STACK MARKET PRIVACY POLICY
Last Updated: November 28, 2025
For California Residents: This policy describes your rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
What We Do
Stack Market integrates with work collaboration tools you already use (Zoom, Slack, GitHub, Figma, etc.) to track your work activities and award points. You redeem points for travel, products, and experiences.
Information We Collect
Account & Contact Information
What: Name, email, work role, password.
Why: Account creation, authentication, communication.
Sources: Directly from you.
Shared with: Service providers (hosting, email).
Payment Information
What: Credit card/bank details, billing address.
Why: Process reward redemptions, subscription payments.
Sources: Directly from you.
Shared with: Payment processors (Stripe, PayPal).
Collaboration Activity Data
What: Meeting attendance/duration, role (host/participant), tool usage metrics, activity timestamps.
Why: Calculate points, detect fraud, improve platform.
Sources: Integration partners (Zoom, Slack, GitHub, etc.).
Shared with: Your employer (if they sponsor your account - aggregated only).
Device & Usage Information
What: IP address, browser type, device ID, pages visited.
Why: Security, fraud prevention, analytics.
Sources: Automatically collected.
Shared with: Analytics providers (Google Analytics).
Sensitive Personal Information
What: Account credentials (password).
Why: Account security.
Sources: Directly from you.
Use limited to: Authentication only.
We do NOT collect: Content of your work (emails, code, designs, documents), precise geolocation, race/ethnicity, political views, union membership, health data, or sexual orientation.
How We Use Your Information
• Service Delivery: Calculate and award points, process redemptions, provide customer support.
• Fraud Prevention: Detect gaming/abuse using AI-powered verification.
• Platform Improvement: Analyze usage patterns, develop new features.
• Communication: Send account updates, rewards notifications, marketing (you can opt out).
• Legal Compliance: Meet regulatory requirements, respond to legal requests.
• Business Operations: Internal analytics, enterprise customer reporting (aggregated data only).
Information Sharing & “Sales”
Service Providers: Cloud hosting (AWS), payment processing (Stripe), email (SendGrid), analytics (Google Analytics), customer support (Zendesk).
Integration Partners: Zoom, Slack, GitHub, Figma, and other tools you connect - only for authentication and activity tracking.
Reward Partners: Airlines, hotels, retailers - only information necessary to fulfill your redemption.
Enterprise Customers: If your employer sponsors your account, they receive aggregated collaboration analytics. They do NOT see your individual activity details or reward choices.
Legal Requirements: When required by law, court order, or to protect rights/safety.
Business Transfers: In merger, acquisition, or bankruptcy.
Advertising Partners: We share device/usage data with advertising networks for targeted ads.
Important: We do NOT sell your personal information for money. We DO share data with advertising partners for cross-context behavioral advertising (this counts as "sharing" under California law).
Data Retention
• Active accounts: Duration of account + 3 years.
• Closed accounts: 2 years after closure, then deleted.
• Transaction records: 7 years (legal requirement).
• Marketing data: Until you unsubscribe.
Your California Privacy Rights
Right to Know: Request what personal information we collected, used, disclosed, or shared about you in the past 12 months (up to 2 times per year, free).
Right to Delete: Request deletion of your personal information (with some exceptions).
Right to Correct: Request correction of inaccurate information.
Right to Opt Out: Opt out of sharing for cross-context behavioral advertising and selling your information (we don't currently sell; if we do, you can opt out).
Right to Limit: Request we limit use of your sensitive personal information to what's necessary for service delivery.
Right to Non-Discrimination: We won't discriminate against you for exercising these rights.
How to Exercise Your Rights:
Email: support@stackmarket.co
Phone: [Number]
Online: [URL]
Authorized Agent: Provide written authorization.
Response Time: 45 days (may extend 45 more days if needed).
Verification: We'll ask for information to verify your identity (typically email + 2 other data points).
Do Not Sell or Share My Personal Information
Click the button below to opt out of sharing your information for behavioral advertising. We will honor Global Privacy Control (GPC) signals from your browser.
Security
We use encryption, access controls, multi-factor authentication, and regular security audits. However, no system is 100% secure.
Changes to This Policy
We'll notify you of material changes via email and website notice 30 days before they take effect. Continued use means you accept the changes.
Children's Privacy
Stack Market is not for anyone under 16. We don't knowingly collect information from minors.
Contact Us
Privacy Questions: support@stackmarket.co
Mail: 149 E 23rd St Suite 169 NY NY 10159
California Residents - File a Complaint: California Privacy Protection Agency: https://cppa.ca.gov/
STACK MARKET: Work Is Now Rewarding
