Privacy Policy

The data controller is Marco Marulli, Italy. You can contact the controller about privacy at privacy@getstacksignal.com, or for general enquiries at contact@getstacksignal.com.

No Data Protection Officer has been appointed.

Information you submit

When you request a SaaS Stack Audit or early access, we collect your work email, company name, company website, role, approximate SaaS stack size, selected vendors, request type or selected plan, and submission time.

Technical information

When you access the website, infrastructure providers may process limited connection and security information such as IP address, request time, requested URL, browser or device information, and security events. This information is used to deliver and protect the website.

We do not ask you to submit passwords, production credentials, or sensitive company documents.

The form fields are required to evaluate and respond to your request. If you do not provide them, we may be unable to process it. StackSignal does not currently use submitted data for newsletters, promotional email, profiling, or solely automated decisions with legal or similarly significant effects.

Personal data is accessible to the controller and may be processed by providers that support the operation of the website and email delivery. StackSignal currently uses Cloudflare for DNS, hosting, content delivery, and website security, and Resend (Plus Five Five, Inc.)to deliver form submissions to contact@getstacksignal.com. No separate lead or CRM database is currently maintained by StackSignal.

Cloudflare is a global provider based in the United States and may process data in the EEA, the United States, and other locations. Cloudflare states that relevant transfers rely on the EU-US Data Privacy Framework and, where applicable, the European Commission's Standard Contractual Clauses. See Cloudflare's Privacy Policy and Data Processing Addendum.

Resend is a United States provider. Its Data Processing Addendum incorporates the European Commission's Standard Contractual Clauses for relevant restricted transfers. See Resend's Privacy Policy and Data Processing Addendum.

Data may also be disclosed where required by law, or to professional advisers where necessary to establish, exercise, or defend legal claims. We do not sell personal data.

Audit and early access requests that do not result in an ongoing business relationship are retained for no longer than 12 months from the last substantive contact, then deleted unless a longer period is required by law or is necessary to establish, exercise, or defend legal claims.

If a business relationship begins, relevant information may be retained for the duration of that relationship and for the periods required by applicable accounting, tax, and legal obligations. Technical security logs are retained according to the infrastructure configuration and only for as long as necessary for security, diagnostics, and abuse prevention.

StackSignal does not currently use non-essential cookies, advertising trackers, behavioural profiling tools, or third-party marketing pixels. No consent banner is therefore displayed.

Strictly necessary technologies may be used to deliver and secure the website. If analytics, marketing tools, or other non-essential tracking technologies are introduced, this policy will be updated and, where required, those technologies will remain disabled until consent is provided.

Subject to the conditions in the GDPR, you may request access to, correction or deletion of your personal data, restriction of processing, data portability, or object to processing based on legitimate interests. You may exercise these rights by emailing privacy@getstacksignal.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.