PrivacyPolicy.

This Privacy Policy explains how Stackovation Private Limited, a private limited company incorporated in India (CIN U62011TZ2026PTC040804), with its registered office at #13, R.S. Towers, Balasubrayalu Street, Near Aanoor Theatre, Erode – 638 001, Tamil Nadu, India (“Stackovation”, “we”, “us”) collects, uses and protects personal data when you visit stackovation.com, contact us, or use our client portal.

We are the data fiduciary under India’s Digital Personal Data Protection Act, 2023, and the controller under the GDPR and UK GDPR, for the data described here. When we build or host software for a client, that client decides how their own users’ data is used, and we process it only on the client’s instructions.

Apart from the payout details approved partners give us (PAN and bank or UPI details), we do not ask for sensitive data such as health information, bank account numbers or government ID numbers. We never ask for Aadhaar. Please do not include such data in messages or project briefs.

• To create and secure your account and let you sign in.
• To scope, design, build, test and deliver your project, including live previews and feedback.
• To talk to you about your project, support requests and enquiries.
• To send our newsletter, only if you sign up for it. You can ask us to remove you at any time by replying to any newsletter or through our contact form.
• To prepare quotes, invoices and payment schedules, and to keep financial records.
• To run the partner program: to contact and verify people who join the waiting list, and to pay partners their commission and deduct tax where the law requires.
• To understand how the website is used and improve it, if you have allowed analytics cookies.
• To protect our services, prevent misuse and meet our legal obligations.

We do not sell personal data, and we do not use it for advertising.

Under the DPDP Act, we process personal data with your consent or for legitimate uses the Act permits, such as providing a service you asked for. Where the GDPR or UK GDPR applies, we rely on:

• Contract — to provide the account, portal and services you request.
• Legitimate interests — to run, secure and improve our business, balanced against your rights.
• Consent — for analytics cookies and anywhere else we ask for it. You can withdraw consent at any time.
• Legal obligation — to keep tax, accounting and company records.

We share personal data only with providers that help us run Stackovation, under terms that require them to protect it:

• Supabase — database and authentication for the client portal.
• Our hosting provider — to serve the website and portal.
• Google — Google Analytics, only with your consent, and Google sign-in if you choose it.
• GitHub — if you choose to sign in with GitHub.
• Payment providers — to process payments you make to us.
• Accountants, auditors, lawyers and government authorities — where needed for our business or required by law.

If Stackovation is involved in a merger or acquisition, personal data may transfer as part of that transaction, and this policy will continue to apply to it.

We are based in India, and our providers may store or process data in other countries, including the United States and the European Union. When personal data leaves the EEA or UK, we rely on recognised safeguards such as the European Commission’s Standard Contractual Clauses. We do not transfer personal data to any country the Government of India has restricted.

• Account and project data — while your account is active, and up to 3 years after your last project ends, so we can support you and resolve any disputes.
• Invoices and financial records, including partner payout and tax records — for as long as Indian tax and company law requires (currently up to 8 years).
• Partner waiting list requests that are declined — up to 24 months.
• Contact form messages that do not become a project — up to 24 months.
• Newsletter sign-ups — until you ask us to remove you.
• Analytics data — according to our Google Analytics retention setting, at most 14 months.
• Server and security logs — for a short period, for security and troubleshooting.

When data is no longer needed, we delete or anonymise it.

Depending on where you live, you have the right to:

• Get a summary of the personal data we hold about you and how we use it.
• Correct, complete or update inaccurate data.
• Have your data erased, except records we must keep by law. To delete your account, send us a request and we will confirm once it is done.
• Withdraw consent at any time, including for analytics cookies in cookie settings.
• Nominate someone to exercise your rights if you die or become unable to (DPDP Act).
• Object to or restrict some processing, and receive your data in a portable format (GDPR and UK GDPR).
• Complain to a regulator — the Data Protection Board of India, or your local data protection authority in the EEA or UK.

To use any of these rights, use our contact form or email hello@stackovation.com. We may need to verify your identity first, and we aim to respond within 30 days.

Questions and complaints about how we handle personal data are handled by our Grievance Officer. Reach them through our contact form by choosing “Privacy or data request”.

We acknowledge grievances promptly and aim to resolve them within 30 days. If you are not satisfied with our response, you can take it to the Data Protection Board of India.

We use encryption in transit and at rest, row-level access rules in our database, and restricted staff access. Read more on our Security page. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as the law requires.

We use strictly necessary cookies to keep you signed in, and analytics cookies only if you allow them. See our Cookie Policy for details and to change your choice.

Our services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has shared personal data with us, contact us and we will delete it.

We may update this policy as our services or the law change. The latest version is always on this page with its date, and we will notify portal users of significant changes in the portal.

For anything about this policy, use our contact form or email hello@stackovation.com.