Privacy Policy

Stackpad is a product of slashslash B.V., registered in the Netherlands. We are the data controller for personal data processed through the Stackpad platform and website. Stackpad is currently in public beta.

We collect the following categories of personal data:

• Account data: name, email address, and password when you create an account
• Billing data: payment method and billing address, processed securely by our payment provider (Mollie)
• Usage data: anonymized analytics about how you interact with the platform, such as page views and feature usage
• Technical data: IP address, browser type, and device information for security, debugging, and abuse prevention

We do not collect data beyond what is necessary to provide and improve the service.

We process your personal data to:

• Provide, maintain, and operate the Stackpad platform
• Process payments and manage your subscription
• Send essential service communications (e.g., downtime alerts, security notices)
• Improve the platform based on anonymized usage patterns
• Ensure security, prevent fraud, and enforce our Terms of Service

We do not use your data for advertising, profiling, or automated decision-making.

Under the GDPR, we process your data based on the following legal grounds:

• Contract: processing necessary to provide the Stackpad service to you
• Legitimate interest: security, fraud prevention, and product improvement
• Legal obligation: tax and financial record-keeping requirements
• Consent: where applicable, such as for optional marketing communications

All data is stored and processed exclusively in European data centers within the European Economic Area (EEA). We do not transfer personal data outside the EEA. We do not use US-based cloud infrastructure for data storage or processing.

We only share data with third parties when strictly necessary to operate the platform:

• Payment processing: Mollie (EU entity) for handling payments
• Email delivery: transactional email provider for service notifications

We do not sell, rent, or trade your personal data. We do not use third-party advertising or tracking services.

We use only essential cookies required for authentication and security. We do not use marketing cookies, tracking cookies, or third-party analytics cookies. No cookie consent banner is required because we only use strictly necessary cookies.

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”)
• Export your data in a structured, machine-readable format
• Restrict or object to processing of your data
• Lodge a complaint with the Dutch Autoriteit Persoonsgegevens or your local supervisory authority

To exercise any of these rights, contact us at info@stackpad.eu. We will respond within 30 days.

We retain your account data for as long as your account is active. When you delete your account, all personal data is removed within 30 days. We may retain anonymized, non-identifiable data for analytics purposes. Billing records are retained as required by Dutch tax law.

We take appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, credential encryption with AES-256-GCM, and regular security reviews. No system is 100% secure — if you discover a vulnerability, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform at least 14 days before they take effect. The “last updated” date at the top of this page reflects the most recent revision.

For privacy-related questions or to exercise your rights, contact us at info@stackpad.eu.

slashslash B.V. · Marconistraat 15a · 8013 PK Zwolle · The Netherlands