POLICY · PRIVACY

Privacy policy

Draft for review · Updated October 2, 2026

This draft describes the current application architecture. The legal operator, retention periods, full subprocessor list, international transfer details, and regional disclosures still need confirmation.

CloudStackly is the product brand. This policy explains how the service handles account and campaign information when you use it.

Information handled

Account identifiers and profile details, including sign-in email and optional display/contact name.
Workspace membership, client business profiles, campaign briefs, keywords, target pages, generated drafts, approvals, provider destinations, and publication status.
Credit transactions, subscription and purchase records, and limited payment identifiers supplied by Stripe. CloudStackly does not store full payment card numbers.
Technical request and security information needed to operate the service, investigate failures, and protect accounts.

How information is used

We use information to authenticate users, isolate workspace data, generate requested drafts, publish material to connected providers, verify public pages, display project reports, process billing, provide support, and protect the service. We do not use client campaign content to make public sample reports; public examples are labeled and synthetic.

Service providers

CloudStackly uses Supabase for authentication and database services, Stripe for payment processing, Vercel for hosting and server functions, and connected content-generation and publishing providers selected by the account administrator. When a user requests an operation, relevant content and business facts may be sent to the provider needed for that operation. The complete subprocessor list and applicable data-transfer terms should be confirmed before this policy is finalized.

Published information

Content intentionally published to a public provider can be accessed by anyone with the public URL and may be indexed, copied, cached, or retained by third parties. Removing content from CloudStackly may not remove copies held by a publishing platform, search engine, or visitor.

Retention and security

Workspace records are retained while an account is active and as needed for billing, support, security, legal obligations, and dispute handling. Exact deletion and backup-retention periods still need confirmation. We use access controls and tenant-scoped database policies; no online service can guarantee absolute security.

Your choices and requests

Workspace owners can manage membership and request account closure. Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or export personal information. Contact CloudStackly support to make a request. We may need to verify identity and workspace authority.

Children, transfers, and changes

CloudStackly is intended for business users and is not designed for children. International transfer details and any region-specific legal bases still need confirmation. We will update this policy when our practices materially change.

For privacy requests, contact us through the CloudStackly contact form.