Legal

Privacy Policy

Last updated: September 2026

1. Who We Are and Your Role

Configuro is operated by Stackly Labs ("we", "us", "our"). This policy explains how we collect and use data. Under the EU General Data Protection Regulation (GDPR), when you use Configuro to collect information from your own customers, you are the "Data Controller" and we act as your "Data Processor."

2. Information We Collect

• Account Data: Name, email, hashed password, and organization details required to provision your account.
• Application Data: Product families, pricing rules, and content you upload to operate your configurator.
• Customer Data: Contact information and quote details submitted by your end-customers through the Service.
• Financial Data: Handled entirely by our secure payment processor (Stripe). We only retain a subscription reference token, not your raw credit card data.
• System Data: Standard operational logs (login activity, performance metrics) required to secure and improve the platform.

3. How We Use Information

We use collected data strictly to:

• Operate, secure, and render the Service;
• Deliver transactional communications (password resets, quote notifications, billing alerts);
• Process subscription payments;
• Provide customer support. We do not sell personal data, nor do we use your proprietary configurations or customer data to train AI models.

4. Subprocessors

To provide the Service, we utilize trusted third-party service providers ("Subprocessors") restricted by strict data protection agreements. These include:

• Cloud Infrastructure & Database Hosting providers
• Secure Payment Processors (Stripe)
• Transactional Email Delivery services
• AI Partners (utilized exclusively for on-demand feature generation; your data is not used for their model training). A specific list of subprocessors is available to active customers upon request.

To the extent we process any personal data on your behalf where you are the Data Controller, our Data Processing Agreement applies to such processing and is incorporated into these Terms. The DPA, including the full list of authorized Subprocessors, is available to signed-in account users — log in or sign up to view it.

5. Data Retention

We retain your data while your account is active. Upon cancellation, data is held for a brief grace period to allow for potential reactivation, after which it is permanently deleted. You may configure custom auto-deletion periods for your end-customer quote data within your account settings to meet your own compliance requirements.

6. Cookies

We use strictly necessary cookies and local storage to authenticate users, maintain sessions, and secure the application. We do not use third-party advertising or cross-site tracking cookies.

7. Your Privacy Rights

Depending on your jurisdiction (including the EU and various US states), you have the right to access, correct, export, or request the deletion of your personal data. To exercise these rights, or if you have privacy-related inquiries, please contact us.

8. Changes to this Policy

We may update this Privacy Policy to reflect regulatory changes or service updates. We will notify account administrators by email prior to any material changes taking effect.

9. Contact

Questions about this policy, or a data request? Email hello@configuro.net.