Effective Date: January 23, 2026
Last Updated: January 23, 2026
Mobstackr, LLC (“Mobstackr,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites, applications, and services (collectively, the “Services”), including Automuse, FightFlow, and SecureStack.
By accessing or using our Services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Services.
1. Information We Collect
We collect information in several ways when you interact with our Services:
1.1 Information You Provide Directly
- Account Information: When you create an account, we collect your email address.
- Communications: Information you provide when you contact us for support, submit feedback, or participate in surveys.
- User Content: Content you create, upload, or generate using our Services, including configuration settings, generated content, and API inputs.
1.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system, device identifiers, and hardware model.
- Usage Data: Pages visited, features used, actions taken, time spent on pages, click patterns, and referring URLs.
- Log Data: Server logs that record requests made to our Services, including timestamps, error logs, and performance data.
- Location Data: General geographic location based on IP address (we do not collect precise GPS location).
1.3 Information from Third Parties
- Payment Processors: Transaction confirmations and billing information from Stripe.
- Analytics Providers: Aggregated usage data from analytics services.
- Authentication Providers: If you sign in using a third-party service (e.g., Google), we receive basic profile information as permitted by that service.
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 Providing and Improving Services
- To create and manage your account
- To process transactions and send related information (confirmations, invoices, receipts)
- To provide customer support and respond to inquiries
- To deliver the features and functionality of our Services
- To personalize your experience and provide content recommendations
- To analyze usage patterns and improve our Services
2.2 Communications
- To send transactional emails (account confirmations, password resets, billing notifications)
- To send product updates, feature announcements, and service-related notices
- To send marketing communications (with your consent, where required by law)
- To respond to your comments, questions, and requests
2.3 Security and Compliance
- To detect, prevent, and address fraud, abuse, and security issues
- To enforce our Terms of Service and other policies
- To comply with legal obligations and respond to lawful requests from authorities
- To protect the rights, property, and safety of Mobstackr, our users, and the public
2.4 AI and Content Generation
- To process your inputs and generate content using AI models (Automuse)
- To improve the quality and relevance of AI-generated outputs
- Note: We do not use your content to train AI models without your explicit consent
3. Data Storage and Security
3.1 Data Storage
Your data is stored on secure servers located in the United States. We use industry-standard cloud infrastructure providers (including Amazon Web Services) that maintain robust security certifications and compliance standards.
3.2 Security Measures
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256)
- Access Controls: Role-based access controls and multi-factor authentication for internal systems
- Infrastructure Security: Firewalls, intrusion detection systems, and regular security audits
- Secure Development: Security-focused development practices and regular code reviews
- Monitoring: 24/7 monitoring for security threats and anomalies
3.3 Security Limitations
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
3.4 Breach Notification
In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of becoming aware of the breach.
4. Third-Party Services
We share information with third-party service providers who assist us in operating our Services:
4.1 Payment Processing — Stripe
- Purpose: Process payments, manage subscriptions, and prevent fraud
- Data Shared: Name, email, billing address, payment card details
- Privacy Policy: https://stripe.com/privacy
4.2 AI Services — OpenAI
- Purpose: Power AI content generation features in Automuse
- Data Shared: Content prompts and configuration inputs you provide
- Privacy Policy: https://openai.com/privacy
- Note: We use OpenAI’s API with data processing agreements that prohibit use of your data for model training
4.3 Cloud Infrastructure — Amazon Web Services (AWS)
- Purpose: Host our applications, databases, and store data
- Data Shared: All data processed through our Services
- Privacy Policy: https://aws.amazon.com/privacy
4.4 Analytics and Monitoring
- Purpose: Understand usage patterns, improve performance, and troubleshoot issues
- Services Used: May include Google Analytics, Prometheus, Grafana
- Data Shared: Anonymized or pseudonymized usage data
4.5 Email Communications
- Purpose: Send transactional and marketing emails
- Data Shared: Email address, name, communication preferences
4.6 Third-Party Integrations
When you connect third-party services (e.g., WordPress sites), we access only the data necessary to provide the requested functionality, in accordance with the permissions you grant.
5. Cookies and Tracking
5.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help us recognize your browser, remember preferences, and understand how you use our Services.
5.2 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for basic functionality (authentication, security) | Session |
| Functional Cookies | Remember your preferences and settings | 1 year |
| Analytics Cookies | Help us understand how visitors use our Services | 2 years |
| Marketing Cookies | Used to deliver relevant advertisements (if applicable) | 1 year |
5.3 Managing Cookies
You can control cookies through your browser settings:
- Block All Cookies: May prevent you from using certain features
- Block Third-Party Cookies: Limits tracking while preserving functionality
- Clear Cookies: Remove existing cookies from your device
Most browsers allow you to:
- View what cookies are stored
- Delete cookies individually or all at once
- Block cookies from specific sites or all sites
- Set preferences for first-party vs. third-party cookies
5.4 Do Not Track
Some browsers offer a “Do Not Track” (DNT) setting. We currently do not respond to DNT signals, as there is no industry-wide standard for compliance. However, you can use browser settings and opt-out tools to manage tracking preferences.
5.5 Other Tracking Technologies
We may also use:
- Pixel Tags/Web Beacons: Small graphics that track email opens and website visits
- Local Storage: Browser storage for caching and performance optimization
- Session Replay Tools: To understand user interactions and improve UX (with personal data redacted)
6. Your Rights
Depending on your location, you may have certain rights regarding your personal information:
6.1 Rights Under GDPR (European Economic Area, UK, Switzerland)
If you are located in the EEA, UK, or Switzerland, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
- Right to Lodge a Complaint: File a complaint with your local data protection authority
Legal Basis for Processing (GDPR):
- Contract: Processing necessary to provide our Services
- Consent: Where you have given explicit consent
- Legitimate Interests: For security, fraud prevention, and service improvement
- Legal Obligation: To comply with applicable laws
6.2 Rights Under CCPA (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we collect
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out: Opt out of the “sale” or “sharing” of personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your rights
California-Specific Disclosures:
- We do not “sell” personal information as defined by CCPA
- We may “share” information with advertising partners (you can opt out)
- Categories of personal information collected: Identifiers, commercial information, internet activity, geolocation data, professional information
6.3 Exercising Your Rights
To exercise any of these rights, contact us at:
- Email: privacy@mobstackr.com
- Subject Line: “Privacy Rights Request”
We will respond to verified requests within:
- GDPR: 30 days (extendable by 60 days for complex requests)
- CCPA: 45 days (extendable by 45 days with notice)
We may need to verify your identity before processing your request.
7. Data Retention
7.1 Retention Periods
We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy:
| Data Type | Retention Period |
|---|---|
| Account Information | Duration of account + 30 days after deletion |
| Billing/Transaction Records | 7 years (for tax and legal compliance) |
| Usage/Analytics Data | 26 months |
| Support Communications | 3 years |
| AI-Generated Content Logs | 90 days |
| Server Logs | 90 days |
| Cookies | Varies (see Section 5) |
7.2 Deletion
When you delete your account:
- Your profile and settings are deleted within 30 days
- Backups containing your data are purged within 90 days
- Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution)
7.3 Anonymization
In some cases, we may anonymize your data instead of deleting it. Anonymized data cannot be linked back to you and may be retained indefinitely for analytics and research purposes.
8. Children’s Privacy
8.1 Age Restrictions
Our Services are not intended for children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under this age.
8.2 Parental Notification
If we learn that we have collected personal information from a child under the applicable age without verified parental consent, we will take steps to delete that information as quickly as possible.
8.3 Reporting
If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@mobstackr.com.
9. Changes to This Policy
9.1 Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will indicate the date of the latest revision at the top of this page.
9.2 Notification of Material Changes
For material changes that significantly affect how we use your personal information, we will provide prominent notice, such as:
- Email notification to the address associated with your account
- Banner or pop-up notice on our website or application
- In-app notification
9.3 Continued Use
Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the Services and may request deletion of your account.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Mobstackr, LLC
General Support:
mobstackr at gmail.com
For EEA/UK Residents:
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
By using our Services, you acknowledge that you have read and understood this Privacy Policy.