Privacy Policy &
Data Governance SLA
Your proprietary business logic, custom source code, customer databases, and confidential trade secrets are legally protected under strict non-disclosure contracts and zero-trust engineering protocols.
Policy Index
1. Bilateral Non-Disclosure Agreement (NDA)
StackShooter recognizes that technical architecture, proprietary business algorithms, API endpoints, wireframes, and customer data shared during initial consultations represent core commercial assets. Prior to receiving sensitive codebases or scope documentation, we execute a legally binding bilateral Non-Disclosure Agreement (NDA).
Key Guarantee: We never disclose, license, duplicate, or share client project details, custom algorithms, or internal business workflows with third parties, competitors, or public repositories.
2. Source Code & Intellectual Property (IP) Protection
All custom Python (Django/FastAPI), JavaScript/TypeScript (React, Next.js, Node.js), HTML/CSS frontend templates, database schemas, microservices, and mobile application packages developed for your project are treated as confidential intellectual property.
- 100% Client Assignment: Upon completion of agreed milestone payments, all copyrights, Git repository commits, and distribution rights transfer completely to the client.
- Zero Hidden Dependencies: We do not embed proprietary locking mechanisms, obfuscated phone-home scripts, or third-party license restrictions in your deliverables.
- Private Repository Isolation: All development work takes place in private, access-controlled Git organizations with mandatory multi-factor authentication (MFA).
3. Data Collection Scope & Purpose
StackShooter collects personal and technical information strictly necessary to provide engineering services, technical consultations, project billing, and server maintenance:
4. Technical Infrastructure & Encryption Standards
We implement defense-in-depth security to safeguard client data against unauthorized access or interception:
- Data at Rest: Database backups, environment secrets, and file storage utilize AES-256 bit encryption standard.
- Data in Transit: All HTTP traffic across our website and staging servers is enforced via TLS 1.3 encryption with HTTP Strict Transport Security (HSTS).
- Vault Secret Management: Production API keys and database credentials are managed via encrypted environment vault stores, never committed to version control.
5. Third-Party Sub-Processors & Cloud Partners
All sub-processors meet SOC2 Type II and ISO/IEC 27001 security standards:
6. Data Retention & Right to Erasure
Clients retain complete ownership over their data under DPDP Act 2023 and GDPR guidelines:
- Complete Data Purge: Staging server databases, local developer clones, and transient deployment logs are permanently destroyed within 14 business days.
- Right to Export: Clients may request a full export of database dumps, media assets, and Git commit logs at any milestone stage.
7. Cookie Policy & Web Analytics
Our website utilizes light, privacy-focused cookies to store session states and optimize sub-second page rendering performance. We do not use intrusive cross-site tracking cookies. You may toggle cookie permissions via your browser controls at any time.
8. Data Protection Officer & Contact
For custom NDA execution or data privacy requests, contact our compliance engineering team: