Privacy Policy

• a.Contact info you provide: name, email, company name, Store URL
• b.Booking data via Cal.com when you book a call (name, email, time)
• c.Payment data via Stripe when you purchase (we do not store credit card numbers; Stripe handles all payment data)
• d.Audit data: when we audit your Store, we test its public pages by hand and with our own tooling, and we keep the findings
• e.Communication: emails and chat messages between us, plus any notes from calls you book with us

• a.To deliver the audit service you purchased
• b.To communicate about your project
• c.To bill and account for purchases
• d.For legal and tax compliance

• a.Stripe (payment processing), stripe.com/privacy
• b.Wise (receiving Client payments by bank transfer), wise.com/privacy-policy
• c.Google Workspace (email and calendar), policies.google.com/privacy
• d.Cal.com (booking), cal.com/privacy
• e.Vercel (website hosting and analytics), vercel.com/legal/privacy-policy

We do not sell or share your data with marketing companies.

• a.Active Client data: while the engagement is ongoing
• b.Past Clients: 7 years (Portuguese tax record retention)
• c.Marketing leads who didn't convert: deleted after 12 months of no contact
• d.Stripe transaction records: per Stripe's retention (7 years US tax law)

• a.Access: request a copy of data we hold about you
• b.Correction: ask us to correct inaccurate data
• c.Deletion: ask us to delete your data (we will, unless legally required to retain it)
• d.Portability: get your data in a machine-readable format
• e.Opt-out of marketing: reply to any of our emails asking us to stop, and we stop

Email hello@shieldstack.pro to exercise any of these rights.

We do not use tracking or advertising cookies. Our website uses functional cookies only (none currently). No cookie banner is displayed because none is required for our use.

We send cold emails to businesses that fit our target customer profile (Shopify Stores, US, $1M+ in revenue). Reply asking us to stop and we stop, permanently. We do not buy email lists.

We use industry-standard security: HTTPS everywhere, password manager, 2FA on all admin accounts, encrypted backups.

Our service is for businesses. We do not knowingly collect data from anyone under 18.

We may update this policy. Material changes will be notified via email to active Clients. The effective date above will be updated.

ShieldStack
hello@shieldstack.pro
Operated from Portugal. Data controller: Bruno Ponce de Leão.