Privacy Policy

Last updated: April 27, 2026

BreadStack, a product of M&W Business Development LLC ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the BreadStack mobile application and website.

1. Information We Collect

Information you provide directly:

• Name, email address, and phone number when you create an account
• Date of birth and government-issued ID for identity verification
• Bank account information for funding your stacks via ACH transfer
• Social Security Number (SSN) for identity verification, as required by law

Information collected automatically:

• Transaction data including merchant name, amount, date, and location
• Device information and IP address
• App usage data and analytics

2. How We Use Your Information

• To provide and operate the BreadStack card and spending stack features
• To process transactions and manage your account
• To verify your identity and comply with financial regulations (KYC/AML)
• To send account notifications, transaction alerts, and stack balance updates
• To prevent fraud and ensure the security of your account
• To improve our products and services

3. Sharing Your Information

We share your information only in the following circumstances:

• Stripe, Inc. — Our payment infrastructure provider. Stripe processes all card transactions and issues your BreadStack card. Stripe's privacy policy applies to information shared with them.
• Celtic Bank — The FDIC-insured bank that holds your funds and issues your BreadStack Visa card.
• Identity verification providers — To comply with Know Your Customer (KYC) regulations.
• Law enforcement — When required by law or to protect legal rights.

We do not sell your personal information to third parties.

4. Data Security

We implement industry-standard security measures to protect your information:

• 256-bit TLS encryption for all data in transit
• Your card number and CVV are never stored on our servers — all card data is tokenized by Stripe
• PCI DSS compliance through our Stripe partnership
• Regular security audits and monitoring

5. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Opt out of marketing communications at any time

6. Data Retention

We retain your information for as long as your account is active and as required by applicable financial regulations. Transaction records are retained for a minimum of 7 years as required by law.

7. Children's Privacy

BreadStack is not intended for users under 18 years of age. We do not knowingly collect information from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

9. Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at:

M&W Business Development LLC
Email: [email protected]
Address: 4514 Fenimore Drive, Columbia, MO 65202