Privacy Policy

Introduction

Welcome to StackOrbit. This Privacy Policy explains how StackOrbit, Inc. and our subsidiaries and affiliates (collectively, "StackOrbit," "we," "our," or "us") collect, use, disclose, and protect your personal information when you interact with our websites, products, services, and other offerings.

We are committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy applies to personal information collected and processed by StackOrbit when acting as a data controller or business under applicable privacy laws, including the European Union's General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA).

By accessing or using our services, you acknowledge that you have read and understood this Privacy Policy. We encourage you to read this document in full to understand how we handle your personal information and your rights regarding that information.

Scope of This Policy

This Privacy Policy applies to personal information collected when you:

• Visit, interact with, or use any of our websites, including stackorbit.ai, social media pages, mobile applications, and online advertisements or marketing communications that link to this Policy (collectively, our "Sites");
• Register for an account, subscribe to our services, or use our cloud management platform (including StackBill, StackWatch, StackObject, StackVault, and related products);
• Attend our events, webinars, or conferences, or interact with our sales, marketing, or support teams;
• Communicate with us via email, phone, chat, or other channels.

This Privacy Policy does not apply to:

• Personal information submitted by our customers for processing through our platform ("Customer Data"), which is governed by our customer agreements and the customer's own privacy practices;
• Job applicants and recruiting-related information, which is subject to our separate Job Applicant Privacy Notice;
• Third-party websites, products, or services that link to or from our Sites but are operated by other companies.

Information We Collect

We collect personal information from various sources depending on how you interact with us:

Information You Provide Directly

We collect information you voluntarily provide to us, including:

• Account Information: Name, email address, phone number, company name, job title, password, and other registration details;
• Billing Information: Payment method details, billing address, and transaction history;
• Communications: Content of emails, chat messages, support tickets, survey responses, and other correspondence;
• Event Information: Registration details for webinars, conferences, and other events;
• Profile Information: Preferences, interests, and other information you choose to share.

Information Collected Automatically

When you use our Sites or services, we automatically collect certain technical and usage information:

• Device Information: IP address, browser type, operating system, device identifiers, and hardware attributes;
• Usage Information: Pages visited, links clicked, features used, time spent, and navigation patterns;
• Location Information: General geographic location inferred from your IP address;
• Log Data: Server logs, error reports, and diagnostic information.

Information from Third-Party Sources

We may receive information about you from third parties, including:

• Business partners and resellers;
• Social media platforms (when you interact with our content or connect your account);
• Marketing and data enrichment providers;
• Publicly available sources.

How We Use Your Information

We use the information we collect for the following purposes:

• Providing Services: To create and manage your account, deliver our products and services, process transactions, and provide customer support;
• Improving Our Offerings: To analyze usage patterns, conduct research, develop new features, and enhance the quality and security of our services;
• Communications: To send you service-related notifications, respond to inquiries, and provide updates about your account or our services;
• Marketing: To send promotional communications about our products, services, events, and offers (subject to your preferences and applicable law);
• Personalization: To tailor content, recommendations, and advertising to your interests;
• Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities;
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests;
• Business Operations: To manage our business, including accounting, auditing, and internal administration.

Legal Bases for Processing (EEA/UK)

If you are located in the European Economic Area or United Kingdom, we rely on the following legal bases:

• Contract: Processing necessary to perform our contract with you or take steps at your request before entering a contract;
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, marketing, and security;
• Consent: Where you have given explicit consent to specific processing activities;
• Legal Obligation: Processing necessary to comply with legal requirements.

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who perform services on our behalf, such as cloud hosting, payment processing, analytics, marketing, and customer support. These providers are contractually obligated to protect your information and use it only for the purposes we specify;
• Affiliates: We may share information with our subsidiaries and affiliated companies for purposes consistent with this Privacy Policy;
• Business Partners: With your consent or as necessary to fulfill services you have requested, we may share information with technology partners, resellers, and integration partners;
• Legal Requirements: We may disclose information when required by law, legal process, or government request, or to protect the rights, safety, or property of StackOrbit, our users, or the public;
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor entity;
• With Your Consent: We may share information for other purposes with your explicit consent.

International Data Transfers

StackOrbit operates globally, and your personal information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other jurisdictions where our affiliates, partners, and service providers operate.

When we transfer personal information from the European Economic Area, United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we implement appropriate safeguards, including:

• Standard Contractual Clauses approved by the European Commission;
• Data Processing Agreements with appropriate security commitments;
• Other legally recognized transfer mechanisms.

To request more information about international transfers and the safeguards we use, please contact us using the details provided below.

Cookies & Tracking Technologies

We use cookies, pixels, web beacons, and similar technologies to collect information about your interactions with our Sites and services. These technologies help us:

• Remember your preferences and settings;
• Authenticate users and maintain session security;
• Analyze site traffic and usage patterns;
• Deliver personalized content and advertising;
• Measure the effectiveness of our marketing campaigns.

Types of Cookies We Use

Managing Cookies

Most web browsers allow you to manage cookie preferences through browser settings. You can choose to block or delete cookies, though this may affect functionality of our Sites. For more information about cookies and how to manage them, visit www.allaboutcookies.org.

Your Rights & Choices

Depending on your location and applicable privacy laws, you may have certain rights regarding your personal information:

• Access: Request confirmation of whether we process your personal information and obtain a copy of your data;
• Correction: Request correction of inaccurate or incomplete personal information;
• Deletion: Request deletion of your personal information, subject to certain legal exceptions;
• Portability: Request a copy of your personal information in a structured, machine-readable format;
• Restriction: Request that we limit processing of your personal information in certain circumstances;
• Objection: Object to processing based on legitimate interests or for direct marketing purposes;
• Withdraw Consent: Where processing is based on consent, withdraw your consent at any time.

Marketing Communications

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your preferences in your account settings;
• Contacting us using the information provided below.

Please note that even if you opt out of marketing communications, we may still send you service-related messages about your account or transactions.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• Providing our services and maintaining your account;
• Complying with legal, accounting, or reporting obligations;
• Resolving disputes and enforcing our agreements;
• Supporting business operations and record-keeping requirements.

When we no longer have a legitimate business need or legal requirement to retain your information, we will delete or anonymize it. If deletion is not immediately possible (for example, because information is stored in backup archives), we will securely store and isolate your information until deletion is feasible.

Security

We implement technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit and at rest;
• Access controls and authentication requirements;
• Regular security assessments and vulnerability testing;
• Employee training on data protection practices;
• Incident response procedures.

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security, and you use our services at your own risk. If you believe your account has been compromised, please contact us immediately.

Links to Third-Party Sites

Our Sites may contain links to websites, applications, or services operated by third parties. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your personal information.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without appropriate parental consent, we will take steps to delete that information. If you believe we may have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, providing additional notice (such as via email or a prominent notice on our Sites). We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are located in the European Economic Area or United Kingdom and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority. For EEA residents, contact details for data protection authorities can be found at edpb.europa.eu. For UK residents, the supervisory authority is the Information Commissioner's Office (ico.org.uk).