Privacy Policy
Last updated March 25, 2026. CalcStack is operated by CalcStack Ltd, registered in England and Wales at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. This policy explains how we collect, use, and protect your data under GDPR and applicable data protection laws.
Data we collect
When you create an account, we collect your name, email address, and company name. When you subscribe to a paid plan, payment details are processed securely by Stripe — we never store card numbers on our servers. When visitors interact with your embedded tools, we collect their email address (if lead capture is enabled), the inputs they enter, and the results generated. We also collect standard analytics data including IP addresses, browser type, device type, and pages visited.
How we use your data
We use your data to provide and improve the CalcStack service, process payments, send transactional emails (account confirmations, billing receipts, password resets), and communicate product updates. Lead data captured through your embedded tools belongs to you and is used only to deliver it to your connected integrations (CRMs, webhooks, email platforms). We do not sell, rent, or share your data or your leads with third parties for marketing purposes.
Cookies and tracking
We use essential cookies to maintain your session and preferences. We use Google Analytics (with IP anonymisation enabled) to understand how visitors use the CalcStack website. We use Vercel Speed Insights for performance monitoring. Embedded tools placed on your website use a minimal session cookie to track completion and prevent duplicate submissions — no cross-site tracking is performed.
Third-party services
CalcStack uses the following third-party processors: Stripe for payment processing, Supabase for database hosting and authentication, Vercel for application hosting, Google Analytics for website analytics, and Resend for transactional email delivery. Each processor is bound by their own privacy policies and data processing agreements. Data is stored in EU and UK data centers.
Your rights under applicable data protection laws
You have the right to access, correct, delete, or export your personal data at any time. You can request a copy of all data we hold about you, ask us to delete your account and associated data, or restrict how we process your information. To exercise any of these rights, email privacy@calcstack.net and we will respond within 30 days as required by GDPR and applicable data protection laws.
Data retention
Account data is retained for as long as your account is active. Lead data captured through your tools is retained for 12 months after capture, or until you delete it from your dashboard. Analytics data is aggregated and anonymised after 26 months. When you delete your account, all personal data is permanently removed within 30 days.