Privacy Policy

We collect the following categories of information:

Account & Profile Data

• Name, email address, and password (hashed) when you register
• Profile photo and display name if you choose to provide them
• OAuth tokens when you connect GitHub, GitLab, or Bitbucket
• Company name and team members you invite

Billing & Payment Data

• Payment method details are collected and stored by Stripe, we never see your raw card number
• Billing address and VAT/tax ID for invoice purposes
• Transaction history and invoice records

Usage & Technical Data

• IP address, browser type, and operating system
• Pages visited, features used, and time spent on the platform
• Deployment logs, build logs, and error traces generated by your services
• Resource consumption metrics (CPU, memory, bandwidth)

Communications

• Support tickets and messages you send us
• Feedback, survey responses, and beta programme sign-ups

We use the information we collect to:

• Provide, operate, and maintain the StackBlaze platform
• Process payments and send billing notifications
• Send service-critical communications (downtime, security alerts)
• Respond to support requests and troubleshoot issues
• Analyse usage patterns to improve the product
• Send product updates and marketing emails, you can opt out at any time
• Comply with legal obligations and enforce our Terms of Service
• Detect, investigate, and prevent fraud and abuse

We rely on the following legal bases for processing under GDPR: contract performance, legitimate interests, consent (for marketing), and legal obligation.

We share your data only in these circumstances:

Service Providers

We use trusted third-party processors to operate the platform, including Stripe (payments), AWS (infrastructure), Datadog (observability), Intercom (support), and PostHog (analytics). All processors are bound by Data Processing Agreements.

Legal Requirements

We may disclose data if required by law, court order, or to protect the rights and safety of StackBlaze, our users, or the public.

Business Transfers

If StackBlaze is acquired or merges, your data may be transferred as part of that transaction. We will notify you beforehand with the option to delete your account.

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the platform is used. We use only essential and analytics cookies , no advertising or cross-site tracking cookies.

• Essential cookies: required for authentication and security; cannot be disabled
• Analytics cookies: help us understand feature usage; you can opt out in account settings

We retain your data for as long as your account is active and for a period thereafter as required by law or our legitimate interests:

• Account data: retained while your account is active, deleted within 30 days of account deletion request
• Payment records: retained for 7 years for tax and accounting compliance
• Deployment and access logs: retained for 90 days, then purged
• Support conversations: retained for 3 years
• Anonymised analytics data: may be retained indefinitely

Depending on your location, you may have the following rights:

• Access: request a copy of all personal data we hold about you
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data (“right to be forgotten”)
• Portability: receive your data in a machine-readable format
• Restriction: limit how we process your data in certain circumstances
• Objection: object to processing based on legitimate interests
• Opt-out of marketing: unsubscribe from any email at any time

To exercise any right, email us at privacy@stackblaze.com. We will respond within 30 days. EU/UK residents may also lodge a complaint with their local data protection authority.

StackBlaze is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If we discover we have collected such data, we will delete it promptly. Contact us at privacy@stackblaze.com if you believe we have collected data from a child.

StackBlaze is headquartered in the United States. If you access the platform from the EU, UK, or other regions with data protection laws, your data may be transferred to and processed in the US.

We rely on Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EU/EEA, and the UK Addendum for UK transfers. Our Data Processing Agreement (DPA) is available for download and execution by enterprise customers.

We may update this Privacy Policy from time to time. We will notify you by email and post the new version on this page with an updated “Last updated” date. Continued use of StackBlaze after changes constitutes acceptance of the revised policy. For material changes, we will provide at least 30 days' notice.

For privacy-related questions or requests, contact our Data Protection team:

• Email: privacy@stackblaze.com
• Address: StackBlaze, Inc., 1234 Cloud Drive, San Francisco, CA 94107, USA