Quick Summary — How StackGo Protects Your Privacy

At StackGo, we respect your privacy and protect your personal information. Here’s what happens when you use our products or website:

What we collect: Contact details, usage data, and (for ID checks) identity details like name, DOB, address, and document images.
Why we collect it: To verify identities, improve our services, support AML/KYC compliance, and communicate with you.
Who we share it with: Trusted partners who help run our systems (e.g., hosting, messaging). We never sell your data.
Where it’s stored: Securely in Google Cloud (EU & Australia) with encryption and strict access controls.
How long we keep it: Verification images deleted within 45 days; other records only as long as required by law.
Your rights: Access, correct, or delete your data; opt out of marketing at any time.

Privacy Policy

Last updated: October 2025

This Privacy Policy describes how StackGo Pty Ltd (ABN 74 644 421 518) (“StackGo”, “we”, “us”, or “our”) collects, uses, discloses, and protects personal information when you use our websites, apps, and services (including IdentityCheck). We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the General Data Protection Regulation (GDPR), and the UK Data Protection Act 2018.

1. What personal information we collect

We only collect information reasonably necessary for our business activities, including:

Contact details (name, email, phone number, address)
Business or company details (if applicable)
Account preferences, login credentials, and correspondence history
Usage data (IP, browser type, device, session activity)
Identity verification data (name, DOB, address, document number, images, biometric data)
Information provided through forms, surveys, integrations, or support requests

2. How we use personal information

Deliver, maintain, and secure our products and services to you
Conduct identity verification and AML/KYC checks
Provide support you initiate
Communicate with you about your account, enquiries, or updates
Send service or marketing communications (where permitted)
Comply with legal obligations and maintain system security

We do not sell personal information, and we do not use your data for independent analytics, marketing, product development, or to train foundation or product models, whether ours or third parties’.

3. Disclosure of personal information

We may disclose information to:

Employees, contractors, and trusted service providers, but only to the extent necessary to deliver products and services to you. Data will be retained only for as long as required for that purpose, and in any case, no longer than specified in Section 5 (Data Retention).
Regulators, law enforcement, or courts where required by law
Successors in the event of a merger or asset transfer, following reasonable notice being given to you

4. International storage and sub-processors

Data is processed and stored securely using Google Cloud Platform (GCP) in the EU (Dublin/Frankfurt) and Australia.

Veriff – ID and biometric verification (EU/Global)
HubSpot – customer communications (EU/US, SCCs)
Twilio SendGrid – messaging and notifications (EU/US, SCCs)
Google Analytics – analytics and performance (EU/US, SCCs)

List of sub-processors: stackgo.io/sub-processors
International transfers follow Standard Contractual Clauses (SCCs) or adequacy decisions.

5. Data retention

Verification images deleted within 45 days after completion
Audit logs and metadata retained up to 2 years
Billing and account data retained as required by law

6. Security measures

Encryption in transit (TLS 1.2+) and at rest (AES-128 or stronger)
Role-based access control and two-factor authentication (2FA)
Data segregation, logging, and regular vulnerability testing
Secure deletion and periodic security audits

7. Cookies and analytics

We use cookies and similar technologies to operate and improve our site. Non-essential cookies are only used with your consent (for EU/UK visitors). You can manage preferences through your browser or our consent banner. See stackgo.io/stackgo-sub-processor-list.

8. Your rights and control

Access and correction: Email [email protected] to access or correct your data.
Restrict or withdraw consent: You can withdraw consent for marketing or specific uses at any time.
Complaints: Contact us if you believe we’ve breached privacy laws. We’ll respond within 30 days.

9. GDPR and UK data subject rights

EU and UK individuals have rights to access, correct, erase, restrict, object, and port data. Contact our appointed representative below:

Prighter Group – GDPR/UK representative
https://app.prighter.com/portal/stackgo

10. Regional privacy contacts

Australia: OAIC – oaic.gov.au
UK: ICO – ico.org.uk
EU: DPC Ireland – dataprotection.ie

11. Contact us

StackGo Pty Ltd
ABN 74 644 421 518
Email: [email protected]

12. Updates to this policy

We may update this Privacy Policy to reflect legal or operational changes. The latest version will always be available at stackgo.io/privacy-policy.