Privacy Policy
Last updated: January 2025
1. Who we are
Zivlo ("we", "our", "us") operates the website at stackyn.com and provides waitlist management software for founders and creators. If you have questions about this policy, contact us at privacy@stackyn.com.
2. What data we collect
We collect the following information:
- Account data: Your name, email address, and password hash when you register for a Zivlo account.
- Waitlist data: The names, slugs, settings, and content of waitlists you create.
- Signup data: Email addresses and names of people who sign up for waitlists you manage. This data belongs to you as the waitlist owner.
- Usage data: Pages visited, features used, and actions taken within the Zivlo dashboard (via server-side logging, not third-party analytics trackers).
- Payment data: Billing information is processed by LemonSqueezy. We do not store card numbers or payment credentials.
3. How we use your data
- To provide and operate the Zivlo service.
- To send transactional emails (OTP codes, signup confirmations, referral notifications).
- To process subscription payments and manage your plan.
- To improve the product based on aggregate usage patterns.
- To contact you about important service updates or changes.
We do not sell your data. We do not use your waitlist subscribers' emails for any purpose other than operating your waitlist.
4. Third-party services
We use the following third-party services to operate Zivlo:
- Supabase — database and file storage. Data is stored in the EU (Frankfurt) region. Supabase is SOC 2 Type II compliant.
- Resend — transactional email delivery. Resend processes email addresses to deliver messages on our behalf.
- LemonSqueezy — payment processing and subscription management. LemonSqueezy is PCI-DSS compliant.
- Upstash — Redis rate limiting. Only request metadata (IP address, endpoint) is stored transiently.
5. Data retention
Account and waitlist data is retained for as long as your account is active. If you cancel your subscription or delete your account, we retain your data for 30 days to allow for export or reactivation, after which it is permanently deleted. You can export your waitlist signups as CSV at any time from your dashboard.
6. Your rights
You have the right to access, correct, export, or delete your personal data at any time. To exercise these rights, email privacy@stackyn.com. We will respond within 30 days.
7. Cookies
Zivlo uses one essential cookie: zivlo_session, an httpOnly cookie that keeps you logged in. We do not use advertising cookies or cross-site tracking. No third-party cookie trackers are embedded on our pages.
8. Changes to this policy
We may update this policy as the product evolves. If we make material changes, we will notify you by email or with a prominent notice in the dashboard. Continued use of Zivlo after changes constitutes acceptance of the updated policy.
9. Contact
For privacy questions or data requests, contact us at privacy@stackyn.com.