Last Updated: February 25, 2026
We take your privacy seriously. This Privacy Policy explains what personal information we collect and how we use it.
This Privacy Policy describes how Promise Financial, Inc., doing business as Promissory ("Promissory," "we," "us," or "our"), collects, uses, shares, and protects personal information obtained from users ("you" or "your") of our website, Promissory.com (the “Site”), and through our services related to QSBS stacking, tax preparation, and financial planning ( collectively the “Services”).
1. Information we collect
1.1 Personal Information
We collect the following categories of personal information when you use the Site or Services:
- Contact Information: Full legal name, mailing address, email address, and phone number
- Identification Information: Social Security Number (SSN), Tax Identification Number (TIN), and date of birth
- Family and Beneficiary Information: Names, addresses, dates of birth, and SSNs of your spouse, children, or other individuals designated as beneficiaries.
- Business Information: Information about your business ownership, stock ownership, and financial details relevant to your use of the Services.
Transaction Information: Details about the services purchased, payment methods (processed by third-party providers) billing details, and payment history. - Communication Information: Records of communications between you and Promissory, including emails, SMS messages, and platform interactions.
- Account Information: Account preferences and activity logs associated with your use of the Site of Services.
Document Uploads: Any documents or forms you upload or submit, which may contain personal or sensitive information about you or others.
Some of the information we collect, such as Social Security Numbers and information relating to minors, may be classified as sensitive personal information under applicable U.S. privacy laws. We treat this information with heightened care and limit its use and sharing to what is necessary to provide the Services.
1.2 Automatically Collected Information
When you visit the Site, we may automatically collect certain technical and usage information, including:
- IP address
- Browser type and settings
- Device type and operating system
- Referring URLs
- Pages visited and actions taken on the Site
- Dates and times of access
We may also use cookies and similar technologies to collect information about how you interact with the Site. You can control the use of cookies through your browser settings. Cookies and similar technologies may also be used by our online partners and/or vendors, as further described in Section 3 of this Policy, to associate these activities with other personal information they or others have about you, including by association with your email address. We and/or our service providers may then send communications and marketing to you. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.
2. How we use your information
We use your personal information for the following business and operational purposes:
- To provide and maintain the Site and Services
- To create, manage, and support your account
- To process and complete transactions
- To prepare tax-related forms and legal documents based on your inputs
- To file documents with the IRS or other authorities on your behalf, where authorized
- To support the establishment of trusts
- To communicate with you about your account or our Services
- To respond to your inquiries and provide customer support
- To send service-related notices and updates
- To improve, test, and develop our Site and Services
- To detect, prevent, and investigate fraud or security incidents
- To comply with legal and regulatory obligations
For other purposes with your consent, where required or as separately disclosed.
3. Information sharing and disclosure
3.1 Third-Party Service Providers
We may share personal information with third-party service providers to support our operations and deliver the Services. These service providers are contractually obligated to use the information only for the specific services they provide on our behalf.
Trust Custody Partners: We share information necessary to facilitate trust creation and management
Valuation Partners: We share business and ownership information to support business valuations.
Tax Partners: We share information necessary to facilitate preparing tax forms
Payment Processors: We share payment-related information with Stripe to process payments.
Cloud Hosting Providers: We use cloud infrastructure to securely store and process your data.
Communication Services: We use third-party providers to deliver emails, SMS, and other communications.
Marketing and Analytics Tools: We may share limited usage or contact information with vendors that support internal marketing, customer engagement or usage analytics. This does not include sensitive personal information.
3.2 Legal Requirements
We may disclose your information if we believe it is necessary or appropriate to:
- Comply with applicable laws, regulations, or legal process
- Respond to valid requests from public authorities, including court orders or government agencies
- Enforce our Terms or other agreements
- Protect the rights, property, or safety of Promissory, our users or others.
3.3 Business Transfers
We may transfer your information in connection with a merger, acquisition, reorganization, or sale of all or part of Promissory's assets. Any successor entity will be permitted to use your information in accordance with this Privacy Policy. Where feasible, we may notify you of any change in ownership or control by email and/or by posting a notice on the Site.
3.4 With Your Consent
We may share your information with third parties when we have your consent to do so. This may include situations where you authorize a referral, integration, or other specific data exchange. Consent may be obtained in writing, through the Site, or by other affirmative action.
4. Data security
We implement technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures may include:
- Encryption of sensitive data
- Two-factor authentication (2FA)
- Automatic log-out functionality
- Periodic security reviews and audits
- Human review of all trust-related transactions
- Secure development practices
However, no method of transmission over the Internet or method of electronic storage is completely secure. While we take reasonable steps to safeguard your personal information, we cannot guarantee absolute security.
4.1 Data Breach Notification
If we discover a data breach involving your personal information, we will notify you in accordance with applicable laws. Depending on the nature of the breach, our notification may include:
- A general description of the breach
- The categories of information involved
- Steps we are taking to investigate and mitigate the issue
- Recommended actions you can take to protect yourself
- Contact details for further information
We will provide this notification without unreasonable delay, and where appropriate may notify you by email and/or prominent notice on the Site. In some cases, notification may be delayed if requested by law enforcement or as otherwise permitted by law.
5. Data retention
We retain personal information for as long as reasonably necessary to fulfill the purposes outlined in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements. We may retain certain information longer if permitted or required by applicable law.
The factors we consider in determining retention periods include:
- Legal obligations to retain data for certain periods
- Statute of limitations under applicable law
- Ongoing or potential disputes
- The nature and sensitivity of the information
- Guidelines issued by relevant data protection authorities
- The purposes for which we collected and use the information
Where required by law, we will delete or de-identify personal information upon request or once it is no longer needed for the purposes for which it was collected.
6. Your rights and choices
Depending on your location, you may have certain rights regarding your personal information:
6.1 California Residents
California residents may have certain rights under the California Consumer Privacy Act (CCPA) including the right to:
- Request disclosure of the personal information we collect, use, disclose, and sell
- Request deletion of personal information
- Opt-out of the sale of personal information
- Non-discrimination for exercising CCPA rights
To exercise these rights, please contact us using the information provided in the "Contact Us" section.
6.2 All Users
We offer the following choices and rights to all users, subject to applicable law and certain limitations.
- Access: You can request access to your personal information that we hold.
- Correction: You can request that we correct inaccurate or incomplete information.
- Deletion: You can request deletion of your personal information, subject to certain exceptions.
- Communication Preferences: You can update your communication preferences at any time.
We may take steps to verify your identity before processing your request under this section.
6.3 Response Timeframe
We strive to respond to all privacy-related requests within 30 days. In some cases, particularly for complex requests or if you have submitted multiple requests, we may need up to 45 days to respond. If we require additional time, we will inform you of the reason and extension period in writing. If we cannot fulfill your request, we will explain why in our response.
7. Children’s privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
8. Cookie policy
8.1 What Are Cookies
Cookies are small text files that are placed on your device when you visit our website. They allow us to recognize your device and remember certain information about your visit.
8.2 How We Use Cookies
We use cookies to:
- Keep you signed in to your account
- Remember your preferences
- Understand how you use our website
- Pair activity data to your account
- Improve our website and services
- Protect against fraudulent activity
8.3 Types of Cookies We Use
- Essential Cookies: Necessary for the website to function properly.
- Preference Cookies: Allow the website to remember choices you make.
- Analytics Cookies: Help us understand how visitors interact with our website.
- Marketing Cookies: Used to track visitors across websites to enable targeted advertising.
8.4 Managing Cookies
Most web browsers allow you to control cookies through their settings. You can typically delete or reject cookies. However, if you delete or reject cookies, some features of our website may not function properly.
9. Third-party websites and services
Our website may contain links to or integrations with third-party websites, tools or services that are not operated or controlled by Promissory. This Privacy Policy does not apply to those websites or services and we are not responsible for their content, practices or privacy policies. We encourage you to review the privacy policies of any third-party websites or services before providing any information to them.
10. Changes to this privacy policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the "Last Updated" date at the top. If we make material changes, we may also provide additional notice, such as by email or through the Services. Your continued use of the Site or Services immediately after such changes to this Privacy Policy constitutes your acknowledgment of the modified Privacy Policy.
11. Compliance with laws and regulations
We comply with applicable data protection laws and regulations, including those related to consumer privacy and taxpayer information, as they apply to our Services.
11.1 Tax Information Handling
Where Promissory assists in the preparation or submission of tax-related forms, we follow IRS guidance for the protection of taxpayer data and strive to align with best practices, including those set out in IRS Publication 4557 (Safeguarding Taxpayer Data). Specifically, we:
- Collect only the information necessary to support tax document preparation and related services
- Maintain appropriate administrative, technical, and physical safeguards to protect taxpayer data
- Do not disclose taxpayer information to third parties except as permitted by law, contract, or with your consent
- Retain tax-related records in accordance with IRS requirements, generally for at least 3 years from the filing date
12. Trust documents and privacy
When you use the Services to create trust documents:
- Information contained in the trust documents is treated as personal information under this Privacy Policy
- Trust documents may be shared with authorized third parties as necessary to deliver the services, including trust custody partners (e.g., Crawford Trust Company)
- These documents may be subject to legal disclosure obligations, including court orders, subpoenas, or regulatory requests
- We maintain strict administrative, technical and physical safeguards to protect the confidentiality and security of trust documents
- Access to trust documents is limited to authorized personnel and service providers with a need to know
- You retain ownership of your trust documents, as specified in our Terms and Conditions
13. International data transfers
Our services are intended for use by individuals located in the United States. If you access the Site or submit personal information from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
14. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Promise Financial, Inc.
3827 S Carson St
505-25 Unit #3395
Carson City, NV 89701
Email: info@promissory.com
15. Special notification for Nevada residents
If you are a Nevada resident, you have the right to opt-out of the sale of certain personal information to third parties. You can exercise this right by emailing us at info@promissory.com. Promissory does not currently sell personal information in a manner that triggers that statute's opt-out requirements.
16. Special disclosure for California residents
CCPA Privacy Notice Supplement
This California Privacy Rights section provides additional details for California residents, as required under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
16.1 Categories of Personal Information We Collect
In the past 12 months, we have collected the following categories of personal information, as defined under California law:
- Identifiers (e.g., name, address, email, phone number, SSN)
- Personal information categories listed in the California Customer Records statute
- Commercial information (e.g., products or services purchased)
- Internet or other electronic network activity information
- Professional or employment-related information
- Financial information
- Inferences drawn from other personal information
We do not collect inferences about users (e.g. profiling, predictive scoring) and we do not collect sensitive personal information for the purpose of inferring characteristics about you.
16.2 Sources of Personal Information
We obtain personal information directly from you, from your browser or deviceWe obtain personal information directly from you, automatically from your browser or device when you visit our website, from service providers, and from publicly available sources. when you visit our website, from service providers, and from publicly available sources.
16.3 Use of Personal Information
See Section 2 (“How we Use Your Information”) of this Privacy Policy for information about how we use your personal information.
16.4 Disclosure or Sale of Personal Information
In the past 12 months, we have disclosed personal information to the categories of third parties listed in Section 3 of this Privacy Policy.
We do not sell personal information as defined by the CCPA, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA and CPRA.
16.5 Your Rights Under California Law
If you are a California resident, you may have the following rights:
- Right to Know: You can request information about the personal information we have collected about you and how we have used and disclosed it.
- Right to Request Deletion: You can request that we delete your personal information, subject to certain exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
16.6 How to Exercise Your Rights
To exercise your rights under the CCPA, please submit a request by emailing us at info@promissory.com.
We will verify your identity before responding to your request by asking you to provide additional information or log into your account. If we are unable to verify your identity, we may deny the request in accordance with applicable law.
