Legal

Privacy Policy

Last updated: August 23, 2026

Stack Matrix ("we", "us", or "our") operates the Stack Matrix platform available at stackmatrix.app. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our services.

1. Information we collect

Account information

When you register, we collect your email address and, if you use social sign-in, the basic profile information supplied by that provider. We use this to create and manage your account.

Workspace data

Stack Matrix stores the data you enter in your workspace, including:

Names, URLs, costs, billing frequencies, and renewal dates of apps you add
Canvas layouts — node positions, groups, and connections
Sticky notes, tags, and ownership information
Documents and pages you create within the platform

Credentials

If you choose to store credentials (passwords, API keys, tokens), they are encrypted server-side using AES encryption before being written to the database. We cannot read the plaintext values of your stored credentials.

Usage data and analytics

We use PostHog to collect anonymous usage data such as page views, feature interactions, and session information. This helps us understand how the product is used and improve it. PostHog data is pseudonymous and linked to your user ID, not your name. If you deny cookie consent, analytics tracking is not initialised.

Cookies and local storage

We use:

Session cookie — set by Supabase to keep you logged in (essential)
Theme cookie — stores your dark/light mode preference (essential)
Analytics cookies — PostHog session and identity cookies (only if you accept)
Cookie consent — stored in localStorage to remember your cookie choice

2. How we use your information

To provide and operate the Stack Matrix platform
To authenticate you and maintain the security of your account
To send transactional emails such as workspace invitation notifications
To analyse usage patterns and improve the product (only with your consent)
To respond to support requests you submit

3. Data storage and security

Your data is stored in Supabase, a managed PostgreSQL database hosted on AWS infrastructure. Row-level security policies ensure each user can only access their own workspaces and data.

Credentials are encrypted with AES before storage. Workspace data is protected by authentication — unauthenticated requests are rejected at the middleware layer.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party services

Supabase — database, authentication, and file storage. Privacy policy
Google OAuth — optional sign-in method. Privacy policy
PostHog — product analytics (with your consent). Privacy policy
logo.dev — used to fetch app logos by domain. Only the domain name of apps you add is sent.

5. Data retention

We retain your data for as long as your account is active. If you delete your account, your workspace data, app instances, canvas configurations, credentials, and documents are permanently deleted. Deletion is irreversible.

6. Your rights

Depending on your location, you may have rights to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and data
Object to or restrict certain processing
Withdraw cookie consent at any time (clearing your browser's localStorage will reset your preference)

To exercise any of these rights, contact us at hello@stackmatrix.app.

7. Children

Stack Matrix is not directed at children under 16. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notice. Continued use of Stack Matrix after changes constitutes acceptance of the updated policy.

9. Contact

Questions about this Privacy Policy? Reach us at hello@stackmatrix.app.