Legal
Privacy policy.
Last updated: October 20, 2026
This policy explains what Northstack collects when you visit this site, use the workspace or write to us, why we collect it, and the choices you have.
What we collect
- Account details: your name, email address and password (stored only as a hash).
- Workspace content: the projects, tasks, files, invitations and settings you and your team create.
- Billing details: your plan, invoices and the billing email. Card details go to the payment provider and never reach our servers.
- Messages: what you send through the contact form, with your name and email.
- Technical records: request logs and a one-way hash of the address a contact message came from, used to stop abuse.
Why we use it
We use this information to run the service you signed up for: to sign you in, keep your workspace's data within your workspace, bill the plan you chose, answer your messages and keep the service secure. We do not sell it, and we do not use it for advertising.
Who processes it for us
A small number of providers process data on our behalf: the hosting of the servers and database, the payment provider for subscriptions, the email service that delivers invitations and password resets, and the storage for uploaded files. Each works under our instructions and only for these purposes.
How long we keep it
Account and workspace data are kept while your account or workspace exists. When a workspace is deleted, its content is removed from the live database and from backups as they expire. Invoices are kept as long as the law requires. Contact messages are kept for as long as we need them to answer you.
Your choices
You can update your profile, export your workspace's activity and delete your workspace from its settings. For anything else, including a copy of your data or its deletion, write to us; your data rights explains what you can ask for.
Contact
Questions about this policy go through the contact form; choose the topic that fits best and we will reply by email.