1. Introduction
AutoStack ("we", "us", or "our"), operated by Recalibrate Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI education platform at aiautostack.app (the "Service"). By using AutoStack, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you create an account, we collect your name, email address, and password. Passwords are hashed and never stored in plain text.
- Profile Data: Optional information you choose to provide, such as display name or avatar.
- Learning Progress: Your module completions, quiz scores, XP earned, streaks, and achievements within the platform.
- Payment Information: If you purchase a paid plan, payment processing is handled by Stripe. We do not store your full credit card number. Stripe provides us with a transaction ID and last four digits for record-keeping.
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on modules, and interaction patterns to improve the learning experience.
- Device Information: Browser type, operating system, device type, and screen resolution.
- Log Data: IP address, access times, and referring URLs.
- Cookies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.
3. How We Use Your Information
- Service Delivery: To provide, maintain, and improve the AutoStack platform, including personalized learning paths and progress tracking.
- Communication: To send you account-related notifications, security alerts, and (with your consent) educational content updates.
- Analytics: To understand how users interact with our platform and improve the learning experience. We use aggregated, anonymized analytics.
- Security: To detect, prevent, and address technical issues, fraud, or abuse.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
4. Data Sharing and Disclosure
We do not sell your personal information. We may share information in the following limited circumstances:
- Service Providers: With trusted third parties who assist in operating our platform (e.g., Supabase for authentication, Stripe for payments). These providers are contractually obligated to protect your data.
- Legal Requirements: If required by law, subpoena, or other legal process, or to protect the rights, property, or safety of AutoStack, our users, or others.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
- With Your Consent: We may share information for any other purpose with your explicit consent.
5. Public API Data
AutoStack provides a public REST API (documented at /api-docs) that serves curated prompts, resources, AI tool data, and live intelligence feeds. This API serves publicly available, non-personal data. No user personal information is ever exposed through the public API. API usage may be logged for rate limiting and analytics purposes.
6. Data Security
We implement industry-standard security measures to protect your data, including:
- HTTPS/TLS encryption for all data in transit
- Encrypted password storage using bcrypt hashing
- Authentication managed by Supabase with row-level security
- Regular security reviews and dependency updates
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your account data for as long as your account is active or as needed to provide you the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing of your personal data for certain purposes.
- Restriction: Request restriction of processing under certain circumstances.
To exercise these rights, contact us at privacy@aiautostack.app.
9. Children's Privacy
AutoStack is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using AutoStack, you consent to the transfer of your data to these countries. We ensure appropriate safeguards are in place for such transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of AutoStack after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: