Privacy Policy
Last updated: 29 April 2026
What we collect
Your email and password (hashed). The Facebook posts you upload. The voice profile we generate from them. Drafts we generate and the feedback you give them. Performance metrics you log. Stripe billing details (handled directly by Stripe, we never see your card).
What we do with it
We use your data only to operate Stacked Echo for you. Your post history is sent to Anthropic's Claude API for voice extraction and draft generation. Your email is sent to Resend for transactional notifications. Your billing data is sent to Stripe for payment processing. That is the complete list of third parties.
What we do not do
We do not sell your data. We do not share it with advertisers. We do not train shared AI models on it. We do not use your content to improve products for other users. We do not share content with any third party not listed above.
Where it lives
Your data lives in Supabase (Sydney region) with row-level security so only you can access your records. Backups are encrypted at rest. Connections are TLS-encrypted in transit.
Your rights
You can export your data at any time by emailing us. You can delete your account from your dashboard, which removes your data within 30 days unless we are legally required to retain it. You can request correction of any inaccurate data.
Cookies
We use minimal cookies, only for authentication. No analytics cookies. No advertising cookies. No third-party tracking.
Sub-processors
Anthropic (AI inference). Supabase (database, auth, storage). Stripe (payments). Resend (email). Vercel (hosting). Each is contractually bound to handle your data appropriately.
Changes
We will notify you of material changes via email at least 14 days before they take effect.
Contact
Stacked Echo is operated by Stacked Digital Pty Ltd. For privacy questions, data export requests, or deletion requests, email matthew@stackeddigital.com.