Privacy Policy

1. Who we are

The data controller is Outbranch Network LLC, a New York limited liability company (Albany County, New York), operating the Stackbroker service. For privacy questions, contact our contact form or doug@outbranch.net.

2. Information we collect

• Account & organization data: name, email, organization, and console credentials.
• Agent identities: the identifiers you register for your agents (Agent Passport DIDs or Stackbroker-issued keys), labels, and optional handles you choose to provide.
• Configuration: spend policies, selected stacks, and settings.
• Operational telemetry: routing decisions, audit/proof records, and outcome telemetry your agents submit (e.g., quoted vs. actual price, latency, success) tied to your account.
• Billing data: processed by our payment provider (Stripe). We do not store full card numbers.
• Lead/contact data: what you submit through our contact form.
• Usage & device data: log data, IP address, and analytics (e.g., Google Analytics) collected via cookies and similar technologies.

3. How we use information

• To provide, secure, and operate the service (routing, policy enforcement, audit, billing).
• To produce neutral benchmarks and product improvements using aggregated and de-identified data; we do not publish your raw, identifiable records.
• To communicate about your account, support, and service changes.
• To comply with legal obligations and enforce our terms.

Legal bases (GDPR): performance of a contract; our legitimate interests in operating and improving a neutral service (balanced against your rights); your consent (for non-essential cookies/analytics); and compliance with legal obligations.

4. How we share information

We share personal information only with service providers that help us run the service — including payment processing (Stripe), hosting and database (Vercel, Supabase), analytics (Google), and payment-rail/discovery infrastructure (e.g., Coinbase Developer Platform) — under contracts that limit their use of the data. We may disclose information to comply with law or protect rights. We may publish aggregated, de-identified statistics (for example, on the Megaboard). We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

5. Cookies & analytics

We use strictly necessary cookies and, with your consent where required, analytics cookies (Google Analytics) to understand usage. You can control cookies through your browser, and we honor Global Privacy Control (GPC) signals as an opt-out of sale/share. EU/UK visitors are asked for consent to non-essential cookies.

6. Your rights

EU/UK (GDPR): you may request access, rectification, erasure, restriction, portability, and object to processing; withdraw consent at any time; and lodge a complaint with your supervisory authority.

California (CCPA/CPRA): you may request to know, delete, and correct your personal information; opt out of sale/sharing (we do not sell or share); limit use of sensitive personal information; and you will not be discriminated against for exercising these rights. You may use an authorized agent.

To exercise any right, use our contact form. We will verify your request and respond within the time required by law.

7. Retention, security & transfers

We retain personal information for as long as needed to provide the service and meet legal obligations, then delete or de-identify it. We use reasonable technical and organizational safeguards. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

8. Children

The service is for businesses and adults; it is not directed to children, and we do not knowingly collect data from anyone under 16.

9. Changes & contact

We will post changes here with a new effective date. Questions or requests: contact form · doug@outbranch.net · Outbranch Network LLC.