Privacy Policy

1. Data we collect

• Account data: name, email address, password (stored encrypted), workspace name.
• Content you add: clients, projects, stages, updates, files, contacts, notes and comments.
• Your clients' data: names and email addresses of people you invite or send updates to. You confirm you have the right to share this data with us.
• Payment data: payments are processed by Razorpay. We do not store card, UPI or bank details; we receive only the payment status, amount and a transaction reference.
• Technical data: IP address, browser and device type, and logs needed to run and secure the service.

2. Why we use it

To create and run your account, deliver the service, send account and project emails, process payments, provide support, prevent fraud and abuse, and meet legal obligations. We do not sell your personal data, and we do not use your content to advertise to you.

3. Consent and your rights

By creating an account you consent to this processing. Under the DPDP Act, 2023 you may access, correct or erase your personal data, withdraw consent, and nominate another person to exercise your rights. Withdrawing consent may mean we can no longer provide the service. Email the Grievance Officer below to make a request.

4. Sharing

We share data only with service providers who help us run Stagepost, under contract and only as needed: hosting (Vercel), database and storage (Supabase), email delivery (Resend) and payments (Razorpay). We may also disclose data when required by Indian law or a lawful order. Some providers may store data outside India, with appropriate safeguards.

5. Retention

We keep your data while your account is active. After you delete your account we erase it within 30 days, except where the law requires us to keep records (for example, payment and tax records).

6. Security

We use encryption in transit (HTTPS), encrypted passwords, access controls that keep each workspace's data separate, and reasonable security practices under the IT Act. No system is perfectly secure; we will notify you and the authorities of a data breach as the law requires.

7. Cookies

We use only essential cookies to keep you signed in and secure. We do not use advertising cookies.

8. Children

Stagepost is for businesses and is not meant for anyone under 18.

9. Changes

We may update this policy. We will post the new version here and, for important changes, tell you by email.

10. Grievance Officer

We will acknowledge complaints within 24 hours and resolve them within 15 days.