Privacy Policy
Last updated: August 4, 2026
The controller of personal data processed through https://stackly.tech is NEXORITA UAB, company code 308061951, V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania ("Stackly", "we", "us"). This notice describes what we collect, why, and what you can do about it, in line with the EU GDPR.
1. What we collect
• Account details — name, email, hashed password, any API keys you generate.
• Billing details — the packs you buy and the transactions that go with them. Card numbers themselves live with our payment providers, not on our servers.
• Working material — prompts, briefs, files, images and audio you submit (Input), and everything the Service generates for you (Output).
• Usage and device signals — which tools you open, tokens spent, IP address, browser, operating system and approximate location derived from IP.
• Support conversations — the tickets you raise and our replies.
• Cookies — detailed in the Cookie Policy.
A general request: keep sensitive personal data — health, biometric, government identifiers — out of the material you feed into the tools.
2. Why we process it (GDPR legal bases)
• Running the platform, processing your Input into Output and managing your account — performance of a contract.
• Charging you and keeping the tax and accounting records the law requires — contract and legal obligation.
• Support, security, abuse and fraud prevention, and product improvement — legitimate interests.
• Non-essential cookies and marketing emails — consent, which you can withdraw at any time.
We do not use your Input or Output to train, fine-tune or benchmark our own AI models.
3. Sharing with third parties
To fulfil your requests we route Input to the third-party AI providers behind each tool (for example the vendors of the reasoning, image, audio and video models we call). Beyond that, personal data is shared only with the vendors that help us operate the platform — hosting, email delivery, analytics, customer support, payment processing — each acting as our processor under written contract. We do not sell personal data. Public authorities receive information only where a valid legal request obliges us to hand it over.
4. Transfers outside the EEA
Where a processor is located outside the European Economic Area, transfers are protected by the safeguards that GDPR recognises — typically the EU Standard Contractual Clauses, supported by a transfer impact assessment, or an adequacy decision covering the destination country.
5. How long we keep it
Account records are kept while your account is active and for a short wind-down window afterwards. Invoicing and other accounting records are retained for the period required by Lithuanian tax and company law (up to ten years). Content, telemetry and support logs are retained only for as long as they remain useful for the purpose that justified collecting them.
6. Security
We use industry-standard measures — encryption in transit and at rest, encrypted storage of secrets, role-based access controls, logging and monitoring. No online service is impregnable, but where a data breach affecting you occurs and the law requires notification, we notify you and the supervisory authority within the deadlines GDPR sets.
7. Your rights
Under the GDPR you can ask for access to your data, corrections, erasure, restriction, portability, or object to particular processing, and withdraw any consent you have given. Send requests to [email protected] — we reply within one month. Complaints go to Lithuania's State Data Protection Inspectorate (VDAI, https://vdai.lrv.lt) or the data-protection authority in the EU country where you live or work.
8. Children
The Service is intended for adults; we do not knowingly collect personal data from anyone under 18. If a minor has submitted personal data to us, contact us and we will remove it.
9. Updates to this notice
We refresh this notice as the platform and the rules around it evolve. The "Last updated" date on the cover tracks the current version, and we will flag material changes in advance.
Contact
NEXORITA UAB
· Company code 308061951
· V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania
· +370 666 53695