Privacy Policy

JA & PARTNER ApS, operating as Stackbuild ("Stackbuild," "we," "us," or "our"), is a Danish private limited company that provides an AI-powered platform enabling users worldwide to build React web applications using natural language prompts.

This Privacy Policy describes how we collect, use, share, and protect personal data from users of stackbuild.dev and the Services. We are committed to compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

JA & PARTNER ApS is the data controller for the processing of your personal data as described in this Policy. By using our Services, you acknowledge and agree to this Policy.

JA & PARTNER ApS

Address: Nordentoftsvej 12, 6800 Varde, Denmark

Business reg. no.: 42996815

Email: support@stackbuild.dev

Website: stackbuild.dev

JA & PARTNER ApS is registered in Denmark. As an EU-based company, we are subject to the GDPR and process personal data accordingly, regardless of where our users are located.

Data You Provide Directly

When you create an account, purchase a subscription, or use our Services, you may provide:

• Name and email address
• Payment information (processed by Stripe; we do not store full card details)
• Prompts, project descriptions, and content you submit to generate applications
• Support and contact form submissions

Data Collected Automatically

When you use the Services, we automatically collect:

• IP address and approximate location (city level)
• Browser type, operating system, and device identifiers
• Pages visited, features used, timestamps, and session data
• Error logs and performance telemetry

Data from Third-Party Integrations

If you connect third-party services (such as GitHub), we receive only the minimum data necessary to provide that integration.

We process your personal data for the following purposes:

• To provide, operate, and maintain the Services, including generating code and deploying applications
• To process payments and manage your subscription
• To detect, prevent, and investigate fraud, abuse, and security incidents
• To analyze usage patterns and improve the performance and reliability of the Services
• To communicate with you about your account, updates, and support
• To comply with legal and regulatory obligations

We process your personal data on the following legal bases under GDPR Article 6:

• Performance of a contract (Art. 6(1)(b)): Processing necessary to provide the Services you have requested.
• Legitimate interests (Art. 6(1)(f)): Security monitoring, fraud prevention, analytics, and improving the Services, where these interests are not outweighed by your privacy rights.
• Consent (Art. 6(1)(a)): For non-essential cookies and marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation (Art. 6(1)(c)): Retention and disclosure required by Danish bookkeeping law and other applicable regulations.

We engage the following third-party sub-processors to support our Services. All sub-processors are bound by data processing agreements ensuring GDPR-compliant handling of your data:

• Anthropic (United States) — AI model for code and application generation
• Stripe (United States / Ireland) — Payment processing and subscription management
• Supabase (United States) — Database hosting and authentication
• Cloudflare (United States / EEA) — Content delivery, hosting, and Workers infrastructure
• Google Cloud (United States / EEA) — Application compilation and file storage

We do not sell your personal data to any third party.

As JA & PARTNER ApS is based in Denmark (EU), your personal data is processed within the EU/EEA where possible. Some of our sub-processors are based in the United States or other countries that may not have been deemed "adequate" by the European Commission.

For such transfers, we rely on the EU Standard Contractual Clauses (SCCs) as adopted by Commission Decision 2021/914 to ensure an adequate level of data protection. You may request a copy of the applicable SCCs by contacting us at support@stackbuild.dev.

We retain your personal data only as long as necessary for the purposes described in this Policy or as required by law:

• Account data: Retained for the duration of your account and deleted within 30 days of account closure, subject to legal holds.
• Billing records: Retained for 5 years from the end of the financial year, in accordance with Danish bookkeeping law (Bogføringsloven).
• Log data and telemetry: Retained for up to 90 days.
• Anonymized and aggregated data may be retained indefinitely.
• Backup copies may persist for up to 90 days after deletion requests.

We use cookies and similar technologies to operate and improve our Services. We use:

• Strictly necessary cookies: Required for authentication, session management, and core functionality. No consent required.
• Analytics cookies: Used to understand how users interact with the Services and improve performance. Requires consent in the EEA.
• Marketing cookies: Used to measure the effectiveness of campaigns. Requires consent in the EEA.

You can manage your cookie preferences at any time through our cookie settings. Withdrawing consent for non-essential cookies will not affect core functionality.

As a data subject under the GDPR, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal retention requirements.
• Right to restriction: Request that we restrict processing of your personal data.
• Right to data portability: Receive your personal data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent for processing at any time without affecting prior lawful processing.

To exercise any of these rights, contact us at support@stackbuild.dev. We will respond within 30 days or the period required by applicable law.

If you believe your rights have not been respected, you have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet): https://www.datatilsynet.dk.

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from anyone under this age. If we discover that we have collected personal data from a minor, we will promptly delete it. If you believe we may have collected such data, please contact us at support@stackbuild.dev.

We do not intentionally collect special categories of personal data (such as health data, biometric identifiers, racial or ethnic origin, or precise geolocation). You are instructed not to upload such information through the Services.

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption in transit (TLS) and at rest
• Role-based access controls and authentication
• Security monitoring and incident response procedures
• Regular review of data protection practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Danish Data Protection Authority within 72 hours of becoming aware of the breach, and affected users without undue delay where required by law.

When you submit prompts or content to our Platform, this data is transmitted to Anthropic's AI models for processing. We do not use raw, identifiable personal data from your prompts to train AI models. Anonymized or aggregated data may be used for service improvement purposes.

Applications you build using Stackbuild are your Customer Data. We process this data only to provide the Services. You retain ownership of your projects and AI-generated output.

Our Services may include integrations with or links to third-party services not controlled by Stackbuild. Your interactions with those services are governed by their own privacy policies. We are not responsible for the privacy practices of external services.

We reserve the right to update this Privacy Policy at any time. We will post the revised Policy on our website and update the "Last Updated" date. For material changes that reduce your rights or expand our processing purposes, we will provide at least 30 days advance notice by email or in-product notification. Your continued use of the Services after the updated Policy takes effect constitutes acceptance.

For any questions, concerns, or to exercise your data protection rights, please contact us:

JA & PARTNER ApS

Address: Nordentoftsvej 12, 6800 Varde, Denmark

Business reg. no.: 42996815

Email: support@stackbuild.dev

Website: stackbuild.dev

We aim to respond to all verified data subject requests within 30 days. If you are not satisfied with our response, you may lodge a complaint with:

Datatilsynet (Danish Data Protection Authority)

Carl Jacobsens Vej 35, 2500 Valby, Denmark

https://www.datatilsynet.dk