StackedGTM

Last updated · January 2025

Privacy Notice

This Privacy Notice explains how StackedGTM ("StackedGTM", "we", "us") collects, uses, and shares personal data when you use our Service. StackedGTM acts as the data controller for personal data processed in connection with the Service.

Personal data we collect

  • Account data — name, email, login credentials.
  • Customer support data — messages and attachments you send us.
  • Usage & telemetry — pages viewed, features used, diagnostic inputs (e.g. domains you submit).
  • Device & log data — IP address, browser, device identifiers, timestamps.
  • Marketing data — newsletter subscription status and preferences.

How we use personal data

  • Create and operate your account and provide the Service;
  • Process diagnostics and generate reports you request;
  • Provide customer support;
  • Maintain security, prevent fraud, and enforce our Terms;
  • Improve and develop the Service;
  • Send transactional emails and, where you've opted in, newsletter and marketing communications.

Legal bases

We process personal data based on (a) performance of the contract to provide the Service, (b) our legitimate interests in operating, securing, and improving the Service, (c) your consent (for example, marketing communications and non-essential cookies), and (d) compliance with legal obligations.

How we share personal data

We share personal data with:

  • Service providers / subprocessors — hosting, database, authentication, email delivery, AI inference, and analytics providers that help us operate the Service.
  • Stripe — our payment processor and Merchant of Record. Stripe handles sale of the Service, subscription management, payments, tax compliance, invoicing, and refunds.
  • Professional advisers — legal, accounting, and similar advisers where necessary.
  • Authorities — where required by law or to protect our rights.

Retention

We retain personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and least-privilege server-side keys for sensitive operations. No method of transmission or storage is 100% secure.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. You can exercise these rights via the contact page. If you are in the UK or EEA, you may also lodge a complaint with your local data protection authority.

International transfers

Personal data may be transferred to and processed in countries outside your own, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

Cookies

We use essential cookies required for the Service to function (e.g. authentication and session management). We may also use analytics cookies to understand product usage. You can manage cookie preferences through your browser settings.

Contact

For privacy questions or requests, reach us via the contact page.