Privacy Policy
Effective
This policy explains how Surfstack LLC, a Texas limited liability company (“Surfstack,” “we,” “us”), handles information on surfstack.co (the “Site”).
Our apps have their own policies
This policy covers the Site only. Each of our released apps has its own privacy policy, which controls for that app: Needlist Privacy Policy. Cadence is a work in progress and will publish its own privacy policy before it is released.
What we collect
- What you send us. When you email us, we receive your name, email address and whatever you choose to include in your message.
- Technical data. Our hosting provider records standard server logs, such as IP address, browser type, the pages requested and the time of the request, so the Site stays secure and reliable.
The Site does not use cookies or similar technologies for analytics or advertising, does not run third-party ad networks, and does not track you across other sites.
How we use it
We use information to reply to you, to scope and deliver consulting work you ask us about, to keep the Site secure, and to meet legal obligations. We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.
Legal bases
Where the law of your country requires a legal basis, we rely on our legitimate interests in answering messages and running a secure website, on steps you ask us to take before entering into a contract, and on legal obligations.
Who we share it with
We share information with service providers that help us run the Site and our business, such as website hosting, email and document tools, who may use it only on our behalf; with authorities when the law requires it; and with a successor in a merger or acquisition, who must honor this policy.
Where it is stored
We are based in the United States, and information you send us is processed there. Where our service providers transfer personal data from the EU or UK, they rely on a lawful transfer mechanism such as the EU-U.S. Data Privacy Framework or standard contractual clauses.
How long we keep it
We keep correspondence for as long as we need it for the reason it was sent, then delete it unless the law requires us to keep it longer. Server logs are kept for a short period set by our hosting provider.
Security
We use reasonable administrative, technical and physical safeguards. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
Your rights
Depending on where you live, including Texas under the Texas Data Privacy and Security Act, California, the European Union and the United Kingdom, you may have the right to access, correct, delete or receive a copy of your personal data, and to object to or limit certain processing. To make a request, email us. We will respond within the time the law allows, and we will not treat you differently for exercising a right. If you are in the EU or UK, you may also complain to your local data protection authority.
You may use an authorized agent, and we may need to verify your identity, or the agent’s authority, before we act. If we decline your request, you may appeal by replying to our decision with the subject line “Appeal”. We will answer within 60 days, and if we deny the appeal you may contact your state attorney general.
We do not make decisions about you based solely on automated processing. The Site does not track you over time or across sites, so it treats browser Do Not Track and Global Privacy Control signals the same as every other visit: nothing is collected for tracking.
Children
The Site is not directed to children under 13, and we do not knowingly collect their personal information.
Changes
If we change this policy, we will post the new version here and update the effective date above.
Contact
Email hello@surfstack.co, or write to Surfstack LLC, 17350 State Hwy 249, Ste 220 #37135, Houston, TX 77064.