Privacy Policy
Last updated: March 31, 2026
1. Information We Collect
We collect information you provide directly: name, email address, and organization details when you create an account. We also collect files and content you upload through submission forms.
We automatically collect usage data including IP addresses, browser type, pages visited, and feature usage through Vercel Analytics.
2. How We Use Your Information
We use your information to: provide and maintain the service, process your submissions and reviews, send transactional emails (account verification, submission updates, billing receipts), improve the platform, and comply with legal obligations.
3. Data Storage and Security
Your data is stored on Supabase (PostgreSQL) with row-level security. Files are stored in Supabase Storage with private bucket policies. All data is encrypted in transit (TLS 1.2+) and at rest.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Third-Party Services
We use the following third-party services: Supabase (database and authentication), Stripe (payment processing), Resend (transactional email), Vercel (hosting and analytics), and Sentry (error monitoring).
Each provider has their own privacy policy governing how they process your data.
5. Data Retention
We retain your data for as long as your account is active. Deleted data is soft-deleted and permanently purged after 90 days. You can request a full data export or account deletion at any time from your profile settings.
6. Your Rights (GDPR)
You have the right to: access your personal data, request correction of inaccurate data, request deletion of your data, export your data in a portable format, and withdraw consent for optional processing.
To exercise these rights, use the Data & Privacy section in your profile settings or contact us at privacy@staxio.io.
7. Cookies
We use essential cookies for authentication and session management. We use Vercel Analytics for anonymous usage tracking. We do not use third-party advertising cookies.
8. Children's Privacy
Staxio is not directed to children under 13. We do not knowingly collect personal information from children under 13.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this privacy policy, please contact us at privacy@staxio.io.