Privacy Policy

STACKING CASH — PRIVACY POLICY
Last updated: August 2026
Version: 2.1

PARTIES AND ENTITY IDENTIFICATION
"Stacking Cash" is a trade name (doing business as, or "dba") of Migrate2.ai, LLC, a Delaware limited liability company ("Company"). All data collection, processing, and privacy obligations described in this Privacy Policy are the obligations of Migrate2.ai, LLC. References to "Stacking Cash," "we," "us," and "our" throughout this document refer to Migrate2.ai, LLC.

This Privacy Policy describes how Migrate2.ai, LLC, operating under the trade name Stacking Cash ("we," "us," "our"), collects, uses, retains, and protects information in connection with your use of the Stacking Cash platform ("Platform") and our marketing websites, including stacking.cash and its campaign landing pages (collectively, the "Sites").

1. INFORMATION WE COLLECT
We collect the following categories of information:

(a) Account Registration Information
Name, email address, phone number, business name, and related account setup information you provide when creating an account.

(b) Usage Data
Login activity, features accessed, session activity, and platform usage logs.

(c) Contact Data You Import
Information about individuals that you import into the Platform, including names, phone numbers, email addresses, and related contact details. See Section 3 regarding your responsibilities for this data.

(d) Communication Logs
Records of calls, SMS messages, and emails initiated through the Platform, including timestamps, call durations, delivery status, and AI-assisted transcription or coaching data generated during or after calls.

(e) Payment Information
Billing and payment information processed through Stripe, our third-party payment processor. We do not store raw payment card data.

(f) Technical Data
IP addresses, browser type and version, device information, and session data collected automatically when you access the Platform.

(g) Legal Acceptance Records
Your typed name, IP address, and timestamp associated with your acceptance of our legal agreements. See Section 4.

(h) AI Interaction Data
Data generated through your use of AI-assisted features, including call coaching outputs, AI-suggested scripts and follow-up content, lead scoring inputs and results, CRM automation activity, and other outputs produced by AI systems within the Platform. See Section 9 for full disclosure of how AI systems use your data.

(i) Marketing Website Information
When you visit our Sites or submit a form on a campaign landing page, we collect the name, email address, and phone number you provide, along with the consent language displayed to you at the time, the page URL, the referring website, campaign parameters, your IP address, browser user agent, and the date and time of submission. We retain this record whether or not you go on to create an account.

2. HOW WE USE INFORMATION
We use the information we collect to:

(a) Provide, operate, maintain, and improve the Platform;

(b) Power AI-assisted features, including call coaching, transcription, lead scoring, CRM automation, and outreach recommendations, using account activity, usage data, and communication logs;

(c) Send transactional communications including magic links, account notifications, and support responses;

(d) Comply with applicable legal obligations and respond to lawful regulatory or legal process;

(e) Investigate, prevent, and address fraud, abuse, and violations of our Terms of Service;

(f) Manage billing, subscriptions, and account administration;

(g) Generate anonymized and aggregated analytics for internal platform improvement, performance benchmarking, and product development, as described in Section 10;

(h) Maintain legal compliance records as described in Section 4;

(i) Respond to inquiries submitted through our Sites, and measure the performance of our marketing and advertising activity.

3. DATA YOU IMPORT — YOUR RESPONSIBILITIES AND OUR ROLE
Your Data Ownership
Contact data you import into the Platform remains your data. You represent that you have lawful authority to store, manage, and use this data in connection with your outreach activities. We process imported contact data solely to provide Platform services to you and do not use it for our own marketing or business purposes.

Our Role as Data Processor
With respect to contact data you import into the Platform, Stacking Cash acts as a data processor — we process that data on your behalf and under your instruction. You remain the data controller for all imported contact data and bear sole legal responsibility for how it was collected, the consent under which it was obtained, and the purposes for which it is used.

With respect to your account registration information, usage data, and communication logs generated by your use of the Platform, Stacking Cash acts as a data controller.

Your Compliance Obligation
You are solely responsible for ensuring that the collection, storage, and use of imported contact data complies with all applicable laws, including the TCPA, CAN-SPAM Act, applicable state privacy laws, and state insurance solicitation regulations where applicable.

HIPAA Prohibition
The Platform is not designed, certified, or intended to process, store, or transmit protected health information ("PHI") as defined under the Health Insurance Portability and Accountability Act ("HIPAA"). You are expressly prohibited from importing, uploading, or otherwise introducing PHI into the Platform. This Privacy Policy does not constitute a HIPAA Business Associate Agreement, and Stacking Cash is not acting as a HIPAA Business Associate with respect to any data you provide. If you sell health insurance products, including Medicare Advantage, ACA, or other health-related lines, you must ensure that any contact data imported into the Platform does not include PHI as defined by HIPAA.

4. LEGAL COMPLIANCE LOGS
We permanently retain legal acceptance records associated with your account, including your typed name, IP address, and the timestamp of your agreement to our Terms of Service, Privacy Policy, and Master Service Agreement. These records constitute a formal legal record of your acceptance and consent declarations.

These records may be produced in response to valid legal process, regulatory inquiry, or as necessary to defend Stacking Cash's legal interests.

5. THIRD-PARTY SERVICE PROVIDERS AND SUB-PROCESSORS
We use third-party service providers ("sub-processors") to operate the Platform and our Sites. The following is our current sub-processor list:

Sub-Processor Purpose
Stripe Payment processing
Telnyx Telephony infrastructure, number provisioning, and A2P 10DLC SMS
Email delivery provider(s) Transactional and outreach email delivery
Analytics and monitoring provider(s) Platform performance monitoring and session analytics
Cloud infrastructure provider(s) Hosting, storage, and computing infrastructure
Cortality Marketing website attention and interaction analytics
Meta Platforms Advertising measurement and campaign attribution

These providers process your data only as necessary to deliver their respective services and are contractually required to protect it appropriately. We do not sell your personal data to third parties.

Sub-Processor Changes
We may add, remove, or replace sub-processors from time to time. We will provide at least fifteen (15) days' prior notice of any material change to our sub-processor list via email to your registered address or through a notice on the Platform. Continued use of the Platform after such notice constitutes acceptance of the updated sub-processor arrangement.

6. COOKIES AND TRACKING
The Platform uses cookies and similar tracking technologies to maintain session state, support authentication, and collect usage analytics. You may adjust cookie settings through your browser, though disabling certain cookies may affect Platform functionality.

Analytics and Attention Measurement
We use third-party analytics and attention-measurement services on our Sites to understand how visitors interact with our pages. These services record interaction data such as mouse movement, scrolling, clicks, and time spent on individual page elements, and may capture structural or visual snapshots of the pages you view. Values you enter into forms are removed within your browser before any data is transmitted. These services assign an anonymous session identifier that is not linked to your identity, is not retained after your visit, and is not used to track you across other websites.

Advertising
We use advertising pixels, including the Meta Pixel, on our Sites and campaign landing pages. These allow us to measure the performance of our advertising campaigns and may allow the advertising platform to associate your visit with an account you hold with that platform. When you submit a form on a campaign landing page, we record that a conversion occurred and which campaign it came from.

These third-party services are subject to their own privacy policies.

7. DATA RETENTION
We retain your account data while your account is active. Following account termination, we retain data for up to seven (7) years as required for legal compliance purposes, including potential TCPA or regulatory matters. Legal acceptance records (Section 4) are retained permanently.

Data Export Upon Termination
Following termination of your account for any reason, you have thirty (30) days from the date of termination to request an export of your imported contact data. After this thirty (30) day window, Stacking Cash has no obligation to retain or provide access to your imported contact data, and such data may be permanently deleted in accordance with our retention schedule. Export requests must be submitted to legal@stacking.cash.

8. YOUR PRIVACY RIGHTS
You may request access to, correction of, or deletion of your personal data by contacting us at legal@stacking.cash. We will honor deletion requests to the extent permitted by applicable law.

Important: Certain records cannot be deleted regardless of your request, including legal compliance logs (Section 4), communication records subject to regulatory retention requirements, and data we are required to maintain under applicable law.

State-Specific Rights: Users in certain states, including California, Colorado, Texas, Virginia, and other states with enacted consumer privacy laws, may have additional rights regarding their personal data, including the right to know, correct, delete, and opt out of certain data processing. Contact legal@stacking.cash to exercise these rights.

9. AI-ASSISTED FEATURES — DATA PROCESSING DISCLOSURE
The Platform incorporates artificial intelligence and machine learning systems to power features including call coaching, call transcription, AI-assisted script suggestions, lead scoring, CRM automation, outreach recommendations, and recruiting assistance tools ("AI Features").

(a) How AI Systems Use Your Data
AI Features process account activity, communication logs, usage patterns, and Platform interaction data to generate their outputs. By using AI Features, you acknowledge and consent to this processing.

(b) AI-Generated Outputs Are Assistive Only
All outputs produced by AI Features — including suggested scripts, follow-up messages, lead scores, coaching recommendations, and recruiting insights — are generated by automated systems and are not reviewed by a human at Stacking Cash prior to delivery. These outputs are tools to assist your decision-making and do not constitute legal, compliance, financial, insurance, or professional advice of any kind. You are solely responsible for reviewing, evaluating, and approving any AI-generated content before acting on it or transmitting it to any third party.

(c) No Client Data Used for AI Model Training
Stacking Cash does not use contact data you import into the Platform to train, fine-tune, or improve our AI or machine learning models. Your imported contact lists and agent performance data are yours and are not used as training inputs for any AI system, internal or third-party.

(d) AI-Assisted Communications Remain Your Responsibility
The fact that an AI Feature suggested, drafted, or assisted in generating a communication does not alter your status as the sole initiator and sender of that communication. All TCPA, FCC, CAN-SPAM, and applicable state law obligations apply to AI-assisted communications in the same manner as any other communication you initiate through the Platform.

(e) AI Feature Availability
AI Features are provided as-is and may be modified, updated, or discontinued at any time. We do not guarantee the continuous availability, accuracy, or fitness for any specific purpose of any AI Feature.

10. AGGREGATED AND ANONYMIZED DATA
We may collect, generate, and use data derived from your use of the Platform in anonymized and aggregated form — meaning data that cannot reasonably be used to identify you or any individual contact — for purposes including platform improvement, internal analytics, performance benchmarking, and product development. This aggregated data is not your data and is not subject to deletion requests.

11. DATA SECURITY
We implement reasonable technical and organizational measures to protect your data from unauthorized access, disclosure, or loss, including application-layer encryption for sensitive communication data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Breach Notification
In the event of a data breach that affects your personal data and that we are required by applicable law to report, we will notify you without undue delay and no later than seventy-two (72) hours after we become aware of the breach, to the extent reasonably practicable. Notification will be sent to your registered email address and will include the nature of the breach, the categories of data affected, and the steps we are taking to address it. Where notification within 72 hours is not possible due to the complexity or scope of the incident, we will provide an initial notification within 72 hours and follow up with additional detail as it becomes available.

12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of material changes via email to your registered address or through a notice on the Platform no less than fifteen (15) days before such changes take effect. Your continued use of the Platform after the effective date of the updated policy constitutes acceptance of the updated terms.

13. CONTACT
For privacy questions, data requests, data export requests, or to exercise your rights:

Email: legal@stacking.cash

Stacking Cash is a trade name (dba) of Migrate2.ai, LLC, a Delaware limited liability company. All privacy obligations under this Policy are obligations of Migrate2.ai, LLC.