Legal
Privacy Policy
- 1. Who this covers
- 2. Information we collect
- 3. Bank account data and Stripe Financial Connections
- 4. How we use information
- 5. How we share information
- 6. Storage, security and retention
- 7. Your choices and rights
- 8. Children
- 9. Changes
- 10. Contact
1. Who this covers
Hedge, Inc. (“Hedge”, “we”, “us”) provides payments technology to businesses, including a round-up tool that lets a consumer round transactions up to the nearest dollar and move the difference from their bank account into a digital wallet. This policy describes how we handle information when you use our websites, our round-up and wallet services, and any Hedge feature embedded in a business partner’s app or site (together, the “Services”).
Our business partners (the merchants or apps in which our Services are embedded) have their own privacy policies that govern the information they collect. This policy covers only what Hedge collects and processes.
2. Information we collect
Information you or a partner provide
- Identity and contact details: name, email address, phone number.
- A partner-assigned user identifier so we can associate round-ups with your account at that partner.
- Bank account details you enter manually (routing and account number) when linking an account without an instant-verification flow.
- Your authorization (mandate) to debit your bank account, including the time, IP address and device information at the moment you accepted it.
Information generated by using the Services
- Transaction amounts that trigger round-ups, the round-up amounts, and the status of each debit (initiated, processing, settled, returned, failed).
- Wallet balances and wallet activity (credits, transfers, reversals).
- Technical data: IP address, browser/device type, timestamps and logs used for security, fraud prevention and troubleshooting.
3. Bank account data and Stripe Financial Connections
When you link a bank account through an instant-verification flow, that flow is provided by Stripe Financial Connections. You authenticate directly with your bank; Hedge never sees your online banking username or password.
Through Financial Connections we receive only the following, with your permission:
- Tokenized account and routing numbers — used solely to initiate the ACH debits you have authorized.
- Account balance — checked before a debit to reduce the chance of an overdraft or a returned payment.
We do not request or receive your transaction history or account ownership details through Financial Connections. We do not sell Financial Connections data, do not use it for marketing, and do not use it as part of any consumer report. Bank data obtained through Financial Connections is stored in the United States and is not shared with third parties other than Stripe (which processes it under its own privacy policy) and the banks involved in processing a payment.
You can disconnect a linked bank account at any time through the partner app, by contacting us, or through your bank’s connected-apps settings where offered. Disconnecting revokes our ability to initiate new debits but does not reverse payments already in progress.
4. How we use information
- To provide the Services: calculate round-ups, initiate and track ACH debits, maintain wallet balances and process transfers.
- To verify bank accounts and comply with Nacha rules and other payment-network requirements, including keeping a record of your debit authorization.
- To detect and prevent fraud, unauthorized use, returned payments and abuse.
- To provide support, send transactional notices (for example, confirmation of a debit authorization or a returned payment) and respond to your requests.
- To comply with law, respond to lawful requests, and enforce our terms.
- To operate, secure and improve the Services, using aggregated or de-identified data where possible.
We do not use your information to serve third-party advertising.
5. How we share information
- Payment processors and banks. Stripe and the financial institutions involved in an ACH transaction receive the information needed to process it.
- Business partners. The partner whose app you used to enroll receives the status and amounts of your round-ups and wallet activity related to their program, and your partner user identifier. They do not receive your full bank account number from us.
- Service providers. Hosting, database, logging and customer-support vendors that process data on our behalf under contractual confidentiality obligations.
- Legal and safety. When required by law, subpoena or regulator, or to protect the rights, property or safety of Hedge, our users or others.
- Business transfers. In connection with a merger, acquisition or sale of assets, subject to this policy.
We do not sell personal information.
6. Storage, security and retention
Data is stored on servers located in the United States. Bank account credentials you enter manually are transmitted directly to our payment processor and are not retained by Hedge in plain text; stored partner-provider credentials are encrypted at rest (AES-256-GCM). Access to production systems is restricted and logged.
We retain transaction records, debit authorizations and related identity information for as long as needed to provide the Services and for the periods required by payment-network rules, tax and anti-fraud laws (generally up to seven years after the last transaction). Financial Connections data is retained only as long as the linked account remains connected and as required to complete or dispute payments already initiated. No method of transmission or storage is completely secure; if we become aware of a breach affecting your information we will notify you as required by law.
7. Your choices and rights
- You can stop round-ups or disconnect a bank account at any time through the partner app or by contacting us.
- You can request access to, correction of, or deletion of your personal information. We may retain information we are legally required to keep (for example, records of completed payments).
- Residents of California and other states with comprehensive privacy laws may have additional rights, including the right to know what information we hold and the right to non-discrimination for exercising those rights. We do not sell or share personal information for cross-context behavioral advertising.
To exercise any of these rights, email support@hedgepayments.com. We will verify your identity before acting on a request.
8. Children
The Services are not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a minor has provided us information, contact us and we will delete it.
9. Changes
We may update this policy from time to time. We will post the revised version here with a new effective date and, for material changes, notify you through the Services or by email.
10. Contact
Hedge, Inc.
Email: support@hedgepayments.com
Web: hedgepayments.com