Privacy policy

Stack Signal is a brand of Intracor Intelligence Inc., a company based in Ontario, Canada ("we", "us"). We make quantitative analytics software and operate stacksignal.com, including its documentation, downloads and release notes.

Intracor Intelligence Inc. is responsible (the "controller") for the personal information described here. Our Privacy Officer is accountable for our compliance with this policy and can be reached at contact@stacksignal.com.

When you visit. Our website is hosted on Amazon Web Services (AWS) and delivered through Amazon CloudFront. To send you a page, these services necessarily receive your IP address, your browser's request details and the page requested. We have not turned on CloudFront access logging for the website, so we do not keep a record of these requests ourselves. AWS may process this information to run its service.

Analytics, only with your consent. If you click "Accept" in our cookie banner, we load Google Analytics. It sets cookies in your browser and tells us which pages are read, roughly where visitors come from (country or region), the device and browser type, and how pages are reached. We use this only to understand which pages help people and to improve them. If you click "Decline", or do nothing, no analytics cookies are set and the site works the same. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as "Decline" automatically and do not show the banner.

Your cookie choice. Your choice (accept or decline, the date, and how it was made) is saved in your browser's local storage so we do not ask again on every page. It is not sent to us. You can change it at any time from Cookie preferences in the footer, or by clearing this site's data in your browser.

Contact form. If you use the contact form, we receive your name, email address, the platform you use, the topic and your message. Messages are delivered to us through Web3Forms, which forwards them by email to contact@stacksignal.com. We use them only to reply to you, integrate into product development, and to fix problems you report.

Fonts and other content. Our fonts and images are served from our own site. The website does not load third-party fonts, social media widgets or advertising scripts.

Purchases. Subscriptions bought through the website are paid through Stripe, which processes your card details under its own privacy policy. We never see or store your full card number. When a subscription starts, changes or ends, the details needed to provide it are passed from Stripe to our licensing system. Our service that passes them on does not store them.

Email. When you email us, we keep your email address, your messages and anything you attach. Our email is hosted by Hostinger.

We send emails about your purchases (receipts, subscription changes, service notices and important changes to our terms or this policy). We send marketing emails only if you have agreed to receive them. Every marketing email lets you unsubscribe.

Under Canadian law (PIPEDA), we collect, use and disclose personal information with your knowledge and consent. We limit it to the purposes above. Where we rely on legitimate interests, we have weighed them against your privacy.

We do not sell or rent personal information, and we do not share it for targeted advertising. We share it only with service providers who process it for us:

We may also disclose information if the law requires it, to protect our rights or prevent fraud, or as part of a sale or merger of our business, in which case we will tell you.

We are in Canada, and our providers store information in the United States and elsewhere. Information held in another country is subject to that country's laws and may be accessible to its courts and authorities. For transfers from the European Economic Area or the United Kingdom, we rely on the transfer safeguards our providers offer, such as Standard Contractual Clauses.

When we no longer need information, we delete it or make it anonymous.

The website is served only over encrypted connections (HTTPS). Card details stay with Stripe. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the relevant regulator as the law requires.

Wherever you live, you can ask us to:

Depending on where you live, you may have more rights:

• Canada (PIPEDA): access and correction, withdrawing consent (subject to legal or contract limits), and challenging our compliance.
• European Economic Area and United Kingdom (GDPR / UK GDPR): access, correction, erasure, restriction, data portability, objecting to processing based on legitimate interests, and withdrawing consent at any time without affecting earlier processing.
• California (CCPA / CPRA): the right to know what we collect and why, to delete, to correct, and not to be treated differently for using these rights. We do not sell or share personal information as those laws define it, and we do not use sensitive personal information. You may use an authorised agent.

To make a request, email contact@stacksignal.com. We may need to confirm your identity. We will answer within 30 days, or tell you if we need longer as the law allows.

Complaints. Please contact us first so we can try to fix the problem. You can also complain to:

• the Office of the Privacy Commissioner of Canada (priv.gc.ca);
• your data protection authority, if you are in the EEA, or the Information Commissioner's Office (ico.org.uk) in the UK;
• the California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General, if you are in California.

The website and our products are for adults. We do not knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.

When we change this policy, we will post the new version here and update the effective date. If a change materially affects how we use your information, we will also tell customers by email before it takes effect. Where the change needs your consent, we will ask for it.