Privacy Policy

Effective Date: 1 January 2025 • Last Updated: 11 August 2026

Credstacks ("we", "us", "our") is dedicated to protecting the privacy, confidentiality, and security of our users and clients. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of personal data and business information when you visit credstacks.com or utilize any of our business software solutions.

1. Information We Collect

We collect information to deliver efficient business software services, respond to inquiries, and enhance platform security:

1.1 Information You Provide Directly

  • Account & Registration Details: Name, work email address, company name, phone number, job title, and billing contact.
  • Inquiries & Demo Requests: Information submitted via contact forms, demo booking schedules, or live support conversations.
  • Customer Business Data: Customer relationship data, employee records, transaction logs, and inventory data entered by your authorized users into Credstacks software modules.

1.2 Automatically Collected Data

  • Technical Identifiers: IP address, browser type, operating system version, referring URLs, and session timestamps.
  • Usage Telemetry: Feature access frequencies, system error logs, and performance metrics collected via aggregated analytics tools such as Vercel Web Analytics to maintain platform reliability.

2. How We Use Your Information

We process collected data exclusively for legitimate business and operational purposes, including:

  • Provisioning, hosting, maintaining, and updating Credstacks CRM, ERP, HRMS, and E-commerce instances.
  • Powering our conversational AI support bot to answer user questions, track sales follow-ups, and draft communications at your direct request.
  • Responding to customer support tickets, sales inquiries, and technical support requests.
  • Enforcing role-based access controls, authenticating users, and preventing unauthorized access or security breaches.
  • Fulfilling statutory tax compliance and legal record-keeping obligations.

3. Software Architecture & Technology Foundation

Credstacks builds, customizes, hosts, and enhances specialized business applications. Our technology architecture incorporates and connects with open-source software frameworks, specifically the Frappe framework and related software modules developed by Frappe Technologies (https://frappe.io).

Our solutions leverage the architectural foundation and database models established by the Frappe open-source ecosystem (https://frappe.io), enabling robust data isolation, granular permission control, and complete customer data portability without vendor lock-in.

When you use Credstacks services, your organizational data is stored in dedicated, secure database instances with strict access boundaries ensuring complete isolation from other organizations.

4. Data Ownership & Processing Principles

You retain 100% full legal ownership of all data, records, documents, and content uploaded or stored within your Credstacks account. We operate strictly as a data processor on your behalf. We will never sell, rent, monetize, or use your private business data for third-party advertising or commercial training without your explicit authorization.

5. Data Security Standards

We maintain comprehensive technical, organizational, and physical security measures:

  • Encryption Standards: AES-256 encryption for data at rest and TLS 1.3 encryption for all network traffic in transit.
  • Access Controls: Multi-factor authentication support and strict role-based permission hierarchies.
  • Regular Backups: Automated encrypted backups with point-in-time recovery capabilities.
  • Audit Logging: Granular system logs tracking user modifications and administrative actions.

6. Third-Party Service Providers

We engage trusted infrastructure and communication providers to operate our cloud environment, including cloud server hosting, database infrastructure, telephony connectors, and web analytics (such as Vercel Analytics). All third-party vendors are bound by strict data protection agreements ensuring equivalent security standards.

7. Data Retention & Deletion

We retain your business data for the active duration of your subscription term. Upon account termination or written request, you may export your data in standard database formats, after which all customer instances are securely expunged in accordance with our deletion protocols.

8. Your Rights & Choices

Depending on your geographic jurisdiction (such as GDPR in the EU/UK or CCPA/CPRA in California), you have the right to access, rectify, port, or request the deletion of your personal data held by Credstacks. You can exercise these rights by contacting us directly.

9. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data management practices, please contact our data protection team: