Privacy Policy
Last updated: March 30, 2026
Who We Are
Plainstack ("we", "us", "our") operates the website plainstack.net and provides AI automation consulting services. Data controller: Plainstack Contact email: legal@plainstack.net We are committed to protecting your personal data and being transparent about how we use it.
What Data We Collect
We collect personal data through the following channels: AI Automation Map form: your email address, company or website URL, industry selection, and optional bottleneck description. This data is used to generate and deliver your personalized automation map report. Newsletter subscription: your email address, collected when you subscribe to our research updates. Contact form: your name, preferred contact channel (email, Telegram, WhatsApp, or phone), corresponding contact details, and your message. Automated collection: your IP address, collected automatically for rate limiting and security purposes.
Why We Collect It
Each type of data is collected for a specific purpose: Automation Map data: to analyze your company's operations using AI and deliver a personalized automation map report to your email. Newsletter email: to send you research articles, automation insights, and company updates. You can unsubscribe at any time. Contact form data: to respond to your inquiry and communicate about potential projects. IP addresses: to enforce rate limits, prevent abuse, and maintain the security and availability of our services.
Legal Basis for Processing
We process your personal data under the following legal bases as defined by GDPR Article 6: Consent (Art. 6(1)(a)): We process your email and company data submitted via the Automation Map form based on your explicit consent, indicated by your agreement at the time of submission. You may withdraw consent at any time by contacting us. Contract performance (Art. 6(1)(b)): Data submitted via the contact form is processed to take steps at your request prior to entering into a contract, or to perform an existing contract. Legitimate interest (Art. 6(1)(f)): We process IP addresses and implement rate limiting to protect our services from abuse and ensure availability. Our legitimate interest is the security and integrity of our systems.
Third-Party Processors
We share your data with the following third-party service providers, each acting as a data processor on our behalf: Anthropic (Claude API): Processes company and bottleneck information you submit to generate AI-powered automation analysis. Data is sent to Anthropic's API for processing and is subject to Anthropic's data usage policies. Resend: Handles email delivery for automation map reports, newsletter emails, and contact form notifications. Google Tag Manager: Loads analytics scripts to help us understand how visitors use our website. May set cookies depending on the analytics services configured. Vercel: Hosts our website and processes HTTP requests, including your IP address, as part of standard web hosting operations.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described above: Automation Map data: retained for up to 12 months after delivery of your report, then deleted. Newsletter subscriptions: retained until you unsubscribe. Upon unsubscription, your email is removed from our mailing list within 30 days. Contact form submissions: retained for up to 24 months to maintain context for ongoing business relationships, then deleted. IP addresses and rate limiting data: retained for up to 90 days, then automatically purged. If you request deletion of your data, we will process your request within 30 days.
Your Rights
Under the GDPR, you have the following rights regarding your personal data: Right of access: You may request a copy of the personal data we hold about you. Right to rectification: You may request correction of inaccurate or incomplete data. Right to erasure: You may request deletion of your personal data where there is no compelling reason for its continued processing. Right to data portability: You may request a machine-readable copy of the data you provided to us. Right to object: You may object to processing based on legitimate interest. Right to restrict processing: You may request that we limit how we use your data. To exercise any of these rights, contact us at legal@plainstack.net. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence or place of work.
Cookies and Analytics
Our website uses Google Tag Manager to manage analytics scripts. These scripts help us understand visitor behavior, page performance, and traffic sources. No cookies are required for core website functionality. You can use our website, submit forms, and access all content without accepting analytics cookies. Where analytics cookies are set, they are used solely for statistical purposes. You may block cookies through your browser settings at any time.
International Data Transfers
Some of our third-party processors are based in the United States, including Anthropic, Resend, Google, and Vercel. When your data is transferred outside the European Economic Area, we rely on appropriate safeguards, including: Standard Contractual Clauses (SCCs) approved by the European Commission. Processor-specific data protection commitments and certifications. We ensure that any international transfer of your data meets the requirements of GDPR Chapter V.
Contact
For any questions about this privacy policy or your personal data, contact us at: Email: legal@plainstack.net We aim to respond to all inquiries within 30 days.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.