Privacy Policy

This Privacy Policy describes how GetSecureStack (“we,” “us,” or “our”) collects, uses, and protects information when you use our Service at getsecurestack.com. By using the Service, you agree to the practices described in this policy.

• Account Information — When you create an account, we collect your email address and maintain a record of your subscription plan.
• Payment Information — Payment processing is handled by Stripe. We do not store your credit card number or banking details.
• Uploaded Content — Files you upload are processed to provide the Service and stored in our database associated with your account.
• Generated Content — Security policies and vulnerability analyses generated on your behalf are stored in our database.
• Usage Data — We may collect basic usage information to help improve the Service.

We use collected information to: provide and operate the Service, process payments and manage subscriptions, store and retrieve your generated content, send transactional emails, respond to support requests, and improve the Service.

We do not sell your personal information to third parties.

We use Supabase (database/auth), Stripe (payments), Vercel (hosting), Anthropic (AI generation), and Resend (email). Your uploaded content is sent to Anthropic’s API for processing.

We do not use your content to train AI models.

We retain your account data as long as your account is active. If you cancel, data is retained for 90 days before deletion. Uploaded vulnerability report files are deleted after 90 days.

We implement reasonable technical measures including HTTPS, secure authentication, and row-level security. No system is completely secure.

You have the right to access, correct, delete, or export your data. Contact getsecurestack@gmail.com to exercise these rights.

The Service is not directed to individuals under 18. We do not knowingly collect information from minors.

We may update this policy and will notify users of significant changes by email.

getsecurestack@gmail.com