Full Deck

Full Deck

Privacy Policy

Last Updated: July 9, 2026

At Full Deck, we take your privacy and the security of your financial data seriously. This Privacy Policy explains how SG Studios LLC ("we," "us," or "our") collects, uses, and protects your information when you use the Full Deck mobile and web applications (the "Service").

1. Information We Collect

  • Account Information: When you sign up, we collect your name and email address.
  • Transaction Data: Through our integration with Plaid, we collect transaction history (for example, merchant name, amount, date, and category) from your linked credit card and bank accounts.
  • Subscription and Purchase Data: When you subscribe, our billing providers process your subscription status and transaction records. On mobile this is handled by Apple, Google, and RevenueCat; on the web by Stripe. We do not collect or store your full payment card number.
  • Usage and Analytics Data: We collect information about how you interact with the app, such as features used, screens viewed, and session activity, to understand usage and improve the product.
  • Device and Log Data: We automatically collect technical information such as device type, app version, IP address, and diagnostic, crash, and error logs to keep the Service secure and working.
  • What We Do Not Collect: We never collect or store your bank login credentials. These are handled exclusively by Plaid. We do not request "write" access; our access to your financial accounts is strictly read-only.

2. How We Use Your Information

We use the information we collect to:

  • Identify and track the statement credits and spending patterns on your linked cards.
  • Provide you with insights and summaries of your financial activity.
  • Operate, maintain, and improve the Service, and analyze usage and performance.
  • Communicate with you regarding account updates or support.
  • Detect, prevent, and investigate fraud, abuse, and security incidents.
  • Comply with our legal obligations and enforce our Terms.

3. Data Sharing and Disclosure

  • Service Providers (Sub-Processors): We share information with vendors who process data on our behalf, only under contract, and only to operate Full Deck. These include: Plaid (secure connection to your financial institutions), Supabase (database, authentication, and hosting), Vercel (application hosting), Apple, Google, RevenueCat, and Stripe (subscription billing and entitlements), PostHog (product analytics), Sentry (error and performance monitoring), Resend (email delivery), and Google Workspace (customer support). You can review Plaid's privacy policy at plaid.com/legal.
  • No Sale or Sharing of Your Data: We do not sell your personal or financial information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We have no advertisers.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

4. Data Retention

We keep your personal data only as long as needed to provide the Service or as required by law. Active account and product data is retained while your account is open. If you delete your account, we purge your personal data from production systems within 30 days, and your financial-account connections are revoked immediately. Technical and access logs are kept for up to 90 days (security logs up to one year). Business, financial, and tax records may be retained for up to seven years where the law requires. Backups expire on a rolling schedule. Data subject to a legal hold is retained until the hold is resolved.

5. Data Security

We implement industry-standard security measures, including encryption and secure socket layer (SSL) technology, to protect your data. Sensitive integration data, such as Plaid access tokens, is encrypted at rest. Transaction data is stored securely and is only accessible to provide the Service to you.

6. Your Choices

  • Account Deletion: You may delete your Full Deck account at any time through the app settings. Upon deletion, we will remove your personal information and disconnect your accounts from Plaid.
  • Unlinking Accounts: You can unlink specific financial accounts at any time, which will stop the flow of new transaction data to Full Deck.

7. Cookies and Tracking Technologies

Full Deck uses only the cookies and similar technologies needed to run the Service: authentication and session cookies that keep you signed in, and first-party analytics identifiers (PostHog) that help us understand how the product is used. We do not use advertising cookies, and we do not permit third-party advertising trackers on the Service. You can control or delete cookies through your browser settings; blocking essential cookies may prevent you from signing in.

8. Your California Privacy Rights

If you are a California resident, you have the right to: know and access the personal information we have collected about you; request deletion of your personal information; request correction of inaccurate information; and opt out of the sale or sharing of personal information. We do not sell or share your personal information, so there is nothing to opt out of, and we do not use sensitive personal information for purposes that require an opt-out. We will not discriminate against you for exercising these rights.

The categories of personal information we collect are described above and include identifiers (name, email), financial and transaction information, commercial and subscription information, internet and device activity, and inferences drawn from this data. To exercise your rights, delete your account in the app settings or email us at info@sgstudios.dev. We will verify your request before acting on it.

We honor the Global Privacy Control (GPC) signal. Because we do not sell or share personal information, there is no sale or sharing to opt out of; where the signal applies, we treat it as a valid opt-out request.

9. Children's Privacy

Full Deck is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18, and the Service is not directed to children. If we learn that we have collected information from a child, we will delete it.

10. Service for U.S. Residents

Full Deck is offered to, and intended for, residents of the United States, and your data is processed in the United States. The Service is not directed to individuals in the European Union, the United Kingdom, or other regions with separate data-protection regimes. If you access the Service from outside the United States, you do so on your own initiative.

11. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at info@sgstudios.dev, or by mail at:

SG Studios LLC
7090 N Oracle Rd, Ste 178, PMB 1071
Tucson, AZ 85704

Terms of Service · Home