1. Introduction
This Privacy Policy describes how Stacked (stacked.help) collects, uses, and protects your personal information when you use our managed account provisioning service. By using Stacked, you agree to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account registration details (name, email address)
- Payment information (processed securely via Stripe; we do not store full card numbers)
- Business information provided for account provisioning (company name, domain, preferences)
- Communication content when you contact support
2.2 Information Collected Automatically
- IP address and approximate location
- Browser type, device type, and operating system
- Pages visited and interactions with the site
- Referring URL and session duration
2.3 Information from Provisioning
- Third-party account credentials (temporarily held during provisioning, delivered to your encrypted vault, then purged from our systems)
- Session recordings of human agent provisioning activity (retained for 90 days for quality assurance)
3. How We Use Your Information
We use your information to:
- Provision and deliver third-party accounts as ordered
- Process payments and manage your subscription
- Communicate with you about orders, updates, and support
- Improve our service quality and reliability
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Credential Handling
Credentials for provisioned accounts are handled with strict security protocols:
- Credentials are encrypted in transit and at rest
- Delivered to your personal encrypted vault
- All agent access to credentials is revoked upon vault delivery
- Credentials are purged from our provisioning systems within 24 hours of delivery
5. Data Sharing
We do not sell your personal information. We share data only with:
- Stripe — for payment processing
- Supabase — for database and authentication infrastructure
- Human Agents — receive only the information necessary to provision your accounts (name, email, business details). Agents are bound by confidentiality agreements.
- Legal authorities — when required by law, court order, or to protect our rights
6. Data Retention
- Account data: retained while your account is active, deleted within 30 days of account deletion request
- Order history: retained for 2 years for business and tax purposes
- Provisioning session recordings: retained for 90 days, then permanently deleted
- Credentials: purged within 24 hours of vault delivery
- Analytics data: retained in aggregate (non-identifiable) form indefinitely
7. Your Rights
You have the right to:
- Access and download your personal data
- Correct inaccurate information
- Request deletion of your account and personal data
- Opt out of non-essential communications
- Object to processing of your data for marketing purposes
To exercise any of these rights, contact privacy@stacked.help.
8. Cookies
Stacked uses essential cookies for authentication and session management. We also use analytics cookies to understand how visitors use our site. You can disable non-essential cookies in your browser settings.
9. Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security of your data.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of Stacked after changes constitutes acceptance of the updated policy.
11. Contact
Questions about this Privacy Policy: privacy@stacked.help
See also our Terms of Service.