Privacy
Privacy Policy
Last updated July 9, 2026
Welcome to the Privacy Policy for Cabana, which is made available by General Welfare Systems, Inc. (“we”, “us”, or “our”). This Privacy Policy describes how we and our affiliates collect, use, and share information about you when you use our service, “Cabana,” and related content, including our website located at https://usecabana.com/, our browser extension, our mobile applications, and any other products and services that link to this Privacy Policy (collectively, the “Services”). This Policy applies to our website visitors, users of our applications, and other individuals who interact with us.
Additionally, please review our Financial Privacy Notice, below, to learn more about our collection, use and sharing of your financial information.
- We do not sell user data to advertisers, marketers, or other third parties
- Users may request to delete their personal information at any time
- All Cabana services are opt-in
Personal Information We Collect
Information you provide to us:
- Profile information, such as your first and last name, email address, phone number, date of birth, and the account credentials that you use to register for and access and use our Services.
- Communications that we exchange with you, including when you contact us with questions, feedback, or otherwise.
- User-generated content, such as notes, prompts, documents, or other user-generated content that you upload or otherwise provide through the Services. This also includes content that you upload or link to the Services via any third-party services you choose to link to our Services.
- Marketing information such as your preferences for receiving our marketing communications and details about your engagement with them.
- Other information not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Where you provide us with the personal information of third parties (such as your friends, family, or other contacts) or use our Services while communicating with such third parties, it is your responsibility to inform them about the processing of their personal information in accordance with this Privacy Policy, and to confirm that they have given their permission.
Automatic data collection:
We and our service providers may automatically log and combine information about you, your computer or mobile device, and your interactions over time with the Services, online resources, and our communications, such as:
- Location data, including the general area from which your device accesses our Services based on information like its IP address.
- Device data, including your computer's or mobile device's operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, and general location information such as city, state, or geographic area.
- Usage data, including pages, screens and/or features you viewed, accessed and/or used, how long you spent on a page, screen and/or feature, the website you visited before browsing to the Services, navigation paths between pages or screens, information about your activity on a page, screen and/or feature, access times, duration of access, and whether you have opened or otherwise engaged with our communications, such as our marketing emails, or clicked links or files within them.
We use the following tools for automatic data collection for analytics and product improvement purposes:
- Cookies, which are text files that websites store on a visitor's device to uniquely identify the visitor's browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.
- Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
- Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
Information we obtain from other sources:
- Third-party login information. When you link, connect, or log in to our Services with a third-party service, you may direct the service to send us information controlled by that service or as authorized by you via your privacy settings on that service.
- Social media. We may maintain pages on social media platforms, such as LinkedIn and other third-party platforms. When you visit or interact with our pages on those platforms, you or the platforms may provide us with information through the platform, and we will treat such information in accordance with this Privacy Policy.
- Other sources. We may obtain personal information from other third parties. This can also include data you choose to send to the Service from your third-party services via integrations that we support.
How We Use Personal Information
We use personal information for the following purposes or as otherwise described at the time of collection:
To provide our Services.
This includes:
- Administering, hosting, and operating our Services. As described in “Personal Information We Collect”;
- Communicating with you and responding to any inquiries you may have; and
- Analyzing your use of our Services to allow us to evaluate and improve the Services.
To verify your identity. We may use your personal information to verify your identity in connection with your use of our Services, including for fraud prevention and to comply with applicable laws and regulations.
For research, development, benchmarking, and improving our Services. We may use personal information internally to analyze and improve the Services, identify trends, and operate and expand our business activities. We may also create aggregated, anonymized, or other de-identified statistics, which we may use for lawful business purposes, including for analytics, forecasting, and strategic planning. For example, we may use de-identified personal information to train and improve the AI models that power our Services.
For marketing and advertising.
We and our advertising partners may collect and use your personal information for marketing and advertising purposes, including:
- Email. We or our advertising partners may from time-to-time send you direct marketing emails as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via email. You may opt out of our marketing emails as described in the “Opt out of marketing communications” section below.
- Interest-based advertising. We engage our advertising partners, including third party advertising companies and social media companies, to display ads around the web. These companies may use cookies and similar technologies to collect information about your interaction over time across our Services, our communications, and other online services, and use that information to serve online ads that they think will interest you.
For compliance and protection. We may use personal information to comply with legal obligations, including to enforce any applicable terms and conditions, defend against legal claims or disputes, protect the security and integrity of our Services, and identify and investigate fraudulent, harmful, unauthorized, unethical or illegal activity.
How We Disclose Personal Information
We may disclose personal information to the following individuals or entities and as otherwise described in this Privacy Policy or at the time of collection:
Service providers. Companies and individuals that provide services on our behalf or help us operate the Services or our business (such as sub-servicers, hosting, fraud and security, information technology, customer support, email delivery, financial data aggregation, and analytics services). We may also disclose your personal information to third-party providers of AI technologies, who will use your personal information strictly to support our Service.
Professional advisors. Professional advisors, such as lawyers, auditors, bankers, and insurers, where necessary in the course of the professional services that they render to us.
Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, our business (including, in connection with a bankruptcy or similar proceedings).
Affiliates. We may share your personal information with our corporate affiliates for purposes consistent with this Privacy Policy.
Other third parties at your direction. We may share your personal information with third parties when you ask us to, authorize us to, or otherwise choose to use features or services that require such sharing.
Your Privacy Rights and Choices
Access or update your information. If you have registered for an account with us, you may review and update certain personal information in your account profile by logging into the account.
Opt out of marketing communications. You may opt out of marketing-related communications by following the opt-out or unsubscribe instructions in the communications you receive from us or by contacting us as provided in the “How to Contact Us” section below. You may continue to receive Services-related and other non-marketing communications.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Other Sites and Services
Our Services may contain links to websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions. This Privacy Policy does not apply to such third-party sites or services.
Security
We use reasonable organizational, technical, and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration, and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect your personal information, we cannot guarantee the security of personal information.
Retention of Personal Information
Where required under applicable laws, we retain personal information only for as long as is necessary to fulfil the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws and regulatory obligations.
To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information, the purposes for which we use personal information and whether we can achieve those purposes through other means, and the applicable legal and regulatory requirements.
Children’s Privacy
Our Services are not intended for use by children under 18 years of age. If we learn that we have collected personal information through our Services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.
Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Where we do so, we will update the date of this Privacy Policy and post it on the Services. If we make material changes to this Privacy Policy, we will let you know.
How to Contact Us
If you have any questions or concerns, you can reach us by email at privacy@usecabana.com.
Financial privacy
Financial Privacy Notice
WHAT DOES GENERAL WELFARE SYSTEMS, INC. (“GWS”) DO WITH YOUR PERSONAL INFORMATION?
- Account monitoring data (e.g., linked account activity flagged for suspicious patterns)
- Device and browser information
- Threat and alert history
- Identity verification information
- Your contact details
When you are no longer our customer, we continue to share your information as described in this notice.
| Reasons we can share your personal information | Does GWS share? | Can you limit this sharing? |
|---|---|---|
| For our everyday business purposes — such as to process your transactions, maintain your account(s), respond to court orders and legal investigations, or report to credit bureaus | Yes | No |
| For our marketing purposes — to offer our products and services to you | Yes | Yes |
| For joint marketing with other financial companies | No | We don’t share |
| For our affiliates' everyday business purposes — information about your transactions and experiences | No | We don’t share |
| For our affiliates' everyday business purposes — information about your creditworthiness | No | We don’t share |
| For our affiliates to market to you | Yes | Yes |
| For nonaffiliates to market to you | No | We don’t share |
Who we are
Who is providing this notice?
What we do
How does GWS protect my personal information?
How does GWS collect my personal information?
- Create an account
- Use our services
Why can't I limit all sharing?
- sharing for affiliates' everyday business purposes — information about your creditworthiness
- affiliates from using your information to market to you
- sharing for nonaffiliates to market to you
Definitions
Affiliates
Nonaffiliates
Joint marketing
Other important information
Nevada: If you are consumer with a Nevada mailing address, and you prefer not to receive marketing calls from us, you may be placed on our internal Do Not Call List by contacting us at privacy@usecabana.com. You may also contact the Nevada Attorney General's office: Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101; telephone number: 1-702-486-3132; email BCPINFO@ag.state.nv.us or AgInfo@ag.nv.gov.
Vermont: If you are consumer with a Vermont mailing address, we will not share information we collect about you with companies outside of GWS, unless the law allows. For example, we may share information with your consent, to service your accounts or under joint marketing agreements with other financial institutions with which we have joint marketing agreements. We will not share information about your creditworthiness within our corporate family except with your consent, but we may share information about our transactions or experiences with you within our corporate family without your consent.
California: If you are a consumer with a California mailing address, we will not share information we collect about you with companies outside of GWS, unless the law allows. For example, we may share information with your consent, to service your accounts, or to provide rewards or benefits to which you are entitled.