Leashd reads your transactions so it can match them to what your agents say they spent. It never moves money, never sees your bank password, and never sells your data.
EFFECTIVE SEPTEMBER 17, 2026
Leashd is a product of Stoke Strategies LLC, Fort Lauderdale, Florida. For anything about privacy or your data, write to zac@stoke-strategies.com.
We never receive or store your online banking username or password, full account or routing numbers, or card numbers. There are no advertising trackers or third-party analytics on this site. The only outside resources a page loads are typefaces from Google Fonts and, when you connect a bank, Plaid's connection window.
Leashd uses Plaid Inc. to connect your bank and card accounts. When you connect an account you sign in inside Plaid's own window, so your credentials go to Plaid and your bank, never to us. Plaid then gives Leashd read-only access to your transaction data. By connecting an account you agree that Plaid may collect and process your information under the Plaid End User Privacy Policy.
The access token Plaid gives us is encrypted before it is stored and is never sent to your browser. Leashd only asks Plaid for transactions. It cannot initiate payments or transfers.
One thing: run the service. We match memos to transactions, grade them against the rules you set, show you the ledger and charts, and send you the digest. We do not sell your data, rent it, use it for advertising, or use it to train models.
Only the companies we need to run Leashd, each under its own security and privacy commitments:
We will disclose data if the law requires it, and we will tell you when we are allowed to.
All traffic is encrypted in transit. The database is encrypted at rest, bank access tokens get a second layer of encryption, and no table is reachable from a browser. Two-factor sign-in is available and enforced on the server once you turn it on. Agent keys are stored only as hashes and can post memos but can never read your bank ledger.
Disconnect a bank and we tell Plaid to drop the connection and destroy our copy of the access token right away. Transactions already imported stay in your ledger until you delete them or close your account.
Ask us to delete your account at zac@stoke-strategies.com and everything tied to it is removed from production within 30 days. You can also ask for a copy of your data, or export it yourself as CSV from the dashboard at any time.
Leashd is a business tool for adults and is not directed at children. The service is operated from the United States. If this policy changes in a way that matters, we will email account holders before the change takes effect and update the date at the top.