Privacy Policy

Effective date: 25 June 2026

Kodestack ("we", "us", or "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights in relation to it.

1. What We Collect

We collect the following categories of personal data:

  • Account information — your email address, display name, and hashed password when you create an account
  • Usage data — feature usage, page views, and interaction events within our products, used to understand how the Service is being used and to improve it
  • Repository metadata — when you connect a repository, we process metadata such as file counts, language composition, and scan results to deliver the Service; we do not store or retain the content of your source files
  • Billing information — payment details are handled directly by Stripe; we store only your subscription status and plan type
  • Communications — if you contact us, we retain the content of that communication to help resolve your query

2. How We Use Your Data

We use the data we collect to:

  • Create and manage your account
  • Deliver and improve the Kodestack products and services you have access to
  • Process payments and manage your subscription
  • Send you product updates, security notices, and service-related communications
  • Respond to support requests and resolve issues
  • Comply with legal obligations

We do not sell your personal data to third parties.

3. Data Sharing

We share data only with trusted third-party service providers necessary to operate the Service, including:

  • Stripe — payment processing
  • Cloud infrastructure providers — hosting and data storage
  • Analytics tools — aggregate, anonymised usage insights

All third parties are bound by data processing agreements and are not permitted to use your data for any purpose other than providing their service to us.

4. Data Storage and Retention

Your data is stored on servers located within the European Economic Area (EEA). We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 90 days unless we are required to retain it for legal or compliance purposes.

5. Security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or disclosure. Passwords are hashed using industry-standard algorithms and are never stored in plain text. Access to production systems is restricted to authorised personnel only.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict processing of your data
  • Request a copy of your data in a portable format

To exercise any of these rights, contact us at hello@kodestack.io. If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

7. Cookies

We use only essential cookies required to operate the Service:

  • Session cookie — keeps you logged in during your session
  • CSRF token — protects against cross-site request forgery attacks

We do not use tracking cookies or third-party advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice within the Service. The effective date at the top of this page indicates when the policy was last revised.

9. Contact

If you have any questions or concerns about this policy or how we handle your data, please contact us at hello@kodestack.io.