collect

We collect information you provide directly to us, such as:

  • Account information: email address and password when you register.
  • Phone number: collected when you verify your account at sign-up. We store it in normalized form and use it solely to confirm you are a real person and to prevent fraudulent or automated sign-ups — never for marketing.
  • Media content: photos and videos you upload to Stashii.
  • Usage data: information about how you use Stashii, including features accessed and actions taken.
  • Device information: device type, operating system, and browser type.
  • Payment information: processed securely through Stripe. We do not store your full card details.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve Stashii.
  • Process transactions and send related information.
  • Send technical notices, updates, and support messages.
  • Respond to your comments and questions.
  • Monitor and analyze usage patterns to improve our service.
  • Verify your account at sign-up via a one-time SMS code to confirm you are a real person.
  • Detect, prevent, and address technical issues or abuse.

3. How We Share Your Information

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share your information:

  • With service providers who assist us in operating Stashii (e.g., cloud storage via Supabase, payment processing via Stripe), subject to confidentiality obligations.
  • If required by law, or to protect the rights, property, or safety of Stashii, our users, or others.
  • In connection with a merger, acquisition, or sale of all or a portion of our assets.

4. Data Storage and Security

Your media files and personal data are stored securely using Supabase infrastructure. We implement industry-standard security measures including encryption in transit (TLS) and at rest. However, no method of transmission over the internet or electronic storage is 100% secure.

5. Your Content

You retain full ownership of all media you upload to Stashii. We do not access, view, or use your content for any purpose other than to provide the service to you. We never use your photos or videos for advertising or to train AI models.

6. Sharing Features

When you share a file or folder using a Stashii share link, anyone with that link (and the correct password, if set) can access that content. You are responsible for managing and revoking share links.

7. Data Retention

We retain your account data and uploaded content for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

8. Children's Privacy

Stashii is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it.

9. Cookies

We use cookies and similar technologies for two purposes. Necessary cookies keep your session working and are always on. Analytics and marketing cookies help us understand site traffic and measure which ads bring new people to Stashii. On our marketing site these analytics and marketing cookies stay off until you accept them, and your browser's Do Not Track or Global Privacy Control signal is honored by default. You can change or withdraw your choice any time using Cookie settings in the footer, or control cookies through your browser settings.

Analytics and advertising are delivered through Google Tag Manager and may include Google Analytics, Google Ads, Meta (Facebook and Instagram), and TikTok. These run only after you accept, and we never send your name, email, or account details to them.

10. Third-Party Services

Stashii integrates with the following third-party services. Each handles only the data needed to perform its function and is bound by its own privacy policy:

You can disable all AI features for your account at any time from your account. While disabled, none of your data is sent to Anthropic for these features, and connected AI assistants cannot access your library.

11. Connected services: Claude, ChatGPT, and other MCP assistants

Stashii supports connecting to AI assistants (such as Claude by Anthropic and ChatGPT by OpenAI) via the open Model Context Protocol (MCP). When you connect Stashii to an AI assistant:

What the assistant can access

  • Metadata about your media: file names, captions, ratings, color labels, tags, and timestamps.
  • Your collections, folders, projects, and people lists in the workspace you connect.
  • The assistant does not receive the binary content of your photos or videos — only metadata and structure.

What we log

  • Each tool call the assistant makes: which tool, when, success or failure, how many items were affected. We retain a one-line human-readable summary for 90 days, then prune.
  • We do not log the assistant's prompts or your conversations with the assistant.

Scopes

  • stashii.read: the assistant can only view your library.
  • stashii.read_write: the assistant can also modify your library (rate, label, organize). Free and Starter tiers are limited to stashii.read; Pro and above can grant write access.

How to revoke

Disconnect any time from Settings → Connections in the Stashii app. Revocation is immediate; the assistant cannot make further changes.

Whose policy applies

The metadata and results Stashii returns to a connected assistant are then handled by that assistant's provider under their own privacy policy and terms. For example, this is Anthropic for Claude and OpenAI for ChatGPT.

12. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Object to or restrict our processing of your data.
  • Data portability.

To exercise any of these rights, contact us at hello@stashii.space.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of Stashii after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: hello@stashii.space