Privacy Policy

This policy covers the public marketing website at pivotstack.io and any pages, forms, or waitlist sign-ups operated under that domain. It does not cover bespoke client engagements, which are governed by separate written agreements.

By accessing the site you acknowledge this policy. If you do not agree, please discontinue use of the site.

PivotStack LLC is a software studio organized under the laws of the State of New York, United States, with operations based in New York City. For the purposes of the European General Data Protection Regulation (GDPR), we act as the data controller for information described in this policy.

We collect two categories of information: information you provide to us directly, and information collected automatically when you visit the site.

• To operate, secure, and improve the site.
• To respond to inquiries, waitlist sign-ups, and project requests.
• To send transactional communications, such as a reply to your email or a waitlist confirmation.
• To detect, prevent, and address technical issues, fraud, or abuse.
• To comply with legal obligations, enforce our terms, and protect our rights.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:

Legitimate interests

Operating, securing, and improving the site; understanding aggregate usage; protecting against fraud and abuse.

Consent

Where required by law (for example, for any non-essential cookies), we rely on your consent and you may withdraw it at any time.

Performance of a contract

Where you contact us about engaging the studio, processing is necessary to take steps at your request prior to entering into a contract.

Legal obligation

Where processing is necessary to comply with applicable law.

We use a small number of vetted infrastructure providers to operate the site. These providers act as processors on our behalf and are bound by contractual confidentiality and data-protection obligations. We disclose them in the interest of transparency.

Vercel Inc.

Website hosting, edge delivery, and request logging (IP address, user agent, request metadata). Privacy notice ↗

Vercel Web Analytics

Aggregated, cookieless analytics — anonymized page-view counts and referrers used to understand site performance. Privacy notice ↗

Google Fonts (Google LLC)

Self-hosted web font delivery via the Next.js font pipeline (Geist Sans / Geist Mono). Requests served from our own domain after build, so no end-user data is sent to Google during page loads. Privacy notice ↗

We do not share personal information with third parties for their own marketing or advertising purposes.

PivotStack LLC does not sell, rent, or trade your personal information for monetary or other valuable consideration. We do not share your personal information for cross-context behavioral advertising. If our practices ever change, we will update this policy and provide the disclosures and opt-out rights required by applicable law before any such activity begins.

Most modern browsers allow you to control cookies through their settings. Disabling cookies will not prevent you from using the site, but may affect preference persistence such as theme selection. We do not respond differently to Do-Not-Track signals at this time; given that we do not run cross-site advertising or behavioral tracking, the practical effect is the same.

We retain personal information only for as long as is reasonably necessary for the purpose for which it was collected, to comply with our legal obligations, or to resolve disputes and enforce our agreements. Email correspondence is typically retained for the lifetime of the business relationship and a reasonable archive period afterward. Aggregated, non-identifiable analytics may be retained indefinitely.

We use industry-standard administrative, technical, and physical safeguards to protect information against loss, misuse, and unauthorized access. No internet-based service can be perfectly secure; we encourage you to use a strong, unique password for any service that links to ours and to report any suspected vulnerability to support@pivotstack.io.

The site is not directed to children under the age of thirteen, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

We are based in the United States. If you access the site from outside the United States, information we collect may be transferred to, processed in, and stored in the United States or other jurisdictions where our service providers operate. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for international transfers.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated through the site or other appropriate channels.

If you have any questions, comments, or requests about this Privacy Policy or our practices, please contact us.