Privacy Policy

Last Updated: August 10, 2026

Habitual Money, Inc. DBA Peach ("Peach," "we," "our," or "us") respects your privacy and is committed to protecting the information entrusted to us.

This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, use the Peach platform, communicate with us, or otherwise interact with our products and services (collectively, the "Services").

This Privacy Policy also describes your rights regarding your information and the choices available to you.

If your institution has entered into a Master Services Agreement or other written agreement with Peach, that agreement may contain additional privacy and security obligations applicable to your organization's use of the Services. In the event of a conflict, the Customer Agreement governs with respect to the Services provided under that agreement.

I. Information We Collect

The information we collect depends on how you interact with Peach.

1.A Information You Provide

We may collect information that you voluntarily provide, including:

• your name;
• email address;
• job title;
• institution or organization;
• telephone number;
• account credentials;
• communications with Peach;
• support requests;
• demo requests;
• webinar registrations;
• survey responses;
• feedback; and
• any other information you choose to provide.

1.B Customer Content

Customers and Authorized Users may upload information into the Services, including:

• PDF documents;
• Microsoft Word documents;
• Microsoft Excel spreadsheets;
• Microsoft PowerPoint presentations;
• website URLs;
• institutional policies;
• procedures;
• knowledge base materials;
• communications;
• prompts submitted to AI features; and
• other documents or information selected by Customer.

Customer determines what Customer Content is uploaded into the Services.

1.C Information Automatically Collected

When you access the Services, we may automatically collect technical information, including:

• IP address;
• browser type;
• operating system;
• device identifiers;
• language preferences;
• referring website;
• pages visited;
• features used;
• dates and times of access;
• session duration;
• diagnostic information;
• log files; and
• approximate geographic location derived from IP address.

1.D Cookies and Similar Technologies

We use cookies and similar technologies to:

• remember preferences;
• authenticate users;
• maintain secure sessions;
• understand website usage;
• improve performance;
• analyze trends; and
• support marketing activities.

You may configure your browser to reject certain cookies, although doing so may affect the functionality of portions of the Services.

II. How We Use Information

We use the information we collect for the following purposes:

To Provide the Services

We use information to:

• provide, operate, maintain, and improve the Services;
• authenticate users and administer accounts;
• provide AI-powered features requested by Customers;
• retrieve, search, summarize, and analyze Customer Content;
• authenticate users and administer accounts;
• provide customer support;
• respond to inquiries and technical issues; and
• fulfill our contractual obligations.

To Improve the Services

We use information to:

• improve the functionality, usability, and performance of the Services;
• diagnose bugs and technical issues;
• monitor system reliability;
• develop new features;
• improve search, retrieval, and workflow performance; and
• generate aggregated and de-identified analytics regarding use of the Services.

Unless otherwise expressly stated in a Customer Agreement, Peach does not use Customer Content to train publicly available artificial intelligence foundation models.

To Protect the Services

We use information to:

• detect and investigate security incidents;
• prevent fraud, abuse, unauthorized access, and other harmful activity;
• enforce our Terms of Use and Customer Agreements;
• protect the rights, property, and safety of Peach, our Customers, and others; and
• comply with applicable legal obligations.

To Communicate With You

We may use information to:

• send service-related notices;
• provide onboarding assistance;
• respond to support requests;
• notify Customers of important updates;
• communicate regarding security issues;
• send invoices and administrative communications; and
• provide information regarding our products or services where permitted by applicable law.

You may opt out of marketing communications at any time by following the unsubscribe instructions included in such communications. You cannot opt out of transactional or service-related communications that are necessary to administer your account or provide the Services.

Legal Bases for Processing (Where Applicable)

Depending on your jurisdiction, we process personal information based on one or more of the following legal bases:

• performance of a contract;
• compliance with legal obligations;
• our legitimate business interests;
• your consent, where required; or
• another lawful basis permitted under applicable law.

III. Artificial Intelligence Processing

Peach uses artificial intelligence technologies to assist Customers with drafting communications, searching institutional knowledge, summarizing information, generating suggested responses, and supporting other workflows.
‍
When an Authorized User submits a prompt or requests AI-generated assistance, Peach may process Customer Content and user inputs through third-party artificial intelligence providers acting on Peach's behalf for the purpose of providing the requested functionality.

Peach does not use Customer Content to train publicly available artificial intelligence foundation models.
‍
Customer remains responsible for reviewing and approving all AI-generated content before relying upon it or communicating it to any third party.
‍
AI-generated content may contain inaccuracies, omissions, or outdated information. Customers should independently verify important information before acting upon it.

IV. How We Share Information

We do not sell personal information.
‍
We may share information in the following circumstances:
‍
Service Providers
‍
We may share information with vendors and service providers that assist us in operating the Services, including providers of:

• cloud hosting;
• authentication;
• artificial intelligence services;
• customer support;
• analytics;
• communications;
• payment processing;
• security monitoring; and
• other operational services.

These providers are authorized to access information only as necessary to perform services on our behalf and are contractually obligated to protect such information.

‍Customer Organizations

‍If you access the Services as an Authorized User of an institution, your institution may access information associated with your account, including your account information, activity within the Services, and Customer Content, consistent with the institution's administrative controls.

‍Business Transfers

‍If Peach is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or substantially all of its assets, information may be transferred as part of that transaction, subject to applicable confidentiality obligations.

‍Legal Requirements

‍We may disclose information where we reasonably believe disclosure is necessary to:

• comply with applicable law;
• respond to lawful legal process;
• enforce our agreements;
• protect our rights or property;
• investigate fraud or security incidents; or
• protect the safety of individuals.

With Your Direction
‍
‍We may disclose information where you instruct us to do so or otherwise provide your consent.

V. Data Retention

We retain personal information and Customer Content only for as long as reasonably necessary to:

• provide the Services;
• fulfill contractual obligations;
• comply with applicable legal requirements;
• resolve disputes;
• enforce our agreements; or
• maintain appropriate business records.

The specific retention period for Customer Content is generally governed by the applicable Customer Agreement or Customer's instructions.
‍
Following termination of a Customer's subscription, Customer Content may be deleted in accordance with the applicable Customer Agreement, our standard retention practices, or Customer's written instructions, unless we are legally required to retain it for a longer period.
‍
Customer acknowledges that copies of Customer Content may remain temporarily within encrypted system backups maintained for disaster recovery and business continuity purposes. Such backup copies are maintained in accordance with Peach's standard backup retention practices, are not used for any active business purpose except disaster recovery, and are securely deleted or overwritten in the ordinary course of our backup lifecycle.
‍
Aggregated and de-identified information that no longer identifies a Customer or individual may be retained for legitimate business purposes.

VI. Data Security

Peach maintains administrative, technical, and organizational safeguards designed to protect personal information and Customer Content against unauthorized access, use, disclosure, alteration, or destruction.
‍
Our security measures may include, as appropriate:

• encryption of data in transit using industry-standard protocols;
• encryption of data at rest where appropriate;
• authentication and access controls;
• role-based permissions;
• logging and monitoring of system activity;
• secure software development practices;
• vulnerability management;
• regular security updates; and
• employee confidentiality and security training.

Because no method of electronic storage or transmission over the Internet is completely secure, Peach cannot guarantee the absolute security of any information transmitted to or stored within the Services.
‍
Customers are responsible for maintaining the security of their own systems, user credentials, and administrative controls.

VII. International Data Transfers

Peach is headquartered in the United States.
‍
If you access the Services from outside the United States, your information may be transferred to, processed, and stored in the United States or in other countries where Peach or its service providers operate.
‍
Those countries may have data protection laws that differ from those in your jurisdiction.
‍
Where required by applicable law, Peach will implement appropriate safeguards for international transfers of personal information.

VIII. Your Choices and Rights

Depending on your jurisdiction and applicable law, you may have certain rights regarding your personal information.
‍
These rights may include the ability to:

• access your personal information;
• correct inaccurate information;
• request deletion of personal information;
• request a copy of certain personal information;
• object to or restrict certain processing activities;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an applicable supervisory authority.

Many Authorized Users access Peach through an institutional account administered by their college or university.
‍
In those situations, requests relating to Customer Content, institutional records, or account administration should generally be directed to your institution, which acts as the controller or owner of that information. Peach will cooperate with Customer, where appropriate, in responding to such requests.
‍
To exercise any applicable privacy rights directly with Peach, please contact us using the information provided at the end of this Privacy Policy.
‍
We may need to verify your identity before responding to certain requests.

IX. FERPA and Educational Records

Peach provides services to educational institutions that may upload information protected by the Family Educational Rights and Privacy Act ("FERPA").
‍
When processing education records on behalf of an educational institution, Peach acts solely as a service provider to that institution in accordance with applicable agreements and applicable law.
‍
Peach does not determine whether information constitutes an education record under FERPA, nor does Peach independently determine whether an institution may disclose particular information.
‍
Educational institutions remain responsible for:

• determining what information may be uploaded to the Services;
• complying with FERPA and other applicable privacy laws;
• providing any required notices;
• obtaining any required consents; and
• responding to requests from students or other individuals regarding their education records.

Nothing in this Privacy Policy modifies or limits the obligations contained in any applicable Customer Agreement relating to educational records or privacy.

X. Children’s Privacy

The Services are designed for use by colleges, universities, and other organizations and are not directed to children under the age of 13.
‍
Peach does not knowingly collect personal information directly from children under the age of 13 through its website or Services.
‍
To the extent Customer uploads information relating to students who may be minors, Peach processes such information solely on behalf of the Customer in accordance with the applicable Customer Agreement and applicable law.
‍
If we become aware that we have collected personal information directly from a child in violation of applicable law, we will take reasonable steps to delete such information.

XI. Third-Party Websites and Services

The Services may contain links to third-party websites or permit integrations with third-party products and services.
‍
Peach does not control and is not responsible for the privacy practices, content, security, or policies of any third-party website or service.
‍
Your interactions with third-party services are governed by the terms and privacy policies of those third parties.
‍
We encourage you to review the privacy policies of any third-party services you choose to use.

XII. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, business practices, legal requirements, or technology.
‍
If we make material changes, we will update the "Last Updated" date at the top of this Privacy Policy and may provide additional notice through the Services or by other reasonable means where appropriate.
‍
Your continued use of the Services after the effective date of the updated Privacy Policy constitutes your acknowledgment of the revised Privacy Policy.

XIII. Contact Us

If you have questions regarding this Privacy Policy or our privacy practices, please contact us at:
‍
Habitual Money, Inc.
2614 Dawning Day Drive
Dacula, GA 30019
Email: support@joinpeach.co