Privacy Policy

1. Scope & Privacy Commitment

This Privacy Policy applies to all interactions with us through us.stackvelsolutions.com, project inquiry channels, email correspondence, and bilateral service contracts. We operate under a strict privacy-first principle: we collect only the minimum data required to scope, engineer, and deliver manufacturing website projects.

2. Information We Collect

We purposefully avoid collecting unnecessary personal information. The data we process is limited to:

• Business Contact Information: Name, work email address, company name, telephone number, and website URL submitted through our inquiry form.
• Project Scoping Details: Manufacturing sector, packaging preference (e.g., Essentials, Manufacturer, Product Catalog), estimated timeline, budget range, and high-level project goals.
• Technical Session Metadata: Ephemeral server logs including IP address, browser user-agent, timestamp, and referrer to facilitate network security and prevent denial-of-service abuse.
• Session Tokens: Cryptographically generated anti-CSRF tokens stored temporarily in server session memory to protect web submissions from cross-site request forgery attacks.

3. How We Use Your Information

Your information is utilized solely for lawful business purposes, including:

• Evaluating technical viability, deliverables, and architecture requirements for your manufacturing web project.
• Drafting detailed proposals, statements of work (SOW), and milestone agreements.
• Communicating milestone progress, staging reviews, and final handover procedures during active engagements.
• Defending our infrastructure against spam, automated bots, and malicious transmission attempts.

4. Technical Architecture & Security

We engineer our website without reliance on invasive third-party ad networks, third-party tag managers, or commercial tracking pixels. Our infrastructure implements multiple layers of protection:

• Transport Security: Strict HTTPS with modern TLS cipher suites and HSTS headers.
• Form Handshake Protection: Two-way cryptographic CSRF validation tokens with strict origin checking.
• Bot Mitigation: Hidden honeypot fields that trap automated scrapers without requiring invasive CAPTCHAs.
• Restricted Access: Client project records and CAD/machinery references are stored in isolated, access-controlled repositories accessible only to authorized engineers.

5. Third Parties & Sub-Processors

We do not share your inquiry data with marketing platforms. Essential service providers utilized in the ordinary course of our operations include:

• Hosting & Compute: Secure cloud web hosting infrastructure providing DNS and physical server hosting.
• Business Email Delivery: Enterprise email infrastructure utilized to receive and respond to inquiries.
• Legal Compliance: We may disclose information if required by subpoena, court order, or applicable law to protect our legal rights.

6. Data Retention & Disposal

Inquiry records that do not proceed into contracted projects are purged on a 12-month rolling cycle. For contracted clients, project specifications and invoicing records are maintained for the statutory duration required by commercial and tax accounting laws, after which they are securely wiped.

7. Your Rights (US State Laws & GDPR)

Regardless of whether you are located in California (CCPA/CPRA), Virginia (VCDPA), Colorado, the European Union, or elsewhere, we extend universal privacy protections to all visitors:

• Right to Know & Access: You can request a summary of the personal information we hold about you.
• Right to Rectification: You may correct inaccurate or outdated business contact details.
• Right to Deletion: You can request the permanent removal of your contact history from our inquiry database.
• Right to Opt-Out: Because we do not sell or share data for cross-context behavioral advertising, you are permanently opted out by default.

8. Privacy Contact & Data Officer

For inquiries regarding this policy, to request data deletion, or to submit legal correspondence, please reach out directly: