Privacy Policy

Work Stack Manager ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service at workstackmanager.com .

By using Work Stack Manager, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the service.

1. Information We Collect

Account Information

When you register, we collect your username, email address, and password (stored as a one-way hash). You may optionally provide your first name, last name, and phone number as part of your customer profile.

Usage Data

We collect data you actively create within the application: stack items, session records, time logs, and any notes associated with your tasks. This data is the core of the service and is stored on your behalf.

Preferences

We store your application preferences (theme, time format, date format, timezone, and alert settings) to provide a consistent experience across sessions and devices.

Log Data

We maintain an audit log of significant account actions (such as login, logout, password changes, and preference updates) along with the IP address from which the action was performed. This log is used for security and compliance purposes.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Work Stack Manager service
• Authenticate your identity and secure your account
• Send transactional emails such as email verification and password reset links
• Maintain an audit trail for security and accountability
• Improve and develop new features based on aggregate usage patterns
• Respond to your support requests and enquiries

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Data Security

We take the security of your data seriously and implement a range of technical measures to protect it:

• Passwords are hashed using bcrypt and are never stored in plain text
• All data is transmitted over HTTPS with TLS encryption
• Password reset and email verification tokens are cryptographically random and time-limited
• Database access uses prepared statements to prevent SQL injection
• Sessions are managed securely with strict cookie settings

While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all associated data — including your profile, stack history, session records, preferences, and audit logs — is permanently deleted from our systems.

Temporary data such as password reset tokens and email verification tokens are automatically purged after expiry.

5. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data via your account settings
• Erasure — delete your account and all associated data at any time
• Portability — request an export of your data in a machine-readable format
• Objection — object to processing of your data in certain circumstances

To exercise any of these rights, please contact us at the address below.

6. Cookies and Session Storage

Work Stack Manager uses session cookies to maintain your authenticated state while you are logged in. These cookies are:

• Strictly necessary for the service to function
• Set with the HttpOnly and Secure flags
• Automatically cleared when you log out or after 24 hours of inactivity

We do not use advertising cookies or third-party tracking cookies.

7. Third-Party Services

We use a small number of third-party services to operate Work Stack Manager:

• Email delivery — used solely to send transactional emails (verification, password reset). We do not use your email address for marketing without your explicit consent.
• Hosting infrastructure — our servers and database are hosted on providers that comply with applicable data protection regulations.

We do not integrate with advertising networks, social media trackers, or analytics platforms that share data with third parties.

8. Children's Privacy

Work Stack Manager is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, by email. Your continued use of the service after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us: