Privacy Policy

Last updated: October 1, 2026

This Privacy Policy explains how Stacware LLC ("Stacwork", "we", "us", or "our") collects, uses, and shares information when you use Stacwork at stacwork.com and related applications and services (the "Service"). It applies to the businesses that use Stacwork and to the individuals whose information is processed through it.

1. Our roles

When we provide the Service to a business, that business decides what information about its clients to collect and how to use it: the business is the "controller" of that data, and we act as a "processor" or service provider on its behalf. For information about our own account holders (the businesses and their users), we act as the controller. If you are a client of a business that uses Stacwork, please direct privacy requests to that business.

2. Information we collect

Account information: name, email, phone, business details, and login credentials for the people who administer a business account.
Business and client data: the records a business creates in the Service, such as clients, contacts, addresses, quotes, work, invoices, messages, and notes. This can include the contact details of the business's clients, including mobile numbers used for text messaging.
Payment information: processed by our payment provider (Stripe). We do not store full card numbers; we receive limited details such as status, amounts, and the last four digits.
Communications: the content and delivery status of emails and text messages sent or received through the Service.
Usage and device data: log data, IP address, and device and browser information when you use the Service.
Website session recordings: on our public marketing website (stacwork.com), if you accept, Microsoft Clarity records how you use the pages, including clicks, taps, scrolling, and mouse movement, along with device and browser details. Nothing is recorded unless you accept. See section 9.
Cookies: we use necessary cookies to run the Service (for example, to keep you signed in). If you accept recording on our marketing website, Microsoft Clarity sets its own cookies there. See section 9.

3. How we use information

To provide, secure, maintain, and improve the Service.
To send communications you initiate to your clients (email and text messages) and to send you service, billing, and security notices.
To process payments and prevent fraud and abuse.
To provide AI-assisted features (for example, Co-work answers and drafted messages) that you review and control.
To understand how visitors use our marketing website and improve it.
To comply with legal obligations and enforce our terms.

4. Text messaging (SMS/MMS)

The Service lets businesses send text messages to their clients. This section describes how text messaging information is handled.

Consent: Businesses may only text clients who have given prior express consent. A client opts in to receive messages from the business, and can opt out at any time.
Message types: appointment and booking reminders, quotes, invoices and payment links, receipts, service and job updates, review requests, and account or service notifications.
Frequency and cost: message frequency varies. Message and data rates may apply, depending on the recipient's mobile plan.
Opt out and help: reply STOP to any message to stop receiving texts; reply HELP for assistance or contact the business directly.
No sharing for marketing: we do not sell or share text messaging opt-in information, mobile numbers collected for messaging, or consent data with third parties for their own marketing or promotional purposes. Mobile information is used only to deliver the messages a business sends through the Service.
Providers: we use a messaging provider (Twilio) solely to transmit messages and process delivery status and opt-out (STOP/HELP) handling.

We do not sell personal information. We share information only as needed to run the Service:

Service providers (subprocessors): vendors who host and power the Service under contracts that limit their use of the data. Our current subprocessors are: Supabase (database, authentication, and file storage), Railway (application hosting), Cloudflare (DNS, network security, and Turnstile bot protection on public forms), Stripe (payment processing and subscription billing), Twilio (text messaging), Resend (email delivery and replies), OpenAI (AI features, including Co-work and drafted messages), OpenStreetMap (address lookup and maps for work locations), Microsoft Clarity (session recording, heatmaps, and usage analytics on our public marketing website only), and Discord (internal notifications to our team when a business signs up, finishes setup, or starts a subscription, containing the business name, the plan, and the name and email of the person who signed up).
With a business you deal with: if you are a client, your information is shared with the business that serves you and administers it in the Service.
Legal and safety: to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Service.
Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data retention

We retain information for as long as an account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When an account is closed, we make data available for export for a reasonable period and then delete or anonymize it, except where retention is required by law.

7. Security

We use technical and organizational measures to protect information, including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. Account holders can manage much of their information in the app. If you are a client of a business, contact that business to exercise your rights; we will assist the business as its processor. To make a request to us directly, use the contact details below.

9. Cookies, session recording, and analytics

We use necessary cookies to operate the Service, for example to keep you signed in. The Stacwork app itself, including the quote, invoice, booking, and request pages sent to clients and the client portal, does not use analytics or advertising cookies.

Our public marketing website (stacwork.com) asks before it records anything. When you first visit, a banner asks whether we may use Microsoft Clarity, and Clarity does not load unless you choose Accept. If you accept, Clarity records your visit as a session recording: your clicks, taps, scrolling, and mouse movement on the pages, with device, browser, and approximate location details. We use those recordings, heatmaps, and usage reports to see how the website is used and to improve it. Clarity sets cookies to recognize a returning visitor, and Microsoft processes this data under the Microsoft Privacy Statement.

If you choose Decline, or close the page without choosing, Clarity does not load and your visit is not recorded. We remember your choice in your browser (in its local storage, not a cookie), so we do not ask again on that browser. You can change your choice at any time with Privacy choices at the bottom of every page of our website; if you withdraw consent, we tell Clarity to stop and remove its cookies.

Our website honors Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a decline: we do not ask, we do not load Clarity, and your visit is not recorded. The Stacwork app never loads Clarity. You can also block or delete cookies in your browser; disabling necessary cookies may affect how the Service works.

10. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

11. International users

We operate in the United States, and information may be processed there and in other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new "Last updated" date and, for material changes, provide reasonable notice.

13. Contact

Questions or privacy requests: Stacware LLC, 30 N Gould Ste N, Sheridan, WY 82801, USA, [email protected].