Skip to content
Stoqlab

Legal

Privacy Policy

Last updated

This policy explains how Stoqlab handles personal data when you visit stoqlab.com, contact us, or use the Stoqlab dashboard, API and MCP server. We are the controller of the personal data described here.

1. What we collect

  • Account data. For users of the dashboard, API and MCP server: name, email address, company, plan, a hashed password, and records of your API keys (name, permissions, creation, last use and expiry). We also keep the lists and filters you create.
  • Contact-form data. When you request access or contact sales: your name, work email, company, role, plan of interest and message, your browser's user agent, and a keyed one-way hash of your network address used to limit abuse. We do not store your raw IP address with the request.
  • Server logs. Like any web service, our servers record technical data for each request: IP address, user agent, requested URL, time and response status. We use them for security, abuse prevention and troubleshooting.
  • Public app-store and supply-chain data. The Service is built from public sources: App Store and Google Play listings, and app-ads.txt and sellers.json files that companies publish for machines to read. Some of these entries name a developer or a seller, which can occasionally be an individual. We process this published business information to provide supply-chain transparency.

2. Why we use it, and on what basis

  • To provide the Service and manage your account and invoices (performance of a contract).
  • To answer access and sales requests, and follow up on them (steps at your request before a contract, and our legitimate interest in responding).
  • To secure the Service, enforce rate limits and prevent abuse (legitimate interest).
  • To compile and publish supply-chain data from public sources (legitimate interest in transparency of the app supply chain).
  • To meet accounting, tax and other legal obligations (legal obligation).

3. Cookies

The contact form sets a session cookie and a security (CSRF) cookie, which are strictly necessary to submit it. The dashboard uses session cookies to keep you signed in. We use no advertising cookies.

The public pages of stoqlab.com set no other cookies, and we use no third-party analytics cookies.

We also count, on our own server and without cookies, how many access requests are sent and how often the free tools are used. These counters hold numbers per day only, with nothing about the visitor.

4. Sharing

We do not sell personal data, and we do not share it for third parties' marketing. We share it only with service providers that process it on our behalf under a data processing agreement (such as our hosting and email delivery providers), with professional advisers where necessary, and with authorities where the law requires it.

5. Where your data is stored

Stoqlab's servers and databases are hosted in the European Union. If a service provider processes personal data outside the European Economic Area, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses.

6. How long we keep it

  • Account data: for as long as your account is active, then for the period needed to meet legal and accounting obligations.
  • Contact requests: for as long as needed to handle the request and any resulting relationship, and no longer than 24 months after our last exchange unless you become a customer.
  • Server logs: for a limited period, for security and troubleshooting.

7. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. You can also lodge a complaint with a data protection supervisory authority. To exercise these rights, including for an entry in our public supply-chain data, email us at privacy@stoqlab.com.

8. Security

We protect personal data with encryption in transit, hashed passwords and API keys, access controls and rate limits. See our Security page for details.

9. Children

The Service is intended for businesses and is not directed at children.

10. Changes

We may update this policy and will post the new version on this page with a new "Last updated" date.

11. Contact

Privacy questions and requests: privacy@stoqlab.com.