Privacy Policy

1. Introduction

StackSentry is an AI-powered software stack management and contract renewal tracking platform for IT teams. This Privacy Policy explains what information we collect from visitors and users of stacksentry.ai, how we use and protect it, and what rights you have over your data.

Because StackSentry handles sensitive business information — including software contracts, vendor details, and spend data — we take data handling especially seriously.

2. Information We Collect

We collect different information depending on how you interact with StackSentry.

2a. Plan Interest / Onboarding Requests

When you request Pro or Business onboarding, we collect:

• Email address
• Company name and role if you provide them

That's it. We keep onboarding requests simple and separate from the software records you enter in the product.

2b. Registered Users

When you create a StackSentry account, we collect:

• Name and business email address
• Company name and industry
• Software and SaaS subscription records — application names, vendor names, contract details
• Contract start and end dates — renewal timelines you enter or import
• Costs and pricing — subscription fees, contract values (as entered by you)
• Vendor information — vendor contacts, account managers, contract terms
• Renewal dates and alert preferences

This data is entered by you and stored to power StackSentry's core features: tracking renewals, surfacing cost optimization opportunities, and alerting you before contracts auto-renew.

2c. Automatically Collected Data

When you use the site or application, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Referring URL
• Session data — pages visited, features used, time spent
• Error logs and performance data

3. How We Use Your Information

We use your information to:

1. Operate StackSentry — store and display your software stack, contracts, and renewal dates
2. Send renewal alerts — notify you of upcoming contract renewals based on your settings
3. Improve the product — analyze usage patterns (in aggregate) to guide feature development
4. Communicate with you — send product updates, onboarding emails, and support responses
5. Prioritize onboarding — use aggregate plan-interest data to understand demand and prioritize features
6. Process payments — via Stripe for Pro tier subscriptions (see Section 5)

We do not use your software stack data for advertising. We do not sell your data to vendors, brokers, or any third parties.

4. Data Storage and Security

Your data is stored in Supabase, a hosted database platform with infrastructure located in the United States. Supabase provides:

• Encryption at rest (AES-256)
• Encryption in transit (TLS 1.2+)
• Role-based access controls

Your software stack data — contracts, costs, vendor details — is sensitive business information. We treat it accordingly. Access to your data within StackSentry is limited to your account. We do not share individual account data across customers.

5. Third-Party Services

We use the following third-party services to operate StackSentry:

A Note on Stripe

StackSentry uses Stripe to process Pro tier subscription payments. We do not store your payment card information. Credit card numbers, CVVs, and bank account details are handled entirely by Stripe and governed by their privacy policy and PCI-DSS compliance program. We receive only a payment confirmation token from Stripe — enough to know your subscription is active.

6. Your Software Data Is Yours

Everything you enter into StackSentry — your software list, contracts, vendor info, costs — belongs to you. We do not claim ownership of your data. We do not share it with vendors or third parties. We will not use it to contact your vendors on your behalf without your explicit instruction.

If you cancel your StackSentry account, we will delete your data within 30 days of your request.

7. Data Retention

• Waitlist emails — retained until the product launches and you either sign up or request removal
• Account data — retained for the duration of your active account, plus 30 days after cancellation
• Anonymized/aggregate analytics — may be retained indefinitely (this data cannot identify you)

8. Your Rights

For Everyone

• Access — Request a copy of your data
• Correction — Ask us to correct inaccurate information
• Deletion — Request full deletion of your account and data
• Export — Request a machine-readable export of your data
• Opt-out — Unsubscribe from non-essential communications at any time

California Residents (CCPA)

California residents have the right to:

• Know what personal information we collect, use, share, or sell
• Request deletion of personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising CCPA rights

EU/UK Residents (GDPR)

GDPR-protected individuals have the right to:

• Access their personal data
• Rectify inaccurate data
• Erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Lodge a complaint with the relevant supervisory authority

Our lawful basis for processing your data is contract performance (operating the service you signed up for) and legitimate interests (improving the product and managing onboarding requests).

9. Contact & Privacy Requests

Email: stacksentry@josa.digital

Alternate: john@josa.digital

Response time: Within 30 days of receipt

10. Cookies

StackSentry uses cookies for authentication (keeping you logged in), basic analytics, and session management. We do not use advertising cookies. You can manage cookie preferences through your browser.

11. Children's Privacy

StackSentry is a B2B SaaS platform intended for IT professionals and business decision-makers. We do not knowingly collect data from anyone under 18. If we learn we have done so, we will delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy periodically. Updates take effect when posted. We'll notify registered users of material changes via email. The "Last Updated" date at the top reflects the most recent revision.