Legal

Privacy Policy

Effective date: January 15, 2025

1. Who we are

MadStack AI ("MadStack", "we", "us", or "our") operates the MadStack AI platform — a business card intelligence service that extracts structured contact data from card images. Our registered address is available on request at support@madstackai.com.

2. Data we collect

We collect the following categories of information when you use our service:

3. How we use your data

We use the information we collect to provide and improve the MadStack AI service, authenticate users, process card submissions, sync contacts to connected CRMs, and send transactional notifications. We do not sell your data or use it to train third-party AI models.

4. Data sharing

We share data only with sub-processors necessary to operate the service, including cloud infrastructure providers (e.g., Microsoft Azure), AI model APIs (e.g., Google Gemini and Anthropic Claude), messaging providers (e.g., Resend for email and Telnyx for SMS), and payment processors (e.g., Stripe). All sub-processors are bound by data processing agreements with standards equivalent to this policy.

5. SMS and mobile messaging

When you provide your mobile number to sign in, verify your account, or accept a team invitation, we send one-time login codes and account notifications by SMS. Your mobile information and SMS opt-in consent will not be sold, rented, or shared with any third party for marketing or promotional purposes. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you the services of that campaign. Message frequency varies based on your account activity, and message and data rates may apply. Reply STOP to any message to opt out, or HELP for help.

6. Data retention

Card images and extracted contact data are retained for the life of your account plus 30 days after deletion. You may request early deletion at any time by contacting support@madstackai.com. Billing records are retained for seven years as required by applicable tax law.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact support@madstackai.com. We will respond within 30 days.

8. Security

We implement industry-standard security controls including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular third-party penetration tests. See our Security page for details.

9. Contact

Questions about this policy? Email support@madstackai.com.