STACKKNACK PRIVACY POLICY
Effective Date: January 3, 2026
Last Updated: April 1, 2026
Changes to Sections 1.2, 2.4, and 5 take effect: May 1, 2026
This Privacy Policy explains how StackKnack LLC ("StackKnack," "we," "us," or "our") collects, uses, discloses, and safeguards information when you access or use our websites, applications, software, APIs, integrations, and related services (collectively, the "Service").
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.
1. SCOPE AND ROLES
1.1 Platform Provider
StackKnack provides software and infrastructure to businesses ("Operators") that run their own resale, consignment, inventory, or marketplace operations under their own brand, including white-label marketplaces.
1.2 Data Controller and Data Processor Roles
- StackKnack is a Data Controller with respect to personal data collected for our own business purposes, such as sales, marketing, support, security, compliance, and the operation of StackKnack's public-facing product catalogs and directories.
- StackKnack is a Data Processor / Service Provider with respect to personal data processed on behalf of Operators through the Service.
- Operators are the Data Controllers for end-user personal data collected through their marketplaces, stores, or sales channels.
End users should review the applicable Operator's privacy policy for information about how their personal data is used by that Operator.
1.3 Data Processing Addendum
Where StackKnack processes personal data on behalf of an Operator, such processing is governed by the StackKnack Data Processing Addendum ("DPA"), which is incorporated by reference and forms part of the agreement between StackKnack and the Operator. The DPA is available here.
2. INFORMATION WE COLLECT
2.1 Information You Provide to StackKnack
We may collect the following information when you interact with us directly:
- name
- email address
- phone number
- company name, role, and business details
- account credentials
- communications with us (such as support requests or emails)
2.4 Operator-Uploaded Product Content
When Operators use the Service, they may upload product-related content directly to the StackKnack platform ("Operator Content"), including:
- product names, titles, and descriptions;
- product images and photographs;
- specifications, variants (such as size, color, and condition), and categories;
- pricing and availability information.
Operator Content is licensed to StackKnack under Section 7.3 of the StackKnack Terms and Conditions and may be displayed in StackKnack's public-facing product catalogs and directories.
2.2 Operational and Usage Data
We automatically collect limited technical and operational data, including:
- IP address
- browser type and version
- device identifiers
- pages viewed and timestamps
- error logs and diagnostic data
- security and audit logs
2.3 Cookies and Similar Technologies
We use cookies and similar technologies to:
- operate and secure the Service
- maintain sessions
- remember preferences
- analyze usage and performance
You may control cookies through your browser settings. Some features of the Service may not function properly without cookies.
3. COMMERCE AND MARKETPLACE DATA (PROCESSED ON BEHALF OF OPERATORS)
When an Operator connects third-party commerce or point-of-sale platforms such as Shopify, eBay, Clover, or similar services ("Third-Party Commerce Platforms"), StackKnack may process certain data on behalf of the Operator, including:
- customer contact information (such as name, email address, phone number);
- shipping and billing addresses;
- order and transaction details (such as items purchased, quantities, prices, order timestamps, and fulfillment status);
- returns, refunds, cancellations, and adjustments;
- marketplace or platform identifiers (such as Shopify order IDs, eBay order IDs, or Clover transaction IDs);
- inventory, SKU, and location data associated with customer purchases.
This data is processed solely on the documented instructions of the Operator and for the purpose of providing and operating the Service.
4. INFORMATION WE DO NOT COLLECT
StackKnack does not intentionally collect or store:
- government identification numbers (such as Social Security numbers or passport numbers);
- payment card numbers or banking credentials;
- biometric, health, or genetic data;
- marital or family status information.
Payments are processed directly through Operators' connected Stripe accounts or other Operator-selected processors. StackKnack does not receive or store payment credentials.
5. HOW WE USE INFORMATION
We use personal data to:
- provide, operate, and maintain the Service;
- authenticate users and secure accounts;
- provide customer and technical support;
- enable inventory management, reconciliation, and operational workflows;
- provide analytics and reporting to Operators;
- monitor performance, reliability, and security;
- detect, prevent, and address fraud, abuse, or technical issues;
- comply with legal obligations and enforce agreements.
Use of Operator-Uploaded Product Content
StackKnack may use Operator Content (as defined in Section 2.4) to operate the Service and to display it in StackKnack's public-facing product catalogs, directories, and related services. Operators may request removal of their content from public catalogs at any time by contacting info@stackknack.com. Upon removal or account termination, StackKnack will remove Operator Content from public catalogs within 30 days. For details on the license Operators grant to StackKnack, see Section 7.3 of the StackKnack Terms and Conditions.
Use of Commerce and Customer Purchase Data
StackKnack processes commerce and customer purchase data obtained from Third-Party Commerce Platforms exclusively to support the Operator's business and the operation of the Service. StackKnack does not use Operator customer data to market StackKnack products or services directly to those customers, does not sell such data, and does not use it for cross-Operator advertising or profiling.
6. LEGAL BASES FOR PROCESSING (GDPR)
Where applicable, StackKnack processes personal data based on:
- performance of a contract;
- legitimate business interests (such as security and service improvement);
- compliance with legal obligations;
- user consent, where required by law.
When acting as a Data Processor, StackKnack processes personal data only on the instructions of the Operator.
7. DATA RETENTION
We retain personal data only for as long as necessary to:
- provide the Service;
- comply with legal obligations;
- resolve disputes;
- enforce agreements.
Operational logs and analytics data are generally retained for shorter periods unless required for security or compliance purposes.
8. DATA SHARING AND DISCLOSURE
We may share personal data:
- with service providers that support our operations (such as hosting, analytics, and security providers);
- with Operators, when processing data on their behalf;
- to comply with legal obligations or lawful requests;
- in connection with a merger, acquisition, or asset sale.
We do not sell personal data.
9. THIRD-PARTY SERVICES
The Service integrates with Third-Party Services selected by Operators, including commerce platforms, payment processors, logistics providers, and analytics tools.
StackKnack does not control and is not responsible for the privacy practices of Third-Party Services. We encourage you to review their privacy policies.
10. DATA SECURITY
We implement reasonable administrative, technical, and organizational safeguards designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. INTERNATIONAL DATA TRANSFERS
If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where data protection laws may differ. We take reasonable steps to ensure appropriate safeguards are in place.
12. YOUR PRIVACY RIGHTS
12.1 GDPR (EEA, UK, Switzerland)
You may have the right to:
- access, correct, or delete your personal data;
- restrict or object to processing;
- request data portability;
- withdraw consent;
- lodge a complaint with a data protection authority.
12.2 California Privacy Rights (CCPA/CPRA)
California residents may request:
- disclosure of personal data collected;
- deletion of personal data;
- correction of inaccurate personal data;
- limitation of processing of sensitive personal information.
StackKnack does not sell or share personal data for cross-context behavioral advertising.
Requests may be submitted to info@stackknack.com.
13. CHILDREN'S PRIVACY
The Service is not intended for individuals under the age of 13. StackKnack does not knowingly collect personal data from children.
14. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last Updated" date. Continued use of the Service constitutes acceptance of the updated policy.