Privacy Policy

BankOfGaga (the "Service") is operated by Burt Consulting LLC, a Texas limited liability company ("BankOfGaga," "we," "our," or "us"). The Service is available at bankofgaga.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

We collect information in the following ways:

We use the information we collect to:

• Create and manage your account
• Provide, operate, and maintain the Service
• Track and display money agreements, payment schedules, and payment history
• Send transactional communications such as payment reminders and account notifications
• Respond to your comments, questions, and requests for support
• Monitor and analyze usage trends to improve the Service
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

We do not sell your personal information. We may share your information in the following limited circumstances:

• Within your family group: Information about money agreements is visible to both the Gaga (account holder) and the family members they share the agreement with.
• Service providers: We share information with third-party vendors who help us operate the Service: Supabase (database hosting), Vercel (application hosting and platform analytics), Stripe (subscription billing for Gaga accounts), Resend (transactional email), Google (sign-in for users who choose that option), Sentry (error monitoring), Google Analytics (aggregated usage analytics), and Finnhub (market data for the practice-investing feature). Each is contractually obligated to protect your information. A current subprocessor list is available on request at support@bankofgaga.com.
• Legal requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We retain account information while your account is active. If you request account deletion, we remove your personal information within 30 days, except where we are required to keep records longer to: (a) comply with our legal or tax obligations (typically up to 7 years for financial and billing records); (b) resolve disputes or defend legal claims; (c) prevent fraud or enforce our Terms; or (d) honor a legal hold. You may request deletion of your account and associated data at any time by contacting us at support@bankofgaga.com.

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS), hashed passwords (bcrypt), and access controls. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

If we become aware of a security incident affecting your personal information, we will notify you without undue delay and in any event within the timeframes required by applicable law.

BankOfGaga is intended for use by adults (18 or older) and by family members who are at least 13 years old. We do not knowingly collect personal information from children under the age of 13. The Gaga (account holder) must be 18 or older and is responsible for any family members they invite to share an agreement. If you believe a child under 13 has provided us with personal information, please contact us at support@bankofgaga.com and we will promptly delete it.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Object to or restrict our processing of your information
• Data portability — receive a copy of your data in a structured format

To exercise any of these rights, contact us at support@bankofgaga.com.

We use cookies and similar technologies to maintain your authenticated session and remember your preferences. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, some parts of the Service may not function properly. We do not sell or share your personal information for cross-context behavioral advertising, and we recognize the Global Privacy Control (GPC) browser signal as a valid opt-out.

The Service may contain links to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Depending on the state you live in, you may have additional rights under state privacy law (including the California Consumer Privacy Act as amended by the CPRA, and comparable laws in other states).

Categories of personal information we have collected in the past 12 months:

• Identifiers (name, email, phone number, IP address)
• Commercial information (subscription status, billing history)
• Internet or network activity (log data, device identifiers, pages visited)
• Financial information (money-agreement amounts, payment schedules, payment history)
• Inferences (usage patterns drawn from your activity in the Service)

Some of this information may be considered "sensitive personal information" under state law (for example, account credentials and certain financial information). We use sensitive personal information only to provide the Service and as otherwise permitted by law; we do not use it to infer characteristics about you.

Your rights. Subject to verification of your identity, you have the right to:

• Know what personal information we have collected about you and how we use it
• Correct inaccurate personal information
• Delete your personal information
• Receive a copy of your personal information in a portable format
• Opt out of any sale or sharing of your personal information for cross-context behavioral advertising (we do not sell or share)
• Limit our use of sensitive personal information
• Designate an authorized agent to submit a request on your behalf
• Appeal a denial of any of these requests

To exercise any of these rights, email support@bankofgaga.com. We will respond within 45 days; if we need more time, we will tell you within that period and may extend by an additional 45 days. We do not discriminate against you for exercising any of these rights.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the effective date. We encourage you to review this page periodically. Your continued use of the Service after any changes constitutes your acceptance of the new policy.

If you have any questions about this Privacy Policy, please contact us at:

Burt Consulting LLC (doing business as BankOfGaga)
13423 Blanco Road #774
San Antonio, TX 78216
United States
Email: support@bankofgaga.com
Website: bankofgaga.com