Privacy Policy

This policy explains what information Oakstack collects, why, and what we do with it. Oakstack is operated by Sasquatch Siding ("we"). Questions: support@oakstack.dev.

Information about you (our customer)

• Account details: your email address, your workspace name, and who is a member of it.
• Billing: handled by Stripe. We store your Stripe customer and subscription ids and plan, never your full card number.
• Usage and logs: API requests, usage counts, and the logs of what each job, webhook, PDF, and email did, so you can see them and we can run and protect the service.
• Cookies: only the ones needed to keep you signed in. No advertising or tracking cookies.

Data you send through Oakstack

To do its job, Oakstack processes content you send it: emails and their recipients' addresses, webhook payloads, PDF content, and data in your scheduled requests. For this content you are the controller and we act on your instructions. We use it only to provide the service to you (send it, forward it, render it, show it in your logs) and to prevent abuse. We keep it for your plan's log retention period (7 days on Free and Builder, 30 days on Studio); generated PDF files are kept for 1, 7, or 30 days depending on the plan, and email attachments are deleted once the email has been sent. Addresses on your suppression list are kept until you remove them (where allowed) or close your account, so we never email someone who bounced or complained.

Who else handles data

We use these providers to run Oakstack, and they only process data to provide their service to us:

• Vercel (hosting the website and API)
• Supabase (database, file storage, and sign-in)
• Amazon Web Services (sending and receiving email)
• Stripe (payments)

We don't sell personal information, and we don't use your data or your recipients' data for advertising.

Security

Data is encrypted in transit, API keys are stored only as hashes, each workspace's data is isolated from every other workspace, and files are private and shared only through short-lived links.

Your choices

You can see and delete most of your data from the dashboard. To get a copy of your data, correct it, or close your account and delete it, email support@oakstack.dev. If you received an email sent through Oakstack and want it to stop, contact the sender, or tell us and we'll make sure that sender can't email you again through Oakstack.

Children

Oakstack is a service for businesses and developers, not for children under 16.

Changes

If we change this policy in a way that matters, we'll update the date above and tell account owners by email.