TruStacks
Draft. This document is a working draft pending counsel review. It reflects current practice — we will update it before any change to data handling.

Legal

Privacy notice

How we handle data on trustacks.com. The marketing site is intentionally minimal in its data footprint; the product UI at app.trustacks.com is governed separately.

Effective 2026-05-07.

What this notice covers

This notice covers trustacks.com, the TruStacks marketing site. Privacy for the TruStacks product UI is governed separately at app.trustacks.com.

What we collect

  • Contact form submissions — your name, work email, optional company, and message, only when you submit the form on /contact.
  • Aggregate analytics — Vercel Analytics, which is cookieless and does not store IP addresses or build user profiles. Page views and referrers only.
  • Server logs — request paths and timestamps. The contact-form path captures only non-PII metadata (whether fields are present, message length); names and emails are deliberately excluded from logs.

What we don't collect

  • No cookies beyond strictly-essential ones for the site to function.
  • No third-party trackers, ad networks, session recorders, or fingerprinting tools — no Google Analytics, no Facebook Pixel, no Hotjar, no LinkedIn Insight Tag.
  • No data sold, rented, or shared with marketers.

How we use what we collect

  • Contact form data — used solely to reply to your inquiry. We do not add submitters to a marketing list without your explicit opt-in.
  • Analytics — used to understand aggregate traffic patterns (which pages get viewed, which referrers send traffic). No individual user behavior is reconstructed.

How long we keep it

  • Contact-form messages — kept until your inquiry is resolved, then archived for a reasonable period (typically under two years) for context on follow-up conversations. Email us to request earlier deletion.
  • Analytics — retained per Vercel Analytics policy (approximately 12 months, aggregate-only).

Third parties involved

  • Vercel — hosts the marketing site and provides the analytics. US-based; SOC 2 Type II and ISO 27001 certified.
  • Transactional email provider — to be listed here once selected. Until then, contact-form submissions surface a mailto fallback rather than being routed automatically.

Your rights

You can ask us to access, correct, or delete information we hold about you. Email sales@trustacks.com with the subject line “Privacy request” and we will respond within thirty days. If you are in the EU/UK, you have rights under the GDPR; in California, under the CCPA. We honor those rights regardless of where you reside.

Children

This site is not directed at children under sixteen and we do not knowingly collect their information.

Changes to this notice

We will update the effective date below when this notice changes materially. We will not retroactively expand the use of information we already hold without your consent.