Privacy Policy

Overview

StackBE ("we," "us," or "our") operates the stackbe.io website and the StackBE platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy. We collect only the data necessary to provide the Service and never sell your personal information.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Organization name (if applicable)

Customer Data

When you use StackBE to manage your application's customers, we store data about your customers on your behalf, including:

• Customer email addresses
• Customer names
• Subscription status and plan information
• Usage metrics you configure
• Organization membership (if using B2B features)

You are the data controller for your customer data. We process it on your behalf as a data processor.

Payment Information

We do not collect or store credit card numbers, bank account details, or other payment instrument data. All payment processing is handled by Stripe. We store only Stripe customer and subscription identifiers to link billing records to your account.

Usage Data

We automatically collect certain information when you use the Service:

• API request logs (endpoint, timestamp, response status)
• IP addresses
• Browser type and version (for dashboard access)
• Pages visited on our marketing site

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and manage subscriptions
• Send authentication emails (magic links)
• Send transactional emails (subscription confirmations, payment receipts, dunning notices)
• Respond to support requests
• Monitor and prevent fraud or abuse
• Generate aggregate analytics (not personally identifiable)

We do not use your information for advertising or sell it to third parties.

Data Sharing

We share data only with service providers necessary to operate the Service:

• Stripe — Payment processing. Stripe receives payment and customer information to process transactions. Stripe Privacy Policy
• Resend — Email delivery. Resend receives email addresses to deliver transactional emails (magic links, notifications). Resend Privacy Policy
• Render — Infrastructure hosting. Our API and database are hosted on Render. Render Privacy Policy
• Vercel — Dashboard hosting. Vercel Privacy Policy
• Cloudflare — Marketing site hosting and CDN. Cloudflare Privacy Policy

We do not sell, rent, or trade your personal information to any third parties.

Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data encrypted in transit (TLS 1.2+)
• Database encryption at rest (AES-256)
• API keys hashed before storage
• Magic link tokens are single-use and time-limited
• Regular security updates and dependency scanning

For more details, see our Security page.

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account:

• Account data is deleted within 30 days
• Customer data you stored through StackBE is deleted within 30 days
• Backups containing your data are overwritten within 90 days
• Aggregate, anonymized analytics data may be retained indefinitely

Your Rights

You have the right to:

• Access — Request a copy of the data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your data
• Export — Request your data in a portable format
• Objection — Object to certain processing of your data

To exercise these rights, contact us through our contact page.

Cookies

Our marketing site (stackbe.io) uses minimal cookies:

• Essential cookies — Required for the site to function (session management)
• Analytics — We may use privacy-respecting analytics to understand site usage. No personal data is shared with advertisers.

The StackBE API does not use cookies. Authentication is handled via API keys and bearer tokens.

Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page. For significant changes, we will notify you via email or a prominent notice on the Service.

Contact Us

If you have questions about this Privacy Policy, please reach out through our contact page.