Privacy Policy

Account & contact data of administrators (name, work email, role, credentials); employee payroll data on the Customer's behalf (identity, compensation and pay history, bank account and IFSC, tax identifiers such as PAN/Aadhaar/UAN, settlements); and usage & security data such as audit logs and authentication events. We never log passwords, tokens, secrets, or full card numbers.

To provide, operate, and secure the Service; to authenticate users and enforce access control; to maintain audit trails; to provide support and send service or security notices; and to comply with legal obligations. We do not sell personal data or use payroll data for advertising.

We share data only with vetted sub-processors that help us run the Service, each bound by data-protection obligations. Typical categories include cloud hosting (e.g. AWS), database hosting (e.g. MongoDB Atlas), object storage (e.g. AWS S3), and transactional email delivery. A current sub-processor list is available on request from support@stackmentalist.com. We also disclose data where required by law.

We retain personal data while your account is active and as needed to provide the Service, subject to statutory payroll/tax retention. Data is protected with encryption in transit and at rest, application-layer encryption of sensitive identifiers and compensation fields, role-based access control, and immutable audit logs. See our Security page.

Depending on your jurisdiction, you may have rights to access, correct, delete, or port your data. If you are an employee of a Customer, please direct requests to your employer (the controller); we will assist them in responding.

Questions about this policy or your data: support@stackmentalist.com.