Privacy Policy

NuStack Digital Ventures LLC ("we," "us," or "our") operates Website Engine, a managed website hosting and monitoring platform designed for agencies and local businesses ("Operator Users"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website, dashboard, client portal, APIs, and related services (collectively, the "Platform").

By using the Platform, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not access or use the Platform.

1. Information We Collect

Operator Account Information

When you create an account and set up your agency on Website Engine, we collect information you provide directly, including:

• Business name, address, and contact details
• Account owner name and email address
• Organization and team member information

Client Site Data

When you add client websites to the Platform, we collect and store:

• Client business name, website URL, and contact email
• Subscription status and plan details
• Health scan results, performance scores, and SEO scores
• Uptime check history and alert logs
• Change requests submitted by clients

Client Portal Usage

When your clients access the read-only client portal via magic link, we collect:

• Email address used to request portal access
• Portal session timestamps
• Change requests and their content

Payment Information

Payment processing is handled entirely by Stripe. We do not store credit card numbers or other sensitive financial data on our servers. We retain only a reference to your Stripe customer ID and subscription status.

Usage Data

We automatically collect certain information when you access the Platform, including:

• Pages viewed, features used, and actions taken within the dashboard
• Device type, browser type, and operating system
• IP address and approximate geographic location
• Referring URLs and session duration

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Platform services: Operate the site monitoring system, conduct nightly health scans, provision subdomains, and manage client portals.
• Send alerts and notifications: Deliver uptime alerts, health score changes, and monthly reports to operators and clients as configured.
• Process payments: Manage subscription billing, upgrades, and cancellations.
• Improve the Platform: Analyze usage patterns to fix bugs, develop new features, and optimize performance.
• Communicate with you: Send account-related notifications, security alerts, and product updates.
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access to the Platform.

3. Third-Party Services

We rely on trusted third-party service providers to operate the Platform. These providers have access to information only as necessary to perform their functions.

• Firecrawl — Crawls and audits your clients' websites nightly. Website content and URLs are sent to Firecrawl to generate audit data.
• Google PageSpeed Insights — Analyzes website performance. Website URLs are submitted to Google's free API. Google Privacy Policy
• Stripe — Handles all payment processing and subscription management. Stripe Privacy Policy
• Clerk — Provides authentication and session management for operator accounts. Clerk Privacy Policy
• Resend — Delivers transactional email including portal invite links, uptime alerts, and monthly reports.
• Vercel — Hosts the web application and provisions client subdomains on *.nustack.digital. Vercel Privacy Policy
• Supabase — Provides the PostgreSQL database infrastructure where all Platform data is stored. Supabase Privacy Policy

4. Data Retention

• Operator account data is retained for as long as your account remains active, plus 30 days after cancellation to allow for data export.
• Health scan history is retained for 12 months from the scan date, then automatically purged.
• Client portal sessions expire after 24 hours by default.
• Deletion requests are processed within 30 days. Contact privacy@nustack.digital to request deletion.

5. Data Security

We implement industry-standard measures to protect your data:

• Encryption in transit: All data is transmitted over TLS. API calls to third-party services are also encrypted.
• Encryption at rest: Data stored in our database is encrypted at rest using AES-256 encryption.
• Row-level security: Our database enforces row-level security (RLS) policies to ensure each organization can only access its own data.
• Magic link auth: Client portal access uses short-lived JWT tokens delivered via email — no passwords stored.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Access your data at any time through the dashboard.
• Deletion: Request deletion of your account and all associated data. Requests are processed within 30 days.
• Export: Export your data through the dashboard or by contacting support.
• Correction: Update or correct your information directly through the dashboard.
• Opt out of marketing: Click the unsubscribe link in any marketing email or contact us directly. This does not affect transactional communications (billing, alerts, security).

To exercise any of these rights, contact us at privacy@nustack.digital.

7. Children's Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at privacy@nustack.digital.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last updated" date at the top of this page.
• For material changes, we will notify you via email to the address associated with your account.

Your continued use of the Platform after a revision constitutes acceptance of the revised Privacy Policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: privacy@nustack.digital

We aim to respond to all privacy-related inquiries within 10 business days.