Privacy Policy

Last updated: 19 September 2026

This Privacy Policy explains how thestack.es ("thestack", "we", "us") collects, uses, stores and protects information when you use our platform at thestack.es (the "Service"). thestack is a platform that helps you organise outreach and automate the sending of emails that you compose and configure yourself. By using the Service you agree to the practices described here.

Information we collect

Account information — the name, email address, company details and billing information you provide when you register.
Content you create — the email drafts, subjects, message bodies, recipients and contact records you enter or configure in order to send or schedule messages.
Connected mailbox information — when you connect a Google account so the Service can send email on your behalf, we store the email address of that mailbox and an authorization token that lets us send. We do not receive or store your Google account password.
Usage data — basic technical logs (such as timestamps and the outcome of a send) needed to operate, secure and troubleshoot the Service.

How we use information

To provide the core function of the Service: composing, scheduling and sending the emails you configure, from the mailbox you connect.
To display the status of your accounts and messages (for example, whether a message was sent or failed).
To operate, maintain, secure and improve the Service, and to provide support.
To handle billing and meet our legal and tax obligations.

Google user data

If you connect a Google account, the Service requests only the gmail.send scope, together with the basic sign-in scopes needed to identify which mailbox you connected. This lets the Service send email on your behalf. It does not grant, and we do not request, the ability to read, search or delete the messages in your inbox.

The messages we send are the ones you compose and configure in the Service.
The authorization token that allows sending is encrypted before it is stored, and is used only to send the messages you have set up. You can revoke it at any time by disconnecting the account in the Service or from your Google account permissions.
We do not use Google user data for advertising, and we do not sell it.

thestack.es's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we share information

We do not sell your personal information. We share it only:

With service providers that operate our infrastructure (for example, hosting and payment processing), acting on our instructions.
With Google, in order to send the email you configure through your connected mailbox.
Where required by law, or to protect the rights, safety and security of our users and the Service.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service, and afterwards only as required to meet legal, accounting or reporting obligations. You can ask us to delete your account and associated data at any time.

Security

We take reasonable technical and organisational measures to protect your data. Authorization tokens for connected mailboxes are encrypted at rest, and access to stored data is restricted. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to withdraw consent. You can disconnect a connected mailbox at any time, and you can contact us to exercise any of these rights.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and significant changes will be communicated through the Service where appropriate.

Contact

Questions about this policy or your data can be sent to hello@thestack.es.