Privacy Policy

• Account info — email, name, profile photo if you upload one. We use this to identify you across Stack apps.
• Content you create — notes (Slate), tasks & projects (Momentum), meeting transcripts (Scribble), bookings (Sync), messages (Chat), recordings (Stream). We store this so the apps work.
• Connected services — if you grant calendar access, we read meeting metadata to schedule the Scribble bot. If you connect Google for sign-in, we receive your email and basic profile.
• Usage telemetry — page loads, feature clicks, error reports. We use this to fix bugs and prioritize what to build next. No cross-site tracking, no ad networks.
• Billing info — handled by Stripe. We never see your full card number.

We don't collect device contacts, microphone audio outside of the times you explicitly trigger it (Speak Bar push-to-talk, Scribble bot in a meeting), browsing history outside of Stack, or location data. We don't use third-party advertising trackers anywhere on this site or in any Stack app.

• To run the apps you signed up for.
• To process your content with our AI providers (Groq for transcription, Anthropic for summarization) — under processor agreements that prohibit them from training on or retaining your content.
• To send transactional email (sign-in links, summary digests, billing receipts).
• To investigate abuse and protect the service.
• If you opt in: occasional product update emails. You can unsubscribe with one click; transactional email stays on.

We use a small set of subprocessors to run Stack:

• Supabase — primary database, auth, file storage.
• Vercel — web hosting and edge delivery.
• Stripe — payment processing.
• Resend — transactional email.
• Groq — speech-to-text for Speak Bar & Scribble (zero-retention).
• Anthropic — AI summarization for Scribble (zero-retention).
• Fly.io — Scribble's meeting bot infrastructure (joins your Zoom/ Meet/Teams call, captures audio, returns the recording).
• Deepgram — fallback speech-to-text with diarization for Scribble when active-speaker scraping returns empty windows.

We never sell or rent personal data. We share content with other users only when you explicitly do so (sharing a Stream recording, inviting someone to a Chat workspace, etc.).

When you connect a Google account to Scribble — Stack's meeting capture product — or sign in to Stack with Google, Stack requests the following OAuth scopes:

• openid, email, profile — to identify your Google account and link it to your Stack profile.
• https://www.googleapis.com/auth/calendar.readonly — to read your calendar events so Scribble knows which meetings to join. We read event titles, times, attendee lists, and meeting links (Zoom, Google Meet, or Microsoft Teams URLs). We only read calendars you have explicitly connected.
• https://www.googleapis.com/auth/calendar.events — to add the Scribble bot as an invited attendee on meetings you have chosen to record. This is required so the bot is admitted through Google Workspace meeting policies that reject anonymous guests. We never create, modify, or delete any other calendar event.

Stack's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not allow humans to read it (except where you explicitly grant permission, for support, or as required by law), and do not transfer it to other parties except as needed to provide and improve Scribble's user-facing features and as described in this Privacy Policy.

You can disconnect your Google account at any time from Scribble → Settings → Integrations. When you disconnect, we revoke our access tokens with Google and delete cached event metadata within 24 hours. Recorded meeting transcripts and summaries created before disconnection are retained according to the rules described in section 6.

Stack data is hosted in the United States. We use TLS in transit and AES-256 encryption at rest for sensitive fields. Audio for Speak Bar is processed in-flight and not stored after the transcript is returned. Scribble keeps meeting audio for 30 days for summary regeneration, then deletes it automatically; you can shorten this window in settings.

• Export — every Stack app has an export option in settings.
• Delete — you can delete your account from your profile. We honor deletion requests within 30 days; backups expire within 60.
• Access & correction — email privacy@trystackapps.com to request a copy of everything we have on you, or to fix inaccurate data.
• Opt out of marketing — every product email has an unsubscribe link.

If you're in the EU, UK, or California, you have additional rights under GDPR/CCPA (objection to processing, data portability, lodging a complaint with a supervisory authority). Same email — we'll honor them.

Stack isn't designed for kids under 13 and we don't knowingly collect data from them. If you believe we have, email privacy@trystackapps.com and we'll delete it.

We'll update this page when our practices change. If a change is material, we'll email you at least 30 days before it takes effect.

Privacy questions: privacy@trystackapps.com.
Security reports: security@trystackapps.com.
Mail: Stack Apps Inc., San Francisco, CA.