Privacy Policy

Last updated: March 31, 2026

1. Information We Collect

We collect information you provide directly: name, email address, and organization details when you create an account. We also collect files and content you upload through submission forms.

We automatically collect usage data including IP addresses, browser type, pages visited, and feature usage through Vercel Analytics.

2. How We Use Your Information

We use your information to: provide and maintain the service, process your submissions and reviews, send transactional emails (account verification, submission updates, billing receipts), improve the platform, and comply with legal obligations.

3. Data Storage and Security

Your data is stored on Supabase (PostgreSQL) with row-level security. Files are stored in Supabase Storage with private bucket policies. All data is encrypted in transit (TLS 1.2+) and at rest.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-Party Services

We use the following third-party services: Supabase (database and authentication), Stripe (payment processing), Resend (transactional email), Vercel (hosting and analytics), and Sentry (error monitoring).

Each provider has their own privacy policy governing how they process your data.

5. Data Retention

We retain your data for as long as your account is active. Deleted data is soft-deleted and permanently purged after 90 days. You can request a full data export or account deletion at any time from your profile settings.

6. Your Rights (GDPR)

You have the right to: access your personal data, request correction of inaccurate data, request deletion of your data, export your data in a portable format, and withdraw consent for optional processing.

To exercise these rights, use the Data & Privacy section in your profile settings or contact us at privacy@staxio.io.

7. Cookies

We use essential cookies for authentication and session management. We use Vercel Analytics for anonymous usage tracking. We do not use third-party advertising cookies.

8. Children's Privacy

Staxio is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this privacy policy, please contact us at privacy@staxio.io.