Privacy & cookies.

1. Who we are

Stacky Suite is a product of The Calydo Pte. Ltd., a company registered in Singapore. When this policy says “we” or “us”, that's who we mean. You can reach us any time at hello@thecalydo.com.

2. What we collect

When you run an audit

We store the SaaS tools you selected, the seats and tiers you entered, and the audit report we generated for you. This lets us load a shareable permalink and helps us improve the catalog and the engine over time. We do not collect company names, employee names, or login credentials for any tool.

When you give us your email

If you ask us to email you the report, we store your email address against that audit. If you tick the “send me updates” box, we also add you to a separate newsletter list. You can unsubscribe from the newsletter at any time via the link in any email we send.

Technical data

Like every web service, our servers receive your IP address and basic request metadata (browser, page visited, timestamps). We use this to keep the service secure, rate-limit abuse, and understand which pages people actually use.

3. What we don't collect

• We do not require sign-up, so we hold no passwords.
• We do not ask for payment information.
• We do not run third-party advertising trackers.
• We do not sell or rent your data to anyone.

4. Cookies

We use a minimal set of cookies, all set by us or our hosting provider:

• Essential cookies— things like keeping you on the same Vercel server during a session. These cannot be disabled without breaking the site.
• Analytics cookies— we use Vercel Analytics which uses cookies to count unique visitors and page views. No personal profile is built. No data is sold or shared with third parties for advertising.

We do not use any advertising, social-media, or cross-site tracking cookies. You can disable cookies entirely in your browser; the audit will still work, but Vercel Analytics will see you as a fresh visitor on each visit.

5. Who we share data with

We use a small number of trusted service providers:

• Vercel hosts the app and runs our analytics.
• Supabase stores audit records and email addresses.
• Resend sends the audit email when you ask us to.
• Sanity stores the tool catalog content.

Each of these processes data on our instructions and is bound by their own contractual privacy commitments to us. We do not share data with anyone else.

6. How long we keep your data

Audit records: kept indefinitely while Stacky Suite is in beta, so permalinks keep working. Once we exit beta we will publish a clear retention schedule and offer deletion on request.

Newsletter subscribers: kept until you unsubscribe.

Server logs: rotated by our hosts on a 30-day cycle.

7. Your rights

If you're in the EU, UK, or any other jurisdiction with data-rights laws (and even if you're not, honestly), you have the right to ask us to:

• Show you what data we hold on you.
• Correct it if it's wrong.
• Delete it.
• Stop using it for marketing.

Email hello@thecalydo.comwith the email address you used. We'll respond within 30 days, usually much faster.

8. Security

All traffic is encrypted in transit (TLS). Our database has row-level security enabled and is only accessible to our server-side code with a secret key. We are a small team, and treat your data the way we'd want our own treated.

If you believe you've found a security issue, please email hello@thecalydo.comwith the subject line “Security”. We'll respond promptly and won't pursue legal action against good-faith researchers.

9. Children

Stacky Suite is intended for use by businesses and adults. We do not knowingly collect information from anyone under 16.

10. Changes to this policy

We'll update the “Last updated” date at the top of this page when we make material changes. If a change is significant, we will also notify newsletter subscribers by email.

11. Contact

For any privacy question, email hello@thecalydo.com. A real human will read it.