Privacy Policy

This document is provided in English, which is the authoritative version; any translation is for convenience only and the English version prevails.

This document applies to all cybersecurity software-as-a-service solutions, websites, applications, platforms, APIs, software, modules, features, documentation, support, and related services made available by Stack4Sec, LLC, a Wyoming limited liability company.

For purposes of this document, "Stack4Sec," "Company," "we," "us," and "our" mean Stack4Sec, LLC. "Customer," "you," and "your" mean the person or entity accessing or using the Services.

This document is incorporated into and forms part of the Stack4Sec Terms of Service. Product-specific terms may supplement this document for particular products, modules, services, or features.

This Privacy Policy explains how Stack4Sec collects, uses, discloses, retains, and protects personal information in connection with the Services. This Privacy Policy applies where Stack4Sec acts as a controller or business for its own processing activities. Where Stack4Sec processes personal data on behalf of a Customer, the Data Processing Addendum and the Customer's instructions govern that processing.

Stack4Sec may collect the following categories of information:

• Account information, such as name, business email address, company name, job title, phone number, password credentials or authentication identifiers, and account settings.
• Billing and transaction information, such as subscription plan, invoices, payment status, tax information, and payment processor references. Stack4Sec does not intentionally store full payment card numbers when a payment processor is used.
• Customer Content, such as files, evidence, records, reports, comments, configurations, assessments, environments, user-generated content, and other data submitted to the Services.
• Usage and device information, such as log data, IP address, browser type, operating system, device identifiers, session information, pages viewed, features used, timestamps, diagnostics, crash logs, and performance data.
• Support and communications information, such as messages, tickets, emails, meeting notes, survey responses, and feedback.
• Marketing information, such as preferences, campaign interactions, referrals, website forms, and event participation.
• Cookie and tracking information, as described in the Cookie Policy.

Stack4Sec may use information to:

• provide, operate, secure, maintain, and improve the Services;
• create and manage Accounts;
• process transactions and subscriptions;
• provide support and respond to inquiries;
• authenticate users and prevent unauthorized access;
• monitor performance, availability, reliability, and security;
• detect, prevent, investigate, and respond to fraud, abuse, security incidents, and policy violations;
• personalize and improve user experience;
• send administrative, transactional, legal, security, and product communications;
• send marketing communications where permitted by law;
• comply with law, legal process, and regulatory obligations;
• enforce agreements and protect rights, property, and safety;
• generate aggregated or de-identified data.

Where applicable law requires a legal basis, Stack4Sec may process personal information based on performance of a contract, legitimate interests, consent, compliance with legal obligations, protection of rights and safety, or other lawful bases available under applicable law.

Stack4Sec may disclose information to:

• service providers, subprocessors, vendors, and contractors that support the Services;
• payment processors and billing providers;
• hosting, infrastructure, security, analytics, communications, support, and AI providers;
• Affiliates and corporate group entities;
• professional advisors, auditors, insurers, and legal counsel;
• authorities, regulators, courts, or law enforcement where required or appropriate;
• parties to a merger, acquisition, financing, reorganization, sale of assets, or similar transaction;
• other parties with Customer's direction, consent, or authorization.

Stack4Sec does not sell Customer Content. Stack4Sec does not disclose Customer Content for third-party advertising purposes.

Customers may submit Customer Content that includes personal data. In most B2B use cases, Customer determines what Customer Content is submitted, how it is configured, who can access it, and how long it is retained. Customer is responsible for providing required notices, obtaining required consents, selecting lawful bases, responding to data subject requests, and ensuring that Customer Content is lawful.

Stack4Sec uses cookies and similar technologies as described in the Cookie Policy. Depending on jurisdiction and user settings, non-essential cookies may require consent or may be subject to opt-out rights.

Stack4Sec is based in the United States and may process information in the United States and other countries where Stack4Sec, its vendors, or subprocessors operate. Where required, Stack4Sec uses appropriate transfer mechanisms, which may include standard contractual clauses, data processing terms, adequacy mechanisms, or other safeguards recognized by applicable law.

Stack4Sec retains personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, support business operations, and fulfill the purposes described in this Privacy Policy.

Retention periods vary based on the type of information, account status, contractual commitments, legal requirements, and operational needs.

Stack4Sec uses commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure, and Stack4Sec cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, opt-out of certain processing, or information about processing activities.

Requests may be sent to contact@stack4sec.com. Where Stack4Sec processes personal data on behalf of a Customer, Stack4Sec may refer the request to the Customer or assist the Customer under the Data Processing Addendum.

Recipients may opt out of marketing communications by using unsubscribe links or contacting Stack4Sec. Stack4Sec may still send transactional, administrative, legal, product, and security communications.

The Services are intended for business use and are not directed to children. Customer must not submit children's personal data unless expressly permitted by Stack4Sec in writing and covered by appropriate legal terms.

Some browsers or devices may transmit "Do Not Track" or similar signals. Stack4Sec responds to legally required opt-out preference signals, such as Global Privacy Control, where applicable and technically feasible.

Stack4Sec may update this Privacy Policy from time to time. If material changes are made, Stack4Sec will provide notice by posting the updated policy, sending notice, displaying in-product notice, or another reasonable method.

Legal notices and inquiries may be sent to:

Stack4Sec, LLC 30 N Gould St, STE R Sheridan, WY 82801 United States Email: legal@stack4sec.com