> **DRAFT — NOT FINAL. REQUIRES REVIEW BY A LICENSED ATTORNEY BEFORE PUBLICATION OR USE.** > This document was drafted as a starting point reflecting the business decisions made during planning. It is not legal advice. Multi-state privacy compliance (California CCPA/CPRA and other states' privacy laws) has specific, mandatory requirements that must be confirmed by an attorney before publication. Sections likely needing the closest attorney attention are marked with **[ATTORNEY REVIEW]**. # Privacy Policy **Effective Date:** [TO BE SET AT PUBLICATION] **Last Updated:** [TO BE SET AT PUBLICATION] Team Stack LLC ("Team Stack," "we," "us," or "our") operates StackClaim (the "Service"). This Privacy Policy explains what personal information we collect from you, how we use it, and your rights regarding it. **This policy covers your personal account information only — it does not describe how we source or handle business lead data, which is covered separately in our Terms of Service and data-sourcing practices.** ## 1. Information We Collect - **Account information:** name, email address, password (stored securely, hashed — never in plain text), and account preferences. - **Payment information:** we do not directly collect or store your full payment card number. Payment processing is handled by our third-party payment processor (Stripe); we retain only limited billing metadata necessary for subscription management (e.g., subscription status, last four digits of a card for display purposes, billing history). - **Usage data:** searches performed, leads claimed, forum posts and lead notes you submit, and general service-interaction data (e.g., login timestamps, feature usage) used to operate and improve the Service. - **Communications:** any messages you send to support. ## 2. How We Use Your Information We use the information above to: provide and maintain the Service; process subscription billing; verify account identity and detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service (including promotional-code abuse, multiple-account creation to bypass trial or account limits, and unauthorized resale or redistribution of lead data) — which may include retaining relevant account and usage records specifically for this purpose, even after account termination, to the extent permitted by law; communicate with you about your account, service updates, and (where you have not opted out) marketing; and improve the Service. ## 3. We Do Not Sell Your Personal Data **We do not sell, rent, or trade your personal account information to third parties.** This is a firm commitment, not merely a legal disclosure. (Note: this does not refer to the business lead data that is the core product of the Service — that data concerns third-party businesses, not our subscribers, and is sourced and handled as described in our Terms of Service.) ## 4. How We Share Information We share limited information with: - **Payment processors** (e.g., Stripe) — to process your subscription payments. - **Phone verification / infrastructure service providers** — solely to operate the Service's lead-verification and hosting functions; these providers do not receive your personal account information for their own independent use. - **Legal compliance** — if required by law, subpoena, or to protect our legal rights. We do not share your personal information with data brokers, advertisers, or any third party for their own marketing purposes. ## 5. Data Security **[ATTORNEY REVIEW — confirm specific security-standard language against actual implementation before publication]** We implement industry-standard security measures to protect your personal information, including encryption of data in transit (via HTTPS/TLS) and encryption of sensitive data at rest. Access to personal information is restricted to what is necessary for operating the Service. No system is completely secure, and we cannot guarantee absolute security, but we are committed to promptly addressing any known vulnerabilities. ## 6. Your Rights **[ATTORNEY REVIEW — this section requires confirmation against the specific requirements of California (CCPA/CPRA) and any other applicable state privacy laws]** Depending on your state of residence, you may have the right to: request access to the personal information we hold about you; request correction of inaccurate information; request deletion of your personal information; opt out of certain uses of your information; and not be discriminated against for exercising these rights. To make a request, contact us at the address below. We will respond within the time period required by applicable law. ## 7. Data Retention We retain your personal account information for as long as your account is active, and for a reasonable period afterward as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal data at any time, subject to legal retention requirements. ## 8. Cookies and Tracking **[ATTORNEY REVIEW — expand with specifics once actual analytics/advertising tools are chosen]** We use cookies and similar technologies necessary for the Service to function (e.g., maintaining your login session) and, where applicable, for analytics to understand how the Service is used. You can control cookie preferences through your browser settings. ## 9. Children's Privacy The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. ## 10. Changes to This Policy We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. Continued use of the Service after changes take effect constitutes acceptance. ## 11. Contact Questions about this Privacy Policy, or requests regarding your personal data, may be directed to support@streamstack.us or the business address on file with our Terms of Service.