Privacy policy
Effective 2026-08-22. Operated by ShowStone.
What ShowStone does with personal data when you use ShowStone, why we are allowed to, and how to make us stop.
Who is responsible
The controller of your personal data is ShowStone, at PLACEHOLDER - postal address not yet set. Data-protection questions go to [email protected].
What we store about you
Your email address and name, so we know whose account it is. Your sign-in events and the device label you gave, so you can see where the account has been used. Your plan, your usage counts and your invoices. Your settings. If you write to us, the message you sent. That is the whole list.
Why we store it
To give you an account, to run the service you asked for, to bill you, to answer you when you write, and to keep the service secure. We do not build advertising profiles and we do not sell personal data to anybody, ever.
What allows us to
Most of it is necessary to perform the contract you entered when you opened an account. Security logging rests on our legitimate interest in keeping the service safe. Where the law of your country requires consent instead, we ask for it and you may withdraw it.
Who else touches it
We use Hetzner for servers, Coolify to run them, Cloudflare and Backblaze for storage, Infisical for secrets, and Resend for the mail we send you. Model providers including Azure, Google, OpenRouter and Anthropic process the public source text we read. Visits are counted by Rybbit, which we run ourselves on our Hetzner servers. If you choose "Accept all", Microsoft (Clarity), Google (Analytics) or PostHog may also receive how you use this site, on the sites where we switch them on. Each is bound by a contract that permits them to act only on our instructions.
Data you bring with you
If your use of ShowStone involves personal data about your own customers, you are the controller of it and we are your processor. We act on your instructions, we do not use it for our own purposes, and we return or destroy it when your agreement ends. Ask at [email protected] for the data-processing agreement.
How long we keep it
Account data for as long as the account exists, and for a short period afterwards so that an accidental deletion can be undone. Invoices for as long as tax law requires. Security logs for twelve months. Anything else goes when it is no longer needed.
What you can make us do
Ask for a copy of what we hold, correct it, have it erased, restrict what we do with it, object to it, or take it elsewhere in a portable form. Write to [email protected]. We answer within 30 days and we never charge for it.
Keeping it safe
Encrypted in transit and at rest, access limited to the people who need it, secrets held in a vault rather than in code, and every access recorded. If a breach ever puts you at risk we will tell you and the regulator, within the deadline the law sets.
Children
ShowStone is not for children. We do not knowingly open accounts for anybody under 18, and we delete such an account if we learn of it.
Changes to this policy
A material change is published here with a new effective date and sent to you where we hold your address. Earlier versions stay on record.
Grievance officer
Under the Information Technology Rules 2021 and the Digital Personal Data Protection Act, complaints go to PLACEHOLDER - grievance officer not yet named at [email protected]. We acknowledge within 24 hours and resolve within 15 days.