§ LEGAL
Privacy Policy
How we collect, use, and protect information across our website, platform, and enterprise engagements.
01Overview
Stack18 (“Stack18,” “we,” “us,” or “our”) provides an AI-native software delivery studio, including our website, our self-serve platform, and our enterprise engagements (together, the “Services”). This Privacy Policy explains what information we collect, how we use and share it, and the choices available to you.
This policy applies to visitors of stack18.ai, users of Stack18 Platform, and representatives of organizations we work with under a Stack18 Enterprise engagement. Enterprise engagements may also be governed by a separate data processing agreement, which takes precedence over this policy where the two conflict.
02Information we collect
We collect information in three ways: information you give us directly, information collected automatically as you use our Services, and information provided by your organization in connection with an engagement.
Information you provide
- Contact details — name, work email, company, and phone number, when you book a demo, submit a contact form, or subscribe to updates.
- Account information — login credentials, role, and workspace settings if you create a Stack18 Platform account.
- Project content — business requirements, documentation, source code, and related artifacts you or your organization upload as part of a discovery, build, or rebuild engagement.
- Communications — messages you send us through email, forms, or scheduling tools.
Information collected automatically
- Usage data — pages visited, features used, and actions taken within Stack18 Platform.
- Device & log data — IP address, browser type, operating system, and timestamps.
- Cookies & similar technologies — as described in Section 08 below.
03How we use information
We use the information we collect to:
- Deliver, operate, and improve the Services, including running the discovery, design, build, and operate pipeline central to how Stack18 works.
- Respond to inquiries, schedule demos, and communicate about your account or engagement.
- Maintain the audit trail and documentation that our governance model depends on — requirement-to-code traceability, approval records, and change history.
- Monitor, secure, and troubleshoot our systems, and prevent misuse.
- Send product updates, event invitations, and other communications you can opt out of at any time.
- Comply with legal obligations and enforce our agreements.
Project content — the requirements, code, and institutional knowledge you upload — is used only to deliver your engagement and is never used to train models on behalf of other customers.
05Data security
We apply administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and audit logging across the platform. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
06Retention
We retain personal information for as long as needed to provide the Services, meet the audit and traceability obligations described in Section 03, and comply with legal, accounting, or reporting requirements. Retention periods for project content are typically set out in your engagement agreement. When information is no longer needed, we delete or anonymize it.
07Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can exercise these rights by contacting us using the details in Section 12. If your organization has a Stack18 Enterprise engagement, requests related to project content are typically directed to your organization’s administrator first.
- Marketing communications — unsubscribe using the link in any email, or contact us directly.
- Account information — update or delete directly within Stack18 Platform, or by contacting support.
09International transfers
We and our service providers may process information in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect information transferred internationally.
10Children’s privacy
The Services are intended for business use and are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can address it.
11Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you through the Services or by email.
12Contact us
Questions about this Privacy Policy or how we handle your information can be sent to privacy@stack18.ai, or through our contact page.