Privacy Policy

This Privacy Policy explains how MeaningStack B.V. (“MeaningStack”, “we”) handles personal data when you use our website and our Services, including KamiraFlow and Steward. We are based in the European Union and aim to handle personal data in line with the EU General Data Protection Regulation (GDPR).

1. Who is responsible

MeaningStack B.V. is the controller for personal data we process about visitors and account holders. Where we process data on behalf of a business customer (for example, data sent through the Steward SDK), we act as a processor under that customer’s instructions; in that case our Data Processing Agreement applies.

2. What we collect

• Account data: name, work email, organisation, and role, when you sign up or contact us.
• Connection data: for KamiraFlow, repository and delivery metadata from systems you connect (such as GitHub). Source code is not ingested unless you explicitly elect a feature that requires it.
• Usage data: logs, device and browser information, and how you interact with the Services, for security and improvement.
• Communications: messages you send us, including waitlist and support requests.

3. Why we use it (legal bases)

We process personal data to: provide and secure the Services (performance of a contract); improve and develop the Services and communicate with you (legitimate interests); and comply with legal obligations. Where required, we rely on your consent, which you may withdraw at any time.

4. AI providers and sub-processors

Some features use third-party AI providers and infrastructure sub-processors. We share with them only the data needed to deliver the feature, under appropriate contractual safeguards. We take steps to avoid sending source code, secrets, and credentials to AI providers.

5. International transfers

We aim to keep data within the EU/EEA where practical. Where data is transferred outside the EEA, we use recognised safeguards such as the European Commission’s Standard Contractual Clauses.

6. Retention

We keep personal data for as long as needed to provide the Services and to meet legal, accounting, or reporting obligations. Audit and acceptance records may be retained for the periods required by applicable regulation.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, and port your personal data, and to object to certain processing. You may also lodge a complaint with your local supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens). To exercise your rights, contact us at the address below.

8. Security

We use technical and organisational measures appropriate to the risk, including access controls, encryption in transit, and tamper-evident records where applicable. No system is perfectly secure, and we cannot guarantee absolute security.

9. Cookies

Our website uses only the cookies necessary to operate it and, where you consent, limited analytics. You can control non-essential cookies through the consent options presented to you.

10. Changes

We may update this Policy. Material changes will be notified through the Services or by other reasonable means, and the version identifier above will change.

11. Contact

Privacy questions or requests: admin@meaningstack.com.