Privacy Policy

Last updated: July 6, 2026

1. What we collect

We collect the email address you provide at signup, your equity grant data (company name, grant type, shares, vesting dates, fair market values), and standard server logs (IP address, browser type, timestamps). If you subscribe, Stripe processes your payment and shares only a customer ID with us — we never see your card number.

2. How we use it

Your data is used solely to operate VestBench: to calculate your tax estimates, display your vesting schedule, and send transactional emails (confirmation, password reset, billing receipts). We do not sell your data, run behavioral ads, or share it with third parties except as described below.

3. Third-party services

  • Supabase — database and authentication (hosted in the US)
  • Stripe — payment processing (PCI-DSS compliant)
  • Vercel — hosting and CDN

Each of these processors has their own privacy policy and is contractually required to protect your data.

4. Data retention

Your data is retained while your account is active. If you delete your account, all personal data is deleted within 30 days. Anonymized, aggregated usage statistics may be retained indefinitely.

5. Your rights

You can export or delete your data at any time from your account settings, or by emailing us. If you are in the EU/EEA, you have additional rights under GDPR including access, rectification, erasure, and portability.

6. Cookies

We use one session cookie to keep you signed in. We do not use tracking or advertising cookies.

7. Contact

Questions? Email draissam@gmail.com.