Privacy Policy

1. Introduction

At Opstak Technologies, we prioritize the confidentiality and integrity of your data. This Privacy Policy details how we collect, use, process, and protect your personal and corporate information when you use our website, infrastructure management services, CI/CD automation tools, and strategic consulting services.

2. Information We Collect

• Account Information: Name, professional email address, phone number, and physical billing addresses.
• Technical Data: IP addresses, browser types, machine identifiers, and interactions with our application programming interfaces (APIs) for logging and security.
• Infrastructure Metadata: For active clients, we may temporarily ingest telemetry, cloud logs, and metrics (AWS, GCP, Azure) to provide monitoring and observability services. We explicitly DO NOT collect or store your application's raw user database data.

3. How We Use Your Data

We process your data exclusively to:

• Deliver, scale, and maintain your requested cloud architecture and DevOps services.
• Authenticate identities and prevent malicious or unauthorized access to our portals.
• Send critical alerts regarding server downtime, infrastructure scaling, or security updates.
• Analyze aggregated traffic patterns to improve our platform performance.

4. Third-Party Data Sub-Processors

To provide enterprise-grade infrastructure, Opstak utilizes trusted third-party services. We only share the absolute minimum data required with these vendors, who are bound by stringent data processing agreements (DPAs). These may include:

• Cloud Hosting Providers (AWS, Google Cloud, Microsoft Azure).
• Communication tools (Slack, email dispatchers).
• Payment Processors (Stripe, etc.) for securely handling transaction records.

We do not sell, rent, or lease your personal information to marketing conglomerates.

5. Data Security & Retention

All traffic between your browser and our services is secured via TLS 1.3 encryption. Internally, we utilize strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) to ensure that only authorized Opstak architects have access to client configurations.

We retain your information only for as long as your account remains active or as needed to comply with our global legal obligations.

6. Your Data Rights

Under global data privacy laws including the GDPR and CCPA, you have the right to request access to, correction of, and deletion of your personal data stored within our systems. You also retain the right to restrict the processing of telemetry data, though this may impede our ability to provide Active Monitoring services.