Privacy Policy

Stonaris, Inc. (“Stonaris,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, protect, and retain information when you visit our website, use our platform, connect third-party services, or otherwise interact with us.

Stonaris provides a business banking and automated bookkeeping platform for ecommerce sellers, starting with Amazon sellers. Banking services, if and when available, are provided by one or more banking partners, not directly by Stonaris. Stonaris is a financial technology company, not a bank.

By using Stonaris, you agree to this Privacy Policy. If you do not agree, do not use our website or services.

1. Information We Collect

We may collect the following categories of information.

Account and Business Information

When you create an account, join a waitlist, request access, or use Stonaris, we may collect:

• Name
• Email address
• Phone number
• Business name
• Business address
• Business type
• Tax identification information
• Ownership information
• Authorized user information
• Account login information
• Communication preferences
• Support messages and inquiries

Banking and Financial Information

To provide banking, bookkeeping, expense tracking, and financial reporting features, we may collect or process:

• Bank account information
• Account balances
• Transaction history
• Card transactions
• Payment activity
• Supplier payment details
• Wire or ACH payment information
• Categorized expenses
• Bookkeeping records
• Financial reports
• Tax-readiness information
• Reconciliation records
• Internal notes, classifications, and audit logs related to bookkeeping activity

Banking services may be provided through third-party banking partners and financial infrastructure providers. Those partners may collect additional information under their own terms and privacy policies.

Amazon Seller and Advertising Data

If you connect your Amazon account or Amazon Ads account, we may collect and process data made available through Amazon APIs, including:

• Seller account identifiers
• Marketplace identifiers
• Settlement data
• Payout data
• Fees
• Refunds
• Reimbursements
• Adjustments
• Sales and order-related financial data
• Advertising spend and campaign-related financial data
• Inventory-related financial data
• Product identifiers such as SKUs or ASINs where needed for bookkeeping and profitability analysis
• Reports, financial events, and other Amazon data authorized by you

Stonaris is designed to use Amazon seller financial and operational data for bookkeeping, reconciliation, expense tracking, tax-readiness, and financial visibility. Stonaris does not intend to access Amazon buyer personally identifiable information unless it becomes strictly necessary for an approved and authorized use case.

Automatically Collected Information

When you visit our website or use our platform, we may automatically collect:

• IP address
• Device type
• Browser type
• Operating system
• Pages viewed
• Referring pages
• Date and time of access
• Clicks and interactions
• Session activity
• Error logs
• Security logs
• Authentication logs

Cookies and Similar Technologies

We may use cookies, pixels, analytics tools, and similar technologies to operate the website, remember preferences, improve performance, understand usage, and protect against fraud or abuse. You can adjust cookie settings through your browser, but some features may not work properly if cookies are disabled.

2. How We Use Information

We use information to:

• Provide and operate Stonaris
• Create and manage user accounts
• Verify identity and business information
• Support banking-related onboarding through banking partners
• Process and display banking activity
• Provide cards and payment-related features through partners
• Connect to authorized Amazon and Amazon Ads accounts
• Pull, parse, categorize, and reconcile Amazon settlement and financial data
• Automate bookkeeping
• Categorize expenses
• Generate financial reports
• Support tax-readiness workflows
• Detect errors, fraud, misuse, or unauthorized access
• Secure the platform
• Provide customer support
• Communicate with users
• Improve product performance
• Develop new features
• Comply with legal, regulatory, contractual, banking partner, and Amazon requirements
• Enforce our Terms of Service and other agreements

3. How We Share Information

We do not sell your business financial data.

We may share information with the following categories of recipients.

Banking Partners and Financial Infrastructure Providers

We may share information with banking partners, card issuers, payment processors, compliance providers, identity verification providers, and financial infrastructure vendors to provide banking, card, payment, compliance, and money movement services.

Amazon and Connected Platforms

When you connect your Amazon or Amazon Ads account, we may exchange information with Amazon as needed to authenticate your account, receive authorized data, maintain API access, comply with Amazon policies, and provide the Stonaris service.

Service Providers

We may share information with vendors that help us operate the platform, including:

• Cloud hosting providers
• Database providers
• Security monitoring providers
• Analytics providers
• Customer support tools
• Email providers
• Error tracking tools
• Infrastructure providers
• Legal, compliance, and accounting advisors

These providers may only use information as needed to provide services to Stonaris.

Legal and Compliance

We may disclose information if we believe it is necessary to:

• Comply with law, regulation, subpoena, court order, legal process, or government request
• Comply with banking partner, payment network, or Amazon obligations
• Protect the rights, property, and safety of Stonaris, users, partners, or others
• Detect or prevent fraud, abuse, security incidents, or illegal activity
• Enforce our agreements

Business Transfers

If Stonaris is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information may be transferred as part of that transaction, subject to appropriate protections.

4. Amazon Data Handling

When we access Amazon data, we use it only for authorized business purposes, including bookkeeping, reconciliation, financial reporting, expense tracking, tax-readiness, profitability visibility, and related support.

We do not use Amazon data for unrelated advertising, resale, or unauthorized purposes.

We restrict access to Amazon data to authorized personnel and systems that need access to provide and support the service. We maintain security controls designed to protect Amazon data, including access controls, secure credential storage, encryption, logging, and monitoring.

If you disconnect your Amazon account or request deletion, we will delete or de-identify Amazon data in accordance with Amazon requirements, legal requirements, accounting obligations, and legitimate business needs.

5. Data Retention and Deletion

We retain information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the service, comply with legal and regulatory obligations, maintain business records, resolve disputes, enforce agreements, and satisfy Amazon, banking partner, tax, accounting, and security requirements.

For Amazon data, we follow applicable Amazon data retention requirements. If we ever process Amazon buyer personally identifiable information, we will limit retention and delete it according to Amazon's applicable requirements, unless a shorter period is required by law or contract.

You may request deletion of your account or data by contacting us at support@stonaris.com. We may retain certain information where required or permitted by law, banking obligations, tax obligations, compliance obligations, fraud prevention, dispute resolution, security, or legitimate business recordkeeping.

6. Security

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

• Encryption in transit
• Encryption at rest
• Secure credential storage
• Role-based access controls
• Multi-factor authentication for administrative access
• Network security controls
• Audit logging
• Monitoring and alerting
• Vulnerability management
• Access reviews
• Incident response procedures
• Vendor risk management
• Least-privilege access

No system is perfectly secure. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed. You are responsible for protecting your login credentials and notifying us immediately if you believe your account has been compromised.

7. Financial Privacy

Because Stonaris handles business financial data, we treat financial information with care. Where applicable, we may provide additional privacy notices required by financial privacy laws or banking partners. Those notices may explain additional rights or limits on how certain nonpublic personal information is shared.

Banking services are subject to the privacy policies and terms of our banking partners and financial service providers.

8. User Choices and Controls

Depending on your location and relationship with Stonaris, you may have the right to:

• Access certain information we hold about you
• Correct inaccurate information
• Request deletion of certain information
• Disconnect third-party integrations
• Opt out of certain communications
• Limit certain uses or disclosures where required by law
• Request information about how your data is processed

To make a request, contact us at support@stonaris.com. We may need to verify your identity before fulfilling a request.

9. Third-Party Services

Stonaris may integrate with third-party services such as Amazon, Amazon Ads, banking partners, identity verification providers, payment processors, and analytics tools. Your use of those third-party services may be governed by their own terms and privacy policies. Stonaris is not responsible for the privacy practices of third parties.

10. Children's Privacy

Stonaris is intended for business users and is not directed to children. We do not knowingly collect information from children under 13. If we learn that we have collected information from a child, we will delete it as required by law.

11. International Users

Stonaris is initially intended for users and businesses based in the United States. If you access Stonaris from outside the United States, you understand that your information may be processed in the United States, where privacy laws may differ from those in your location.

12. Communications

We may send you service-related communications, including account notices, security alerts, product updates, billing notices, policy updates, and support messages. You may opt out of marketing emails, but you may still receive transactional or service-related messages.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and may notify you by email, in-app notice, or website notice. Your continued use of Stonaris after the updated policy becomes effective means you accept the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: