Beta Disclaimer: The Services are currently offered in beta and may contain bugs, limited functionality, or interruptions. We may modify or discontinue the Services at any time without notice. By using the beta, you acknowledge and accept these risks.

Stashbase s.r.o. (“Stashbase,” “we,” “our,” or “us”), registered in the Czech Republic under ID No. [IČO PLACEHOLDER] values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our developer-focused secrets management platform, including our website, applications, APIs, SDKs, and CLI tools (collectively, the “Services”).

1. Information We Collect

a. Information You Provide

• Account details such as your name, email address, and organization information when you register.
• Payment information for subscription plans (processed securely by third-party payment providers).
• Communications with us, including support requests and feedback.

b. Information We Collect Automatically

• Usage data such as IP addresses, browser type, device information, and pages visited.
• Log data about your interactions with the Services for performance monitoring and troubleshooting.
• Cookies and similar technologies to improve your experience and track usage patterns.
Important: Secrets and sensitive credentials you store in the Services are encrypted and treated as confidential data. We do not access, use, or share these secrets except as technically necessary to operate the Services. Secrets are never used for analytics, marketing, or shared with third parties.

c. Information from Third Parties

• We may receive information about you from third-party services you connect with (e.g., OAuth providers) with your consent.

2. How We Use Your Information

• To provide, maintain, and improve the Services.
• To process payments and manage your account.
• To communicate important updates, support, and marketing information (you can opt-out of marketing).
• To monitor security and prevent fraud or abuse.
• To comply with legal obligations.

Legal Basis: We process personal data (i) to perform our contract with you, (ii) to comply with legal obligations, (iii) based on our legitimate interests (such as improving the Services and ensuring security), and (iv) with your consent where required (such as marketing).

3. Cookies and Tracking Technologies

Cookies and similar technologies are used only within the authenticated dashboard and developer tools to enhance your experience, such as keeping you logged in and remembering preferences.

You can control cookies through your browser settings, but disabling them may affect functionality.

4. Data Security

We employ robust security measures including encryption, access controls, and regular audits to protect your data. However, no system is perfectly secure, so please protect your account credentials.

Important: All secrets and sensitive credentials you store in Stashbase are encrypted in transit and at rest. We do not access, read, or use these secrets except as technically necessary to provide and maintain the Services. Your secrets remain private and confidential.

5. Data Retention

We retain your personal information as long as your account is active or as needed to provide you the Services. We may retain some information for legal or legitimate business purposes even after account closure.

6. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent where applicable.

If you are located in the European Economic Area (EEA) or California, you have additional rights regarding your personal data. Contact us at [email protected] to exercise these rights.

7. Marketing Communications

We may send you emails about product updates, offers, or announcements. You can unsubscribe from marketing emails at any time by following the link in the email or contacting us.

8. Children’s Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from anyone under this age. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. International Transfers

Your personal data may be transferred outside the European Economic Area, including to the United States, where we or our service providers operate. Where required, such transfers are safeguarded by Standard Contractual Clauses (SCCs) or equivalent mechanisms.

10. Third-Party Services

We use trusted third-party providers for hosting, payment processing, analytics, and customer support. These providers only process your data as needed to deliver their services and are bound by confidentiality and security obligations.

11. Changes to This Policy

We may update this Privacy Policy occasionally. We will notify you of material changes by posting an updated policy on our website or via email. Continued use of the Services after changes means you accept the updated policy.

12. Contact Us

For questions or concerns about your privacy, contact us at [email protected].