Northstack Privacy Policy

Effective Date: October 19, 2026

This Privacy Policy explains how Northstack ("Northstack," "we," "us," or "our"), operated by Alejandro Bravo, an individual based in Buenos Aires, Argentina, collects, uses, shares, and protects information in connection with the Northstack service (the "Service"). Capitalized terms not defined here have the meaning given in our Terms of Service.

Beta status. The Service is currently offered as a beta / early-access product (see Section 1.1 of our Terms of Service). Because of that, the Service — and this Policy — may change more often, and with less advance notice, than a mature, generally-available product; see Section 10 (Changes to this Policy).

1. Scope and Two Kinds of Data

Northstack is a business-to-business platform. Because of that, this Policy covers two distinct kinds of personal data, and our role is different for each:

• Account Data: information about the individuals who register and use Northstack directly — a Tenant's owner, admins, and members (name, email, phone number, password, role, and related account activity). Northstack is the controller of Account Data and is directly responsible for it under this Policy.
• Processed Data: information a Tenant enters into the Service about its own employees, contractors, or clients (for example, HR records, client/contact records, and custom field values). The Tenant is the controller of Processed Data; Northstack processes it only on the Tenant's behalf and according to the Tenant's configuration of the Service, as further described in Section 3.5 of our Terms of Service.

If you are an employee or client of a company that uses Northstack, and your information appears as Processed Data in that company's account, please direct any request about your data to that company directly — we are typically not in a position to act on it unilaterally, since the company controls that data. Section 6 below explains how we handle such requests if they reach us directly.

2. Information We Collect

2.1 Account Data you provide directly

• Registration information: company name, your name, email address, phone number, and password (stored as a salted cryptographic hash, never in plain text).
• Profile information you update after registration.
• Content of support or contact communications you send us.
• Billing and subscription information: the plan you select, trial and subscription status, and transaction metadata (such as amount, date, and currency) for payments processed through Dodo Payments or Mercado Pago (Section 4.1). We do not directly collect or store your full payment card or bank account number — our payment processors collect and hold that information directly.
• If you join our Referral Program: your payout method and the account details it requires (for example, an email, bank account, CBU/CVU, or tax ID), stored encrypted and used only to pay your referral commissions. See our Referral Program Terms and Conditions.

2.2 Processed Data Tenants submit

• Employee and client/contact records entered by a Tenant's users, including names, emails, phone numbers, departments, roles, employment/client status, and any custom fields a Tenant configures (subject to the prohibited-category restriction in Section 3.4 of our Terms of Service).
• Payroll and compensation records a Tenant enters for its own employees/contractors — pay frequency, pay runs, pay stubs, and payment account details used to tell the Tenant where to send that person's pay (stored encrypted). Northstack does not use this data to execute or transmit any payment — the Payroll module is a record-keeping tool only; see Section 1.3 of our Terms of Service.
• Invoice records a Tenant creates for its own clients through the Stripe integration (line items, descriptions, amounts, and memos). This data is sent to that Tenant's own connected Stripe account so Stripe can deliver and collect the invoice; see Section 4.5.

2.3 Information collected automatically

• Usage and log data: IP address, browser type, device information, timestamps, and actions taken within the Service, collected for security, debugging, and reliability purposes.
• Local storage: we store a small amount of data in your browser's local storage (for example, your dark/light mode preference) to remember settings on that device. This data stays on your device and is not transmitted to us as tracking data.

We do not currently use third-party advertising or analytics trackers, and we do not use cookies for cross-site tracking or advertising purposes.

3. How We Use Information

We use Account Data and Processed Data to:

• provide, operate, secure, and maintain the Service (including authentication, tenant isolation, and permissions);
• provide customer support, including temporary account access a user of your Tenant authorizes (Section 4.6);
• process subscription payments and manage billing, including free trials, plan changes, and cancellations, through our payment processors (Section 4.1);
• send transactional email, such as invitation emails, password-related notices, and service announcements;
• diagnose technical issues, monitor for abuse, and improve reliability and security;
• comply with legal obligations and enforce our Terms of Service; and
• communicate with you about your account or, with your consent, about product updates.

We do not use Processed Data for any purpose outside providing the Service to the Tenant that submitted it, and we do not use Processed Data to train external/third-party machine learning models.

4. How We Share Information

We do not sell personal data. We share information only as follows:

4.1 Subprocessors (infrastructure and service providers)

We use third-party providers to operate the Service, each acting under contractual obligations consistent with the purpose for which we share data with them:

These providers' infrastructure is located primarily in the United States, except Mercado Pago, which is based in Argentina and processes ARS transactions accordingly; see Section 7 (International Data Transfers).

4.2 Within a Tenant

Account Data and Processed Data within a Tenant are visible to that Tenant's own users according to the roles and permissions the Tenant configures (owner/admin/member). We are not responsible for a Tenant's internal decisions about who to grant access to.

4.3 Legal and safety

We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Northstack, our users, or others.

4.4 Business transfers

If Northstack is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will provide notice before information becomes subject to a different privacy policy.

4.5 Integrations you choose to connect

The Service offers integrations that a Tenant may choose, at its own option, to connect to its own third-party accounts — currently Google Calendar (to sync Tasks, Time Off, and Shifts as calendar events) and Stripe. For Stripe: a Tenant connects its own Stripe account by providing its own Stripe API key, and the Service only does what that key's own permissions allow — read-only if the Tenant's key is read-only, or, if the key grants write access, the Service can also create and send Stripe-hosted invoices to that Tenant's own clients on the Tenant's behalf. Creating and sending an invoice is currently the only write action the Service performs — it does not create a Payment Intent or otherwise directly charge or collect a card itself; Stripe's own hosted invoice page is what actually delivers the invoice and collects payment. When a Tenant connects one of these integrations, the third party it connects — not Northstack — receives and processes the data exposed through that connection, under that third party's own privacy practices; see Section 8.2 of our Terms of Service.

AI assistants (MCP). When a Tenant's user connects a third-party AI assistant through the Model Context Protocol ("MCP"), the assistant can read — and, when the user asks it to, change — the data that user can already access in the Service with their current role, which may include tasks and notes, CRM records (companies, contacts, opportunities), employee records, time off, shifts and timesheets, and payroll runs (read-only); never data hidden from that user's role. Data the assistant reads is sent to the assistant's provider, which processes it under its own privacy practices (see Section 8.2 of our Terms of Service); Northstack does not control that processing. To run the connection we keep: the assistant's name, the user who connected it, and when it was connected, last used and disconnected; its access and refresh tokens, stored only in hashed form (access tokens expire after one hour, refresh tokens after 30 days); a log of the requests it makes (method, path, result and IP address); and Activity Log entries for every change it makes and every connection and disconnection. The user, or whoever manages the Tenant's integrations, can disconnect an assistant at any time.

4.6 Northstack support access to your account (only with your permission)

Northstack staff never sign in to your account, or see it the way you do, unless a user of your account explicitly accepts a request to do so. When our support team needs to look at your account to help you:

• We send the request to one specific user of your account, inside the Service and by email. It states who is asking, why, whether the access is view-only or also allows changes, and for how long. A request nobody answers lapses after 24 hours.
• Access starts only when that user accepts it, lasts at most the period shown (30 minutes, 2 hours, or 24 hours, counted from acceptance), and that user can end it at any time.
• During the access, our staff see the account with the permissions of the user who accepted it, never more. In view-only mode they cannot change anything. If changes were allowed, every change they make is recorded in your Activity Log as made by Northstack support.
• We keep a record of every request, acceptance, entry, and end of access.

Separately from this, a limited number of authorized Northstack staff can see administrative information about each Tenant that we need to operate, support, and bill the Service — such as company details, the users of the account and their roles, plan and billing status, and how much each module is used — through an internal administration tool. That tool also lets authorized staff take administrative actions such as extending a trial, changing a plan, suspending an account, or exporting a copy of a Tenant's data (for example, to fulfill a request under Section 6). Every administrative action our staff take on a Tenant is recorded together with its reason.

5. Data Retention

We retain Account Data for as long as the associated account is active, and for a reasonable period afterward to allow for account recovery, comply with legal obligations, resolve disputes, and enforce our agreements. We retain Processed Data for as long as the Tenant's account is active.

Deleting a Tenant account. The owner of a Tenant can delete the company account from the Service (Settings → Company), and Northstack may also delete an account, for example at the owner's request or under our Terms of Service. In both cases, nobody can sign in to the account from that moment, the owner is notified by email, and all Account Data and Processed Data of that Tenant is permanently deleted ten (10) days later. During those 10 days, the deletion can be reversed by contacting info@joinnorthstack.com; after that, it cannot be undone.

We keep our own copies of invoices and billing records for longer, as needed to comply with our own tax and accounting obligations, even after the rest of a Tenant's data is deleted. Payment records held by our payment processors (Dodo Payments, Mercado Pago) are kept by them according to their own obligations, independent of ours.

If you are a Referral Program Member, deleting or deactivating your account does not delete your payout method and details or the record of your referral commissions and transfers right away: we keep them, encrypted, for as long as needed to settle the commissions you had already earned and to comply with our tax and accounting obligations. See the Referral Program Terms and Conditions.

Our internal record of administrative actions taken on a Tenant (Section 4.6) continues to exist after that Tenant's account is deleted, for our own operational and compliance purposes. It is no longer linked to the deleted Tenant, but it may still contain limited details a staff member included when taking an action — for example, a user's email address noted when resetting a password.

You (or your Tenant's owner/admin) can request earlier deletion by contacting info@joinnorthstack.com.

6. Your Rights and Choices

6.1 If you are a Northstack user (Account Data)

You can access and update most of your own Account Data directly in the Service (Profile settings). You may also contact us at info@joinnorthstack.com to request access to, correction of, or deletion of your Account Data. If you are the owner of a Tenant, you can delete the whole company account yourself from Settings → Company; see Section 5 (Data Retention).

6.2 If your data appears as Processed Data

If you are an employee or client of a Northstack Tenant, that company controls its Processed Data and is the appropriate party to handle your request in the first instance. If you contact us directly at info@joinnorthstack.com, we will make reasonable efforts to identify the relevant Tenant and route your request accordingly, or provide you technical assistance to act on the Tenant's instructions, consistent with our role as a processor.

6.3 U.S. state privacy rights

Some U.S. states give residents specific rights over their personal information (for example, the right to know what is collected, and the right to request deletion). Whether these laws formally apply to Northstack depends on factors like revenue and data volume thresholds that may or may not be met at a given time. Regardless of strict legal applicability, we voluntarily extend the following to all Account Data holders: the right to request a copy of the Account Data we hold about you, and the right to request its deletion, by emailing info@joinnorthstack.com. We do not sell personal data and do not engage in behavioral advertising, so rights related to opting out of sale/sharing are not applicable to our practices.

7. International Data Transfers

Northstack is operated from Argentina, and our infrastructure providers (Section 4.1) are based primarily in the United States. By using the Service, you understand that your information, and any Processed Data your Tenant submits, will be transferred to and stored in the United States. We take contractual and technical measures with our providers intended to protect data in transit and at rest, as described in Section 8.

This Policy is not currently structured to support GDPR-specific transfer mechanisms (such as Standard Contractual Clauses) or an EU-based representative. If your organization is based in, or you are located in, the European Economic Area, United Kingdom, or Switzerland, please contact us at info@joinnorthstack.com before submitting personal data of individuals located there, so we can discuss whether the Service is currently a good fit for your compliance needs.

8. Data Security

We use reasonable technical and organizational measures designed to protect Account Data and Processed Data, including encryption of data in transit (HTTPS/TLS), salted cryptographic password hashing (scrypt), and tenant-scoped access controls enforced at the application layer. We are also building two-factor authentication (2FA) as an additional, optional account security feature; it is not yet available, and we will announce it once it is. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your data that we are required by law to notify you of, we will do so without undue delay.

9. Children's Privacy

The Service is intended for business use by adults and is not directed at, and should not be used by, individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at info@joinnorthstack.com and we will take appropriate steps to delete it.

10. Changes to this Policy

We may add, remove, or modify any provision of this Policy at any time and without prior notice, except where applicable law requires otherwise. When we make a change, we will post the updated Policy with a new effective date and notify Tenant owners with an in-app notification within the Service. That notification may arrive at or after the time the change takes effect, not necessarily before it. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

11. Contact Us

Questions, requests, or concerns about this Policy or your data can be sent to info@joinnorthstack.com.

Northstack is operated by Alejandro Bravo, based in Buenos Aires, Argentina.