Skip to content
Crossmarc
Legal

Privacy policy

Last updated: July 2026

Overview

Crossmarc, LLC ("Crossmarc," "we," "us") operates the crossmarc.com website and the Steward platform (steward.crossmarc.com). This privacy policy explains how we collect, use, and protect your personal information when you visit our sites or use our services.

Information we collect

Information you provide

  • Contact information (name, email) when you fill out a form or write to us.
  • Account information when you create a Steward account (name, email, authentication credentials).
  • Financial data you choose to connect or enter within Steward (account balances, documents, entity records).

Information collected automatically

  • Server logs (IP address, browser type, pages visited), retained for 90 days for security audit, then deleted.
  • We do not use third-party analytics, advertising pixels, or tracking cookies on any Crossmarc property.

How we use your information

  • To provide and maintain the Steward platform.
  • To respond to your enquiries.
  • To detect and prevent security incidents.
  • To comply with legal obligations.

What we never do

  • We do not sell, rent, or share your personal or financial data with third parties for marketing or analytics.
  • We do not use your data to train AI models.
  • We do not display advertising of any kind.
  • We do not use third-party tracking or analytics tools.

Data storage and security

Your data is stored on Amazon Web Services infrastructure in the United States. All data is encrypted in transit (TLS 1.2+) and at rest. Credential vault entries use KMS envelope encryption with keys managed separately from the data they protect.

Data retention and deletion

You may request deletion of your account and all associated data at any time by contacting us at privacy@crossmarc.com. After cancellation, your data remains accessible for 30 days for export. After that period it is permanently deleted from our systems.

Third-party services

Steward uses Plaid for read-only account aggregation. Plaid's privacy policy governs data transmitted through their service. We do not share your data with any other third-party services.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to active account holders. The "last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy: privacy@crossmarc.com