StackThis.ai
List your product
PRIVACY CENTER

Your data should
stay under your control.

This page describes the marketplace data model we are actually building and gives signed-in customers direct privacy controls.

01

What we keep

Account email and display name, linked provider references, ID.me community eligibility status, saved apps, builder submissions, creator referral records, orders, memberships, product access, activity entries and sharing preferences, and limited security and audit events.

02

What we do not keep

StackThisAI does not store full card numbers, card security codes, ID.me identity documents, ID.me access tokens, crypto wallet private keys, seed phrases, raw IP histories, or device fingerprints.

03

Who processes payments

Stripe processes new marketplace purchases and recurring Stack+ billing, seller onboarding, and card payouts. Historical USDC payment and refund records may remain for support and financial recordkeeping; new USDC checkout is not offered.

04

Why records remain

We keep data only for marketplace operations, access delivery, fraud prevention, support, and required financial recordkeeping. A deletion request may not erase records we must retain for legal or payment obligations.

SECURITY MODEL

Small data surface. Strong boundaries.

  • Authentication and authorization are checked on the server.
  • ID.me uses state, nonce, PKCE, signed-token validation, short-lived attempts, and one-way provider references.
  • Admin actions require an explicit owner allowlist and are written to an audit log.
  • Payment and crypto credentials stay in protected runtime secrets, never browser code.
  • Signed webhooks, replay protection, idempotent checkout, request limits, and rate controls protect financial actions.
  • Higher-risk purchases pause before provider checkout and receive a documented human review; customers can export the assessment tied to their account.
  • Product makers remain responsible for their own app privacy notices and data practices.
ACTIVITY SHARING

Your activity, your audience.

Friends activity includes accepted gifts, earned achievements, published reviews, and approved product launches. Sharing starts private until you opt in. Choose Friends only, Public (any signed-in member), or Private, and change individual posts. Gift visibility respects both people’s choices. Choosing Private hides your existing activity; choosing a wider audience later does not republish it. Amounts, payment details, and gift messages never appear in the feed. Blocking and friendship changes affect access immediately. Manage sharing in Friends & gifts.

YOUR CONTROLS

Export, correct, restrict, or delete.

Exports are created on demand from your signed-in account. Deletion requests immediately deactivate your marketplace account and enter a human review queue. Permanent erasure is a separate reviewed process. Billing cancellation remains available from account controls.

Sign in to use privacy controls

Privacy controls · Updated October 7, 2026. Read the complete working notice in the StackThisAI Policy Center.