Privacy Policy

The website and services are operated by STACKPLY SOLUTIONS PRIVATE LIMITED, a private limited company incorporated in India on 21 June 2026 (GSTIN 33ABUCS1163L1ZW), with its registered office at No.33, 2nd Main Road, Venkatachalam Nagar, Tirumullaivoyal, Poonamallee, Tiruvallur- 600062, Tamil Nadu.

For personal data that we collect for our own purposes, such as enquiries, customer accounts and billing, Stackply is the Data Fiduciary under the DPDP Act: we decide why and how that data is processed.

This Policy applies to personal data we process when you:

• browse our website;
• submit an enquiry or demo request through our website forms;
• write to us, call us or otherwise correspond with us;
• register for, subscribe to, pay for or use our engineering software services, where you do so; and
• interact with us as a representative of a customer, prospect or supplier.

Our services are intended for businesses and professionals. This Policy does not cover third-party websites or services that we link to, such as social media pages, which are governed by their own privacy policies.

Enquiry and demo request forms. When you use the contact form or the “Book a Demo” form, we collect your name, email address and message, and, if you choose to provide them, your company name, designation and phone number.

Correspondence. If you email or call us, we receive your contact details and the content of your communication.

Spam-protection data. Our forms may use Google reCAPTCHA. When it is active, Google receives information from your browser and device (such as your IP address, browser details and interaction with the widget) to decide whether a submission comes from a person. We receive only the verification result.

Technical data. Like most websites, our hosting servers automatically record technical information when pages are requested, such as IP address, date and time, requested page, browser type and referring page. Our website also loads fonts from Google Fonts, which means your browser sends your IP address and browser details to Google when it fetches them.

Account and service data, where you use our software services. This can include your name, business email address, organisation, role, login credentials, settings, the engineering and project information you or your organisation enter or upload, and technical records of service use needed to operate and secure the service.

Billing and transaction data, where you purchase a paid plan. This can include billing name and address, organisation and GST details for invoicing, plan, amount, and the transaction reference and status reported to us by our payment provider.

We do not ask for sensitive information such as health or financial account credentials through our website, and we ask that you do not include it in messages to us.

• Directly from you, when you fill in a form, write to us, call us or create an account.
• From your organisation, when it registers users or shares contact details with us.
• Automatically, through server logs and the third-party components described in this Policy (Google reCAPTCHA and Google Fonts).
• From our payment provider, which tells us whether a payment succeeded and gives us the transaction details we need for our records.

We process personal data only for specified and lawful purposes, namely to:

• respond to enquiries and arrange product demonstrations;
• create and administer customer accounts;
• provide, operate, maintain and improve our software services;
• provide customer support;
• process payments, issue invoices and maintain accounting records;
• protect our website, services and users against spam, fraud and misuse; and
• comply with legal obligations and enforce our agreements.

We rely on your consent where the DPDP Act requires it, and otherwise on the legitimate uses the Act permits, such as processing data you have voluntarily provided for a specified purpose, or complying with law. We do not sell personal data, and we do not use it for third-party advertising.

Where you use our software services, we use account data to register and authenticate users, manage subscriptions and user access for your organisation, send service and billing notices, and keep records of the agreement between your organisation and Stackply. Your organisation may administer its users’ accounts and is responsible for the information it provides about them.

We use technical data, reCAPTCHA results and form safeguards to detect and block automated or abusive submissions, investigate suspicious activity, protect accounts against unauthorised access, and maintain the integrity and availability of our systems.

Where you use our software services, we process the information you enter, such as engineering inputs and project details, only to perform the functions you request, such as running calculations and generating drawings, documents and reports, and to store, display and secure that information for your organisation. We do not claim ownership of your project information by processing it.

When you ask for help, we use your contact details and the information you share, including any project information you choose to send us, to understand and resolve your request and to keep a record of the support we provided.

We process and keep personal data where needed to meet our obligations under Indian law, including company, tax and GST requirements; to respond to lawful requests from authorities; and to establish, exercise or defend legal claims.

Payments for paid plans are processed by a third-party payment gateway. Your card number, CVV, UPI PIN, net-banking password and similar payment credentials are entered on and processed by the payment provider; Stackply does not receive or store them. We receive only the transaction information we need, such as the transaction reference, amount, date, payment status and, where provided by the gateway, the payment method type.

Where payments are processed through Razorpay, Razorpay collects and processes your payment information as an independent service provider under its own terms and privacy policy, available at razorpay.com/privacy. We share with Razorpay only what is needed to complete the payment, such as the amount, order details and the contact details you provide at checkout.

Our website does not set its own advertising or analytics cookies and does not use browser storage to track you.

When Google reCAPTCHA is loaded on our forms, Google may set or read cookies and use similar technologies for its risk analysis. Its use is governed by the Google Privacy Policy and Google Terms of Service.

Our software services may use cookies or similar technologies that are strictly necessary to sign you in and keep your session secure. You can block or delete cookies in your browser settings, but parts of the forms or services may then not work.

We do not currently use third-party analytics or advertising tracking tools on our website. If we introduce them, we will update this Policy before doing so and, where the law requires it, ask for your consent.

We use carefully selected service providers who process personal data on our behalf and under our instructions, in the following categories:

• website and server hosting;
• email delivery and business email;
• payment processing;
• spam and abuse protection (Google reCAPTCHA) and font delivery (Google Fonts); and
• cloud infrastructure used to run our software services.

We give these providers only the data they need for their function and require them to protect it.

We do not sell or rent personal data. We disclose it only:

• to the service providers described above;
• within your organisation, where you use an account your organisation administers;
• to our professional advisers, such as auditors and legal advisers, under confidentiality;
• where required by law or a lawful request (see Section 17);
• in a corporate transaction (see Section 18); or
• with your consent or at your direction.

We may disclose personal data to courts, regulators, law-enforcement agencies or other authorities where we are legally required to do so, or where we believe in good faith that disclosure is necessary to comply with law, protect the rights, property or safety of Stackply, our customers or others, or detect and prevent fraud or security incidents. We disclose only what the request lawfully requires.

If Stackply is involved in a merger, acquisition, amalgamation, reorganisation or sale of all or part of its business or assets, personal data may be transferred to the party concerned as part of that transaction, subject to confidentiality and to this Policy or protections at least as strong, as permitted by the DPDP Act.

We keep personal data only for as long as it is needed for the purpose for which it was collected, and then delete it, unless we must keep it longer to comply with law, resolve disputes or enforce our agreements. In practice:

• enquiry messages are kept while we are in discussion with you and for a reasonable period afterwards;
• account and project data are kept while your organisation’s account is active and as set out in the applicable agreement;
• invoices and transaction records are kept for the periods required by tax and company law; and
• server logs are kept for a limited period for security and troubleshooting.

When you withdraw consent or the purpose is no longer served, we will erase your data unless retention is required by law.

We take reasonable security safeguards to protect personal data against unauthorised access, disclosure, alteration and loss. These include encrypted (HTTPS) connections to our website, server-side validation of form input, spam protection, and access to personal data limited to people who need it for their work. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security. If a personal data breach occurs, we will act to contain it and notify affected individuals and the Data Protection Board of India where the DPDP Act requires.

Customers decide what engineering and project information they enter into or upload to our services. You are responsible for ensuring you have the right to share that information, including any personal data of others and any information that is confidential to your clients, and for keeping your account credentials secure.

Where we process personal data contained in project information on behalf of a customer organisation, we do so on that organisation’s instructions and under our agreement with it. Requests about that data should first be directed to the organisation concerned.

Subject to the DPDP Act and the rules in force under it, you have the right to:

• obtain a summary of the personal data we process about you and the processing activities;
• have your personal data corrected, completed, updated or erased;
• withdraw consent you have given;
• have your grievances redressed; and
• nominate another individual to exercise your rights in the event of death or incapacity.

These rights are subject to the exceptions in the law. We may need to verify your identity before acting on a request.

To request a summary of your personal data or to correct, complete or update it, email info@stackplysolutions.com from the email address associated with your enquiry or account. Where you use an account administered by your organisation, some details may need to be updated by your organisation’s administrator.

Where we process your personal data on the basis of consent, you can withdraw it at any time by emailing info@stackplysolutions.com, as easily as you gave it. Withdrawal does not affect processing carried out before it. If you withdraw consent needed to provide a service, we may be unable to continue providing that service.

You may ask us to erase your personal data by emailing info@stackplysolutions.com. We will erase it, and ask our service providers to do the same, unless we must keep it to comply with law, for example tax and accounting records, or to establish or defend legal claims. Where data forms part of a customer organisation’s account, erasure may be handled together with that organisation.

If you have a question or complaint about how we handle your personal data, please contact us at info@stackplysolutions.com with the subject line “Privacy Grievance”, describing your concern and how we can reach you. We will acknowledge your grievance and respond within the period prescribed under the DPDP Act and the rules in force.

If you are not satisfied with our response, you may approach the Data Protection Board of India after exhausting this grievance redressal process, as provided under the DPDP Act.

Some of our service providers, including Google, operate infrastructure outside India, so your personal data may be processed outside India. Where this happens, we transfer data only as permitted under the DPDP Act and will comply with any restrictions notified by the Central Government on transfers to particular countries.

Our website and services are intended for professional and business use only and are not directed at anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@stackplysolutions.com and we will delete it.

We may update this Policy to reflect changes in our services, practices or the law. The updated version will be posted on this page with a new “Last updated” date. Where a change materially affects how we use personal data, we will give reasonable notice through the website or by email and, where the law requires it, seek fresh consent.

For any question about this Policy or to exercise your rights, write to info@stackplysolutions.com or call +91 7550051188. Our corporate details are set out below.