Last Updated: 26 August 2026

---

1. Introduction and Scope

This Privacy Policy governs the privacy practices of FeatStack LLP (the "Company", "FeatStack", "we", "us", or "our"), a Limited Liability Partnership incorporated in Pakistan under Section 7 of the Limited Liability Partnership Act, 2017, registered with the Securities and Exchange Commission of Pakistan (SECP) under Incorporation Number 0351579.

FeatStack is committed to protecting your privacy. This Privacy Policy describes how FeatStack collects, uses, stores, shares, and protects information when you:

• Visit our websites, portals, documentation hubs, and developer forums (collectively, the "Websites");
• Access, download, or use our software products, cloud services, hosted platforms, command-line interfaces (CLIs), software development kits (SDKs), and application programming interfaces (APIs) (collectively, the "Services"); and
• Interact with us via support channels, sales inquiries, developer programs, surveys, or marketing events.

This Privacy Policy applies to personal information processed by FeatStack as a data controller (or business under applicable laws). When FeatStack processes data solely on behalf of our enterprise or business customers in connection with their deployment of our Services, FeatStack acts as a data processor (or service provider), and the relevant customer's privacy policy and our Data Processing Agreement (DPA) govern that processing.

---

2. Information We Collect

We collect information in three main categories: information you provide directly, information collected automatically through your interaction with our Services, and information received from third parties.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you interact with our Websites, applications, APIs, or hosted environments, we automatically log certain telemetry, performance, and usage data:

• Log and Telemetry Data: IP addresses, browser user-agent strings, internet service provider (ISP), referring/exit URLs, operating system version, device identifiers, date/time stamps, clickstream data, route transitions, and feature usage metrics.
• API and CLI Usage Data: Endpoint request counts, response latency, payload sizes, error status codes, CLI command names, CLI version numbers, and rate-limit consumption metrics.
• Diagnostics and Performance: Application crash reports, stack traces, system resource consumption (CPU/memory footprints in local or hosted tools), and connection stability metrics.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, local storage, pixel tags, and script tags used to authenticate sessions, remember preferences, and analyze aggregate traffic.

2.3 Information from Third Parties

We may receive information about you from third-party sources, such as:

• Authentication and Code Repository Integrations: If you authenticate or integrate via GitHub, GitLab, Google, or an enterprise Single Sign-On (SSO/SAML) provider, we receive basic profile data (e.g., account ID, username, primary email address) as permitted by your third-party permission settings.
• Business Partners and Data Enrichment Providers: Verified business contact information, public LinkedIn profiles, or professional directories to maintain accurate billing, marketing, and sales records.

---

3. Cookies, Telemetry, and Tracking Technologies

FeatStack uses cookies, web beacons, software development kits (SDKs), and browser local storage to maintain session state, secure our endpoints, and understand usage trends.

3.1 Cookie Categories

• Strictly Necessary Cookies: Essential for system operation, route security, CSRF protection, and user authentication. These cannot be disabled in our systems.
• Performance and Analytics Cookies: Collect aggregated, pseudonymous metrics regarding page load times, navigational paths, and feature adoption.
• Functional Cookies: Store user preferences (such as code editor themes, dashboard layout preferences, and documentation language selections).
• Targeting / Marketing Cookies: Placed by authorized third-party ad networks to deliver relevant technical content or measure campaign attribution.

3.2 Managing Preferences

You can configure your browser to reject all or some cookies or to alert you when cookies are placed. However, if you disable strictly necessary cookies, critical parts of the Websites or authenticated areas of the Services may become inaccessible or fail to function properly.

---

4. How We Use Your Information

We process personal information only when we have an appropriate legal basis under applicable data protection laws (such as performance of a contract, legitimate business interests, compliance with legal obligations, or with your explicit consent).

We use your data to:

1. Provide and Maintain the Services: Authenticate users, execute core software functions, process transactions, host workloads, and enforce rate limits.
2. Improve and Optimize Infrastructure: Monitor system health, detect performance bottlenecks, debug errors, analyze aggregate telemetry, and enhance software usability.
3. Security and Fraud Prevention: Detect, prevent, and mitigate unauthorized access, account takeovers, Distributed Denial of Service (DDoS) attacks, abuse, and violations of our Terms of Use.
4. Customer Support and Communications: Deliver service notices, security alerts, scheduled maintenance updates, administrative messages, and technical support responses.
5. Product Development and Research: Identify usage patterns, evaluate demand for new features/integrations, and develop engineering enhancements.
6. Marketing and Developer Community Engagement: Distribute product release notes, technical newsletters, developer webinars, and event invitations (subject to your opt-out preferences).
7. Legal Compliance: Comply with applicable statutory reporting, tax obligations, lawful subpoenas, court orders, or governmental requests.

---

5. How We Share and Disclose Information

FeatStack does not sell, rent, or trade your personal information. We disclose personal information strictly under the following circumstances:

5.1 Service Providers and Sub-processors

We engage trusted third-party vendors to perform operational functions on our behalf, including:

• Cloud infrastructure, server hosting, and Content Delivery Networks (CDNs) (e.g., AWS, GCP, Cloudflare);
• Payment processors and billing infrastructure;
• Customer support, ticketing, and internal documentation software;
• Error monitoring, log management, and application performance monitoring (APM);
• Transactional and marketing email delivery platforms.

All service providers are bound by strict contractual obligations to handle data confidentially, securely, and solely in accordance with our documented instructions.

5.2 Business Customers (Enterprise Accounts)

If you access FeatStack Services under an enterprise or organization account provisioned by your employer or an affiliated third party, your organization’s designated administrators may view your profile, audit your activity logs, revoke your access, or inspect data associated with shared workspaces.

5.3 Corporate Transactions

If FeatStack undergoes a merger, acquisition, corporate reorganization, asset sale, financing, or bankruptcy, personal data may be transferred to the acquiring entity as part of due diligence and transition, subject to customary confidentiality assurances.

5.4 Legal and Safety Requirements

We may disclose personal information if required to do so by law, regulation, subpoena, search warrant, or regulatory proceeding, or if we determine in good faith that disclosure is necessary to:

• Protect the security, integrity, or availability of our infrastructure;
• Prevent immediate physical harm, fraud, or financial loss;
• Enforce our Terms of Use, policies, and contracts; or
• Defend FeatStack against legal claims.

---

6. Data Storage, Security, and Retention

6.1 Security Practices

FeatStack implements industry-standard technical, organizational, and physical safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure. These measures include:

• Encryption of data in transit (TLS 1.3/HTTPS) and data at rest (AES-256 or equivalent);
• Role-based access controls (RBAC) and the principle of least privilege;
• Multi-factor authentication (MFA) required for internal infrastructure and administrative access;
• Automated vulnerability scanning, code security audits, and continuous monitoring;
• Comprehensive logging and intrusion detection mechanisms.

While we take rigorous measures to secure our systems, no transmission over the internet or storage architecture is 100% secure. You are responsible for safeguarding your credentials, API tokens, and SSH keys.

6.2 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, provide our Services, resolve disputes, maintain audit logs, enforce our legal agreements, and satisfy applicable statutory retention requirements (such as tax, accounting, or corporate recordkeeping rules).

When personal information is no longer needed, we securely delete, overwrite, or anonymize the data in accordance with our internal data retention schedules.

---

7. User Rights and Choices

Depending on your geographic location and applicable local data protection legislation (such as the GDPR, UK GDPR, California CCPA/CPRA, or Canadian PIPEDA), you may have specific statutory rights regarding your personal information:

• Right of Access / Portability: Request a copy of the personal information FeatStack holds about you in a structured, commonly used, and machine-readable format.
• Right to Rectification: Request correction of inaccurate, out-of-date, or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information, subject to statutory retention exceptions.
• Right to Restrict or Object to Processing: Object to our processing of your personal data based on legitimate interests or request restrictions on specific processing activities.
• Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
• Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment, degraded service quality, or altered pricing.

7.1 How to Exercise Your Rights

To exercise any of these rights, please submit a verified request to privacy@featstack.co.

To protect your privacy and security, we verify your identity prior to fulfilling requests. We may request your registered email address, account identifier, or cryptographic verification (e.g., verifying control of an authorized email address or API account). You may also designate an authorized agent to make requests on your behalf, subject to written proof of authorization and independent identity verification.

---

8. Account and Data Deletion

You may delete your user account directly via your account settings dashboard or by contacting privacy@featstack.co.

Upon confirmed receipt of an account deletion request:

• Your access credentials, personal profile data, and non-aggregated usage records will be deleted or irreversibly anonymized from active operational databases within thirty (30) days.
• Residual data held in automated disaster recovery backups will be securely overwritten in the regular course of our backup retention cycle.
• We may retain anonymized, aggregate telemetry data and records required for tax, compliance, anti-fraud, or legal obligations as permitted by law.

---

9. International Data Transfers

FeatStack operates globally, and our servers, subprocessors, and personnel may be located in jurisdictions other than your home country. These jurisdictions may maintain data protection laws that differ from those in your home country.

When transferring personal data from the EEA, UK, or Switzerland to countries not recognized as providing an adequate level of data protection, FeatStack utilizes approved safeguard mechanisms, including the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and supplementary technical and organizational safeguards.

---

10. Children's Privacy

FeatStack's Websites and Services are strictly directed toward software professionals, developers, and commercial entities. Our Services are not intended for or directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect or solicit personal data from children. If we discover that a child has provided us with personal data, we will promptly delete such information from our systems. If you believe a minor has submitted personal information to FeatStack, please contact privacy@featstack.co.

---

11. Third-Party Websites and Services

Our Websites and Services may contain links to external websites, services, repositories, or documentation operated by third parties. This Privacy Policy does not apply to third-party services. We encourage you to review the privacy notices of any third-party websites or integrations you choose to visit or enable.

---

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our software offerings, data practices, security standards, or applicable legal requirements.

When updates occur:

• We will revise the "Last Updated" date at the top of this document;
• For material changes, we will provide prominent notice through the Services, via email to your registered account address, or on our primary website dashboard prior to the changes taking effect.

Your continued use of the Services after the effective date of an amended Privacy Policy signifies your acknowledgment and acceptance of the revised terms.

---

13. Contact Information and Data Protection Officer

If you have questions, concerns, requests, or complaints regarding this Privacy Policy or FeatStack’s data handling practices, please contact our privacy team:

• Company Name: FeatStack LLP (dba FeatStack)
• Email: info@featstack.co
• Physical Address: Office No. 2, 2nd Floor, Nawab Khan Plaza, Tehsil Chowk, Chakwal, Pakistan 48800
• Phone: +92 310 544 7474