Trust

Privacy policy

Last updated: 23 October 2026

The short version. We collect contact details, usage data and, for ID checks, identity details including document images. We use them to verify identities, support AML/KYC compliance, run and secure the service, and communicate with you. We share data only with the providers who help run our systems. We never sell your data. It is stored in Google Cloud (EU and Australia) with encryption and strict access controls. Verification images move to secure cold storage 45 days after a check and are permanently deleted at 12 months. You can access, correct or delete your data, and opt out of marketing, at any time.

This Privacy Policy describes how StackGo Pty Ltd (ABN 74 644 421 518) ("StackGo", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use our websites, apps, and services (including IdentityCheck). We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the General Data Protection Regulation (GDPR), and the UK Data Protection Act 2018.

1. What personal information we collect

We only collect information reasonably necessary for our business activities, including:

  • Contact details (name, email, phone number, address)
  • Business or company details (if applicable)
  • Account preferences, login credentials, and correspondence history
  • Usage data (IP, browser type, device, session activity)
  • Identity verification data (name, DOB, address, document number, images, biometric data)
  • Information provided through forms, surveys, integrations, or support requests

2. How we use personal information

  • Deliver, maintain, and secure our products and services to you
  • Conduct identity verification and AML/KYC checks
  • Provide support you initiate
  • Communicate with you about your account, enquiries, or updates
  • Send service or marketing communications (where permitted)
  • Comply with legal obligations and maintain system security

We do not sell personal information, and we do not use your data for independent analytics, marketing, product development, or to train foundation or product models, whether ours or third parties'.

3. Disclosure of personal information

We may disclose information to:

  • Employees, contractors, and trusted service providers, but only to the extent necessary to deliver products and services to you. Data will be retained only for as long as required for that purpose, and in any case, no longer than specified in Section 5 (Data retention).
  • Regulators, law enforcement, or courts where required by law
  • Successors in the event of a merger or asset transfer, following reasonable notice being given to you

4. International storage and sub-processors

Data is processed and stored securely using Google Cloud Platform (GCP) in the EU (Dublin/Frankfurt) and Australia.

  • Veriff — ID and biometric verification (EU/Global)
  • HubSpot — customer communications, website forms and website visit tracking (EU/US, SCCs)
  • Twilio SendGrid — messaging and notifications (EU/US, SCCs)
  • Google Analytics — analytics and performance (EU/US, SCCs)
  • PostHog — product and website analytics (United States, SCCs)
  • CookieYes — cookie consent management (United Kingdom, UK GDPR / SCCs)

Full list of sub-processors: stackgo.io/sub-processors. International transfers follow Standard Contractual Clauses (SCCs) or adequacy decisions.

5. Data retention

  • Verification images moved to secure cold storage 45 days after completion and permanently deleted at 12 months
  • Audit logs and metadata retained for 7 years, or for the period the applicable regulations require
  • Billing and account data retained as required by law

6. Security measures

  • Encryption in transit (TLS 1.2+) and at rest (AES-128 or stronger)
  • Role-based access control and two-factor authentication (2FA)
  • Data segregation, logging, and regular vulnerability testing
  • Secure deletion and periodic security audits

7. Cookies and analytics

We use cookies and similar technologies to operate and improve our site. No analytics cookie is set, and no analytics request leaves your browser, until you accept the consent banner. You can manage preferences through your browser or our consent banner. Every cookie the site sets is listed individually in our cookie policy.

8. Your rights and control

Access and correction: Email privacy@stackgo.io to access or correct your data.

Restrict or withdraw consent: You can withdraw consent for marketing or specific uses at any time.

Complaints: Contact us if you believe we have breached privacy laws. We will respond within 30 days.

9. GDPR and UK data subject rights

EU and UK individuals have rights to access, correct, erase, restrict, object, and port data. Contact our appointed representative:

Prighter Group — GDPR/UK representative
app.prighter.com/portal/stackgo

10. Regional privacy contacts

11. Contact us

StackGo Pty Ltd
ABN 74 644 421 518
Email: privacy@stackgo.io

12. Updates to this policy

We may update this Privacy Policy to reflect legal or operational changes. The latest version will always be available at stackgo.io/privacy.