unstack/pro
Back to home

Privacy Policy

Last updated: July 6, 2026

This Privacy Policy explains what information Unstack Pro (the "Service") collects, how it is used, and the third parties that process it on our behalf. By using the Service you agree to the practices described here.

1. Information we collect

We collect the following categories of data:

  • Account information — the email address and name you provide when registering, and organization details you create (organization name, teams, roles, member invitations).
  • Authentication data — hashed passwords, passkey credentials, two-factor settings, and backup codes. We never store passwords in plain text.
  • Session and device metadata — session tokens, IP address, and user-agent (browser/device) details used to keep you signed in and to secure your account.
  • Audit logs — records of security-relevant account and organization events, retained for security and troubleshooting.
  • Billing information — subscription and seat data. Payment card details are handled by our payment provider and are not stored by us.

2. How we use your information

We use this data to provide and secure the Service: to authenticate you, operate your organizations and billing, send transactional emails (verification, one-time passcodes, invitations, account notices), detect and prevent abuse, and comply with legal obligations.

3. Service providers (processors)

We share data with the following processors strictly to operate the Service. Each is bound to handle it on our behalf:

  • Convex — application database and backend where your account, organization, and audit data are stored.
  • Resend — delivery of transactional email (verification codes, invitations, notices).
  • Autumn — subscription and per-seat billing management.
  • Polar — merchant of record and payment processing at checkout.
  • Sentry — error and performance monitoring (may include limited request and device metadata).
  • Vercel — application hosting and infrastructure.

4. Data retention

We retain your account and organization data for as long as your account is active. Audit logs and session records are retained for a limited period for security purposes. When you delete your account (see below) we remove your personal data, subject to any retention required by law or by our providers.

5. Deleting your account

You can delete your account at any time from within the app's account settings. Deleting your account removes your personal information from the Service. Some records may persist briefly in backups or with processors before being purged.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing (for example under GDPR/UK-GDPR or the CCPA). To exercise these rights, contact us at support@example.com.

7. Security

We use industry-standard measures to protect your data, including encrypted transport, hashed credentials, and support for passkeys and two-factor authentication. No method of transmission or storage is completely secure, but we work to protect your information.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and communicate material changes where appropriate.

9. Contact

Questions about this Privacy Policy or your data? Contact us at support@example.com. See also our Terms of Service.