Privacy Policy

STACKSONA PRIVACY POLICY
Last Updated: October 21, 2026 · Version 2026-10-21

This Privacy Policy describes how Stacksona LLC (“Stacksona,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with Stacksona Connect, Stacksona Gate, and our related websites, applications, APIs, and services (collectively, the “Services”).

This Privacy Policy is incorporated into and forms part of the Stacksona Terms of Use. If you do not agree to this Privacy Policy, do not access or use the Services.

1. SCOPE
1.1 This Privacy Policy applies to:
(a) visitors to Stacksona websites;
(b) individuals who create or administer accounts;
(c) authorized users accessing the Services on behalf of a customer organization (“Customer”); and
(d) business contacts and prospective customers; and
(e) people who verify their phone numbers or authorize calls or messages through Stacksona Connect.

1.2 Customer Data. The Services enable Customers to submit, store, transmit, and otherwise process data within workspaces, including prompts, inputs, files, content, configurations, policies, and outputs (collectively, “Customer Data”). Customer Data is processed on Customer instruction under the applicable agreement(s) between Stacksona and the Customer (including any Data Processing Addendum, if applicable), subject to processing and disclosures required or otherwise permitted by applicable law as described in this Policy.

2. ROLES (CONTROLLER / PROCESSOR)
2.1 Customer Data. For Customer Data, the Customer is the controller (or “business”) and Stacksona acts solely as a processor/service provider to provide the Services to the Customer.

2.2 Account and Business Data. For information Stacksona collects and processes for account creation, billing, marketing, security, and service operations (“Service Data”), Stacksona acts as the controller.

3. INFORMATION WE COLLECT
3.1 Service Data. Stacksona may collect:
(a) Account and Contact Information: names, email addresses, phone numbers, organization name, job title, and authentication factors;
(b) Billing and Transaction Information: subscription plan, invoices, payment status, and limited payment instrument metadata (payment processing is typically performed by third-party processors);
(c) Technical and Usage Information: IP address, device identifiers, browser type, operating system, approximate location derived from IP, timestamps, and interaction logs;
(d) Security and Audit Metadata: authentication events, access logs, approvals, policy gate events, administrative actions, and workspace event metadata;
(e) Support and Communications: support tickets, correspondence, and feedback.

3.2 Cookies and Similar Technologies. Stacksona may use cookies and similar technologies to operate, secure, and improve its websites and Services, and to remember preferences. You can control cookies through browser settings, subject to limitations.

3.3 Customer Data. Stacksona processes Customer Data to provide and secure the Services and as otherwise instructed by the Customer under the applicable agreement(s), subject to processing and disclosures required or otherwise permitted by applicable law as described in this Policy.

4. HOW WE USE INFORMATION
4.1 We use Service Data to:
(a) provide, operate, maintain, and secure the Services;
(b) authenticate users (including multi-factor authentication where enabled);
(c) administer accounts, permissions, and access controls;
(d) enforce governance controls (including approvals, policy gates, audit trails, and rollback mechanisms);
(e) monitor performance, detect fraud, prevent abuse, and troubleshoot issues;
(f) communicate with you regarding the Services, updates, and support;
(g) comply with applicable law and enforce our legal rights.

4.2 We do not sell personal information.

5. HOW WE DISCLOSE INFORMATION
5.1 Subprocessors and Service Providers. We may disclose Service Data to vendors and service providers (“Subprocessors”) that support the Services (e.g., hosting, logging, analytics, security, customer support, and payment processing), subject to contractual obligations consistent with this Privacy Policy and applicable law.

5.2 Legal and Safety. We may preserve relevant records, report suspected unlawful activity to competent governmental, regulatory, or law enforcement authorities, and disclose relevant information where required by valid legal process or otherwise permitted by applicable law. Such disclosures may include disclosures permitted by law to protect the rights, property, or safety of Stacksona, our Customers, users, or the public. We review the applicable legal basis and scope before disclosing legally protected communications or records. A violation of our Terms or Acceptable Use Policy does not, by itself, authorize disclosure of protected information, and acceptance of our policies is not a blanket authorization for unrestricted disclosure.

5.3 Business Transfers. We may disclose information in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

6. SECURITY
6.1 Stacksona maintains administrative, technical, and organizational safeguards designed to protect information, including measures such as:
(a) encryption in transit;
(b) encryption at rest;
(c) workspace isolation mechanisms;
(d) centralized logging and audit trail capabilities; and
(e) multi-factor authentication support.

6.2 Assurance. Stacksona may provide reasonable security documentation and respond to due diligence questionnaires upon request. Stacksona does not represent that it has obtained any specific certification unless expressly agreed in writing.

6.3 No system is completely secure. You are responsible for maintaining the confidentiality of your credentials and for appropriate security controls on your side.

7. DATA RETENTION
7.1 Stacksona retains Service Data as needed to provide the Services, meet legal and accounting obligations, resolve disputes, enforce agreements, and maintain security.

7.2 Customer Data retention is governed by Customer configuration and the applicable agreement(s).

8. INTERNATIONAL TRANSFERS
Information may be processed in the United States and other jurisdictions where Stacksona or its service providers operate. Where required, Stacksona will implement appropriate safeguards for such transfers.

9. YOUR RIGHTS
9.1 Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of personal information.

9.2 Requests regarding Customer Data must be directed to the applicable Customer (your employer or organization).

10. CHILDREN
The Services are not directed to individuals under eighteen (18), and Stacksona does not knowingly collect personal information from children.

11. SMS, VOICE, AND COMMUNICATIONS PRIVACY

11.1 Communication choices. Where Stacksona Connect messaging and calling features are available, they are designed for individualized, permission-based communications between an AI agent and an authorized recipient. A recipient must verify control of their phone number and separately authorize the specific agent to send operational texts or make automated or AI-assisted voice calls. Verification alone does not authorize ongoing messages or calls. Consent to communications is optional and is not a condition of purchasing unrelated services.
11.2 Communications information. To operate these features, we may process phone numbers, verification and consent records (including timestamps, consent versions and the source of permission), agent and account associations, channel preferences, opt-outs, suppression records, messages and requested links, call and voicemail information, message-delivery status, call duration, routing information, and related security and audit events. Audio recordings or transcripts are processed only if the relevant capability is enabled and permitted by applicable law. The information processed depends on which features are used.
11.3 Limited sharing of mobile data. We do not sell, rent, or share mobile phone numbers, SMS opt-in information, or SMS consent records with third parties or affiliates for their own marketing or promotional purposes. We may disclose the minimum information necessary to telecommunications carriers, communications providers, hosting and security vendors acting on our behalf to deliver and protect the requested service, or where required by applicable law. A recipient's messaging consent is not authorization for unrelated marketing by Stacksona, its customers, or others.
11.4 Control and revocation. Recipients may change their channel permissions through available settings or revoke SMS permission by replying STOP to a program message. We honor other legally effective revocation requests as required by law. We may retain a limited suppression record so we do not contact an opted-out number again without renewed permission. For privacy or communications requests, email [email protected].
11.5 Security and responsible use. Our communications program is designed to use recipient verification, scoped consent, access controls, abuse and fraud monitoring, rate limiting, delivery restrictions, and audit records to help prevent unauthorized contact. Telecommunications networks and providers are outside our direct control, and no transmission method is perfectly secure.
11.6 Calls, AI assistance, and recording. Calls may be answered or conducted with AI assistance or an automated voice where authorized. Call-related disclosures, recording, and transcription are subject to applicable consent and notice requirements. We do not represent that all telephone-network segments provide end-to-end encryption.
11.7 Retention and legal requests. Communications and consent records are retained as needed for service delivery, security, dispute resolution, compliance, and applicable legal obligations, subject to available controls and applicable agreements. We review requests for disclosure and disclose information when legally required or otherwise permitted as described in Section 5.

12. CHANGES
We may update this Privacy Policy from time to time. Changes are effective upon posting, unless otherwise stated. Your continued use of the Services after changes become effective constitutes acceptance.

13. CONTACT
Privacy inquiries: [email protected] (or such other contact method designated by Stacksona from time to time).