Privacy Policy

StackPerk is operated by [LEGAL ENTITY NAME], at [REGISTERED ADDRESS]. We are the data controller for the personal data described here.

For anything in this policy, contact privacy@stackperk.app.

We collect only what the service needs. We do not buy personal data, and we do not build advertising profiles.

Where UK/EU data protection law applies, our legal bases are as follows.

• To provide the service — creating your account, signing you in, showing your claimed deals, running your membership. Basis: performance of a contract.
• To take payment — processing subscriptions and refunds, and keeping records of them. Basis: contract, and legal obligation for tax and accounting records.
• To keep the service secure and fair — preventing fraud, stopping promo-code abuse and multiple-account claiming, debugging. Basis: our legitimate interests in protecting the service and our vendor relationships.
• To communicate with you — sign-in links and essential service messages about your account or membership. Basis: contract.
• To publish reviews you choose to write. Basis: consent, which you can withdraw by deleting your review.

We do not currently send marketing emails. If we start, it will be with your consent and with a one-click unsubscribe.

We use only the cookies needed to make the site work. We do not use advertising or analytics cookies, so there is no cookie consent banner to dismiss.

If we ever add analytics, we will update this policy and ask for consent where the law requires it.

We do not sell your personal data. We share it only with service providers who process it on our instructions, and only as needed:

• Stripe — payment processing and subscription management. Stripe is an independent controller for payment data; see their privacy policy.
• Our database and hosting providers — Supabase (database) and [HOSTING PROVIDER] (application hosting and logs).
• Our email provider — [EMAIL/SMTP PROVIDER], which delivers your sign-in links.
• Google — only if you choose to sign in with Google.
• Professional advisers and authorities — where we are legally required to disclose, or to establish or defend legal claims.

Vendors whose deals you claim receive aggregate redemption numbers, not your personal details — unless a specific deal states otherwise before you claim it (for example, where a vendor must verify your eligibility directly).

Redeeming a deal takes you to the vendor’s own website, where you sign up on their terms. At that point they control the data you give them, under their own privacy policy — not this one. We have no control over, and take no responsibility for, how a vendor handles your data.

Some of our providers operate outside your country, including in the United States. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards — such as the UK Addendum, the EU Standard Contractual Clauses, or an adequacy decision. You can ask us for details.

• Account data — while your account is open, and for a short period afterwards in case you return or a dispute arises.
• Billing records — for as long as tax and accounting law requires (typically six to seven years), even after you close your account.
• Redemption records — while your account is open, as the record of what you claimed and the basis of vendor reporting.
• Reviews — until you delete them or your account.
• Partner enquiries — for as long as needed to evaluate and follow up, then deleted.
• Sign-in links and tokens — minutes to hours; they expire and are single-use.

Depending on where you live, you have some or all of the following rights over your personal data:

• Access — get a copy of the data we hold about you.
• Correction — fix anything inaccurate. You can change your name yourself from your account page.
• Deletion — ask us to erase your data. Note that we may need to keep billing records to meet legal obligations.
• Restriction and objection — ask us to pause or stop certain processing, including anything based on our legitimate interests.
• Portability — receive your data in a portable format.
• Withdraw consent — for anything we do on the basis of consent, such as your reviews.

To exercise any of these, email privacy@stackperk.app. We will respond within the time the law allows (one month under UK/EU rules). We will not charge you or treat you differently for exercising a right.

We take reasonable technical and organisational measures to protect your data: traffic is encrypted in transit, access to the production database is restricted, gated content is checked server-side on every request, and card data never touches our infrastructure.

No system is perfectly secure. If a breach affects your rights, we will notify you and the relevant authority as the law requires.

StackPerk is a business tool intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

We will update this policy as the service changes — for example if we add a new provider or a new feature that handles data differently. If a change materially affects you, we will tell you by email or a notice on the site before it takes effect. The effective date at the top shows the current version.

Privacy questions and data requests: privacy@stackperk.app. Other legal matters: legal@stackperk.app.

If you are not satisfied with our response, you can complain to your data protection authority — [SUPERVISORY AUTHORITY].

See also our Terms and Conditions.