Privacy Policy

At StackTie, we build and maintain custom HubSpot integrations as a service. This Privacy Policy explains what information we collect through this website and in the course of delivering that service, and how we use, store, and protect it. By using this website or engaging StackTie, you agree to the practices described in this policy.

• Contact and Inquiry Information: Your name, email address, company, and anything else you choose to share when you book a call, email us, or otherwise get in touch.
• Access to Your Systems: To build and maintain your integration, you grant us access to the specific systems involved (such as your HubSpot portal and the tools you want connected). We access only what the integration requires, and wherever possible we work within your own accounts and infrastructure. This access is governed by the agreement, and any NDA or DPA, that we sign with you.
• Credentials and Access Tokens: Where we hold API keys or OAuth tokens to operate an integration on your behalf, we store them securely and use them solely to run and maintain your integration.
• Website Usage: This website does not run advertising or cross-site tracking. Any basic, aggregate information about how the site is used is used only to keep it working and is not tied to your identity.

• To respond to your inquiry, schedule a call, and provide a scope and quote
• To design, build, deliver, and maintain the integration you engage us for
• To monitor your integration in production and alert on, diagnose, and fix failures
• To send you communications related to your engagement and our services
• To comply with legal obligations and enforce our Terms of Service

• We follow the Principle of Least Privilege, requesting only the minimum HubSpot and connected-tool scopes required to operate your integration
• Any credentials or access tokens we hold are encrypted at rest, and all data in transit is protected with TLS 1.2+ encryption
• Wherever possible we build and run your integration within your own infrastructure, so your data stays in your systems
• We do not retain the body content of your CRM records beyond what a running integration requires to operate
• We conduct regular reviews of our security practices and access controls

• Contact and inquiry data: Retained for as long as it is relevant to our relationship or needed to respond to you. Deleted on request.
• Credentials and access tokens: Retained only while needed to run your integration. Revoked and deleted when the engagement ends or on request.
• Operational logs and monitoring data: Retained for a limited period for troubleshooting and reliability, then purged.
• Engagement and payment records: Retained as required by applicable tax, accounting, and contractual obligations.
• Your record content: StackTie does not permanently store the body content of your CRM records. That data passes through only as needed to operate the integration and is not retained afterward.

StackTie is based in the United States. If you engage us or contact us from outside the US (including the European Economic Area or the United Kingdom), your information may be transferred to and processed in the US. We rely on standard contractual clauses and other appropriate safeguards to ensure your data is protected in accordance with applicable data protection laws.

In the event of a data breach that affects your personal data, we will notify affected clients via email within 72 hours of becoming aware of the breach. We will also notify the relevant supervisory authorities as required by applicable law. Our notification will include the nature of the breach, the data affected, and the steps we are taking to address it.

This website uses only essential cookies required for it to function. We do not use advertising cookies or cross-site trackers, and there are no customer accounts or logins on this site. You can manage cookie preferences through your browser settings.

Some browsers offer a “Do Not Track” (DNT) setting. StackTie does not currently respond to DNT signals, as there is no industry-standard interpretation of this signal. However, we do not track you across sites or sell your data to advertisers.

StackTie provides a business-to-business service and is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at michael@stacktie.com.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and, where appropriate, notify affected clients directly. We encourage you to review this policy periodically. Your continued use of this website or our services after changes are posted constitutes acceptance of the updated policy.