Privacy Policy

1. Introduction

MatchStack.io ("Platform," "we," "us," or "our") is owned and operated by InternPro, Inc. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using MatchStack, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Platform.

2. Data Controller

For data protection inquiries, contact our Data Protection Officer at dpo@internpro.ai.

3. Geographic Scope

MatchStack services are currently available only to users and businesses located in the United States. We do not knowingly collect data from individuals outside the U.S. If you access our Platform from outside the United States, you do so at your own risk and are responsible for compliance with local laws.

4. Information We Collect

4.1 Information You Provide

• Account Information: Name, email address, company name, phone number, job title
• Business Information: Company size, industry, project requirements
• Payment Information: Billing address, payment card details (processed by Stripe)
• Communications: Messages, feedback, and support requests

4.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, click patterns, referring URLs
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies

5. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our talent matching services
• Account Management: To create and manage your account, process payments
• Communication: To send service updates, respond to inquiries, provide support
• Analytics: To understand usage patterns and improve our Platform
• Marketing: To send promotional materials (with your consent)
• Security: To detect, prevent, and address fraud or security issues
• Legal Compliance: To comply with applicable laws and regulations

6. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our service agreement with you
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: For our business operations, security, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

7. Data Retention

We retain your personal information as follows:

• Active Accounts: Data is retained for the duration of your account
• Inactive Accounts: Data is deleted after 36 months of inactivity
• Payment Records: Retained for 7 years for tax and legal compliance
• Analytics Data: Aggregated data may be retained indefinitely

You may request deletion of your data at any time, subject to our legal retention requirements.

8. Third-Party Service Providers

We share data with the following categories of service providers:

• Payment Processing: Stripe
• Analytics: PostHog, Plausible
• Cloud Infrastructure: Cloudflare
• Communication: Email service providers

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

9. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Opt-Out: Opt out of marketing communications at any time
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@matchstack.io. We will respond within 30 days.

10. State-Specific Rights

California Residents (CCPA/CPRA)

California residents have additional rights including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. We do not sell personal information.

Colorado, Connecticut, Utah, Virginia Residents

Residents of these states have similar rights under their respective privacy laws. Contact us to exercise your rights.

11. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Role-based access with multi-factor authentication
• Monitoring: Continuous security monitoring and logging
• Incident Response: Documented procedures for security incidents

In the event of a data breach affecting your personal information, we will notify you within 72 hours as required by applicable law.

12. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

• Essential Cookies: Required for Platform functionality
• Analytics Cookies: To understand how visitors use our Platform
• Preference Cookies: To remember your settings and preferences

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

13. Automated Decision-Making

We may use automated systems to assist in matching clients with engineers. These systems analyze project requirements and engineer skills to suggest optimal matches. You have the right to request human review of any automated decision that significantly affects you.

14. Children's Privacy

MatchStack is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on the Platform at least 30 days before taking effect. Your continued use of the Platform after changes become effective constitutes acceptance of the updated policy.

16. Contact Us

For questions or concerns about this Privacy Policy or our data practices: