Privacy Policy

01Overview

Stack18 (“Stack18,” “we,” “us,” or “our”) provides the Agentic SDLC platform, pre-built technology solutions, technology transformation services, Enterprise Transformation Pods and Stack18 Ventures (together, the “Services”). This policy explains what personal information we collect, how we use and share it, and the choices you have.

It applies to visitors of stack18.com, people who contact us or join our waitlist, and representatives of organizations that work with us. The self-serve Agentic SDLC platform is not yet generally available; additional terms will apply when it launches.

Pre-built solutions and Enterprise engagements are deployed on the customer’s own servers or cloud accounts. For information that lives in a customer’s environment, the customer decides how it is used and Stack18 acts only on the customer’s instructions under the applicable agreement, which prevails over this policy where they conflict.

02Information we collect

We collect information you give us, information collected automatically, and information made available to us during an engagement.

Information you provide

• Contact details — name, work email, phone number and company, when you use a contact, quote or waitlist form.
• Quote requests — the solution and modules you select, your estimated total and any message you write.
• Communications — emails, calls and meetings with our team.
• Engagement materials — requirements, documents, access credentials and source code you share with us so we can deliver a project.

Collected automatically

• Pages visited, device and browser type, IP address and timestamps.
• Cookies and similar technologies, described in Section 09.

03How we use information

We use personal information to:

• Respond to enquiries, prepare quotes and provide the Services.
• Deliver, configure, customize and support solutions and engagements.
• Operate, secure and improve our website and Services.
• Send service messages and, where permitted, updates you can opt out of at any time.
• Comply with legal obligations and protect our rights.

We do not sell personal information.

04Customer environments and AI processing

Solutions and Enterprise deliverables run on your servers or cloud accounts. We access your environment only through access you grant, only for the work you have engaged us to do, and only for as long as needed.

• Your business data, source code and documents remain yours.
• We do not use your source code or business data to train AI models without your prior written permission.
• Where the Agentic SDLC uses third-party AI services during an engagement, we agree the approved providers and data handling with you in advance.
• At the end of an engagement, we return or delete engagement materials and revoke access as set out in your agreement.

05How we share information

We share personal information only where needed:

• Service providers that help us run our website, email, communications and hosting, bound by confidentiality and security obligations.
• Professional advisers such as lawyers, auditors and insurers.
• Authorities where required by law or to protect rights and safety.
• Business transfers in a merger, acquisition or restructuring, with notice where required.

06Data security

We use reasonable technical and organizational measures, including access controls, least-privilege access, encryption in transit and audit logging of our delivery workflows. No system is completely secure, so we cannot guarantee absolute security. We will notify affected parties of a personal data breach as required by applicable law.

07Retention

We keep personal information only as long as needed for the purposes above. Enquiry and quote records are retained while a relationship or opportunity is active and for a reasonable period afterwards. Waitlist and marketing details are kept until you unsubscribe. Engagement materials are handled under your agreement. We may retain information longer where the law requires it.

08Your rights and choices

Under India’s Digital Personal Data Protection Act, 2023 and, where they apply, other data protection laws such as the GDPR, you may have the right to:

• Access information we hold about you and request correction or erasure.
• Withdraw consent for processing that relies on it.
• Nominate another person to exercise your rights in specified circumstances.
• Seek redress of a grievance.

To exercise these rights or raise a grievance, email privacy@stack18.com. We will respond within the time required by law. You can unsubscribe from marketing emails at any time.

09Cookies

Our website uses cookies and similar technologies that are necessary for it to work and, where you allow them, to understand how it is used. You can control cookies through your browser settings; blocking some may affect how the website works. Analytics cookies stay off until you accept them. Change your cookie choice.

10International transfers

Our service providers may process information in countries other than your own. Where required, we use appropriate safeguards. Information in your own deployed environment stays where you choose to host it.

11Children’s privacy

The Services are for business use and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

12Changes to this policy

We may update this policy. We will change the “Last updated” date and, for material changes, give reasonable notice on our website or by email.

13Contact us and grievances

Questions or grievances about this policy or your information can be sent to privacy@stack18.com or through our contact page.