Nov 6, 2026
1. Who we are and what this policy covers
This policy explains what personal information CoreSmart Interactive collects, how we use and share it, and the choices you have, including when you link a bank account through Stripe Financial Connections.
CoreSmart Interactive (“CoreSmart,” “we,” “us”) operates coresmart.com and the web and mobile software services we provide to business customers (the “Services”). This policy applies to the Services and to anyone who visits our website, creates an account, or links a financial account through us.
Effective date: November 6, 2026
2. Information we collect
We collect information in three ways.
Information you give us. Your name, business name, email address, phone number, billing details, and anything you send us in support requests.
Information from your linked financial accounts. If you choose to link a bank or other financial account through Stripe Financial Connections, and only after you give consent, we may receive the following categories of data from Stripe, depending on what you authorize:
- Account owner information (name and contact details on the account)
- Account and routing numbers, or tokenized equivalents
- Account balances
- Transaction history, including dates, amounts, merchants, and descriptions
- Account type and the name of your financial institution
We do not receive or store your online banking username or password. You enter those only in Stripe’s secure flow or with your financial institution.
Information collected automatically. Device and browser type, IP address, pages viewed, and usage activity, collected through cookies and similar technologies.
3. How we use your information
We use your information only for the purposes we describe here and present to you in the product before you link an account.
For data from linked financial accounts, those purposes are:
- Showing you your balances, transactions, and spending inside our Services
- Categorizing transactions and producing spend reports and financial insights for your business
- Verifying account ownership and reconciling your records
- Detecting and preventing fraud and unauthorized access
- Meeting legal, tax, and accounting obligations
We do not use linked account data for advertising, and we do not use it for any purpose we haven’t told you about. If we want to use it for a new purpose or request a new type of data, we will tell you and ask for your consent first.
For other information, we also use it to operate and secure the Services, provide support, bill you, communicate about your account and service changes, and improve the Services.
4. How we share your information
We do not sell or rent your personal information, and we do not sell linked financial account data. We share information only as follows:
- Stripe. Stripe, Inc. provides Financial Connections and collects and processes your financial account data under its own terms and Privacy Policy. Stripe is the party that connects to your financial institution and passes data to us.
- Service providers. Vendors that host our infrastructure, process payments, send email, and provide analytics and support tools. They may use your information only to perform services for us and are bound by confidentiality and security obligations.
- Legal and safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of CoreSmart, our customers, or others.
- Business transfers. If CoreSmart is involved in a merger, acquisition, or sale of assets, your information may transfer to the new owner, who must honor this policy.
- With your direction. Anyone you authorize us to share it with.
5. Linking your bank account with Stripe Financial Connections
Your consent. Before you link an account, we show you why we want your data, which categories of data we will access, and how we will use, store, and share it. Linking is your choice. When you continue, Stripe shows its own consent screen, where you accept Stripe’s terms and Privacy Policy and select the accounts to share. We access only the data categories you authorize. If we ever need a new category, we will ask you through a Stripe-provided consent flow first.
If we offer ACH debits or other payments from a linked account, we ask for that authorization separately from your authorization to access account information.
Disconnecting an account. You can disconnect a linked account at any time in your account settings in the Services, or directly with Stripe through its disconnection page. Disconnecting stops us from receiving new data from that account. It does not delete data that was already shared with us or data held by Stripe.
Deleting your data. To have us delete data we received from a linked account, email privacy@coresmart.com with the subject “Financial Connections: Request for Account Deletion.” We will delete the data from our systems, or tell you the legal reason we need to keep it. We will also forward your request to Stripe at privacy@stripe.com so Stripe can act on the data it holds. You can also send the request to Stripe yourself. A deletion request also disconnects the linked account.
Unauthorized connections. If you believe an account was linked without your authorization, such as through identity theft, contact us right away. We will disconnect it and submit a deletion request to Stripe.
Complaints. If you are unhappy with how we handle linked account data, tell us at the address in Section 9. We report complaints about linked financial accounts to Stripe.
6. Retention and security
We keep personal information only as long as needed for the purposes in this policy, or as the law requires. We keep linked account data while your account is active and your connection is in place. After you delete your account or request deletion, we remove it from our active systems within a reasonable period, except where we must keep records for legal, tax, accounting, fraud prevention, or dispute purposes. Backups are overwritten on a regular cycle.
We protect your information with encryption in transit and at rest, access controls limited to staff who need the data, and monitoring of our systems. No system is perfectly secure, so we cannot guarantee absolute security.
7. Your rights and choices
You can ask us to access, correct, or delete your personal information, to disconnect a linked account, or to stop using your information for a purpose you consented to. Depending on where you live, you may have additional rights under state privacy laws, such as the right to know what we collect, to opt out of sale or targeted advertising (we do neither), and to appeal a decision on your request. We will not discriminate against you for using these rights. We may need to verify your identity before acting on a request.
To make a request, use the contact details in Section 9.
8. Cookies, children, and changes
Cookies. We use cookies and similar technologies to keep you signed in, remember settings, and understand how the Services are used. You can control cookies in your browser settings.
Children. The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.
Changes. We may update this policy. We will post the new version here with a new effective date, and we will notify you of material changes by email or in the Services. We keep prior versions on file.
9. Contact us
CoreSmart Interactive Email: info@coresmart.com Website: coresmart.com
For deletion or disconnection of a linked financial account, use the subject line “Financial Connections: Request for Account Deletion.”