Legal

Privacy Policy

Last updated: July 5, 2026

.stack (“we”, “us”) operates the platform at dotstack.io. This policy explains what personal data we collect, why we collect it, and the choices you have. We keep it short and in plain language.

What we collect

Account information. Name, work email, password (stored hashed), workspace membership and profile details you provide when you sign up or are invited.
Workspace data. Business content you create or connect in .stack, such as projects, CRM records, messages, files and settings.
Usage data. How you use the platform (pages viewed, actions taken, errors) to operate, secure and improve the service.
Technical data. IP address, browser type, device information and standard server logs.

How we use it

To provide, maintain and secure your account and workspace.
To respond to support requests and communicate about the service.
To process billing and fulfil our contract with you.
To improve reliability, fix bugs and develop new features.

We do not sell your personal data.

AI features

Some .stack features use AI to draft content, summarise information or assist with tasks. When you use those features, relevant workspace content may be sent to our AI providers to generate a response. We use this data only to deliver the feature you requested, not to train public models on your private workspace data unless you explicitly agree otherwise.

Where your data lives

Account and workspace data are stored in managed cloud infrastructure, including a Postgres database (Neon) and hosting on Vercel. Email and notifications may be sent through Resend. Each provider processes data on our behalf under their own data-processing terms.

Cookies

We use essential cookies to keep you signed in and remember basic preferences. If we use analytics or marketing cookies on public pages, we will ask for consent where required by law.

How long we keep it

We keep account and workspace data for as long as your account is active and as needed to provide the service, comply with law and resolve disputes. You can ask us to delete your data when you close your account, subject to legal retention requirements.

Your rights

If you are in the EU/EEA or UK, you have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing under GDPR. To exercise any of these rights, email us. We respond within a few business days.

Contact

Questions about this policy or your data: hello@dotstack.io.