Skip to content
SuccessionStack

Legal

Privacy Policy

Last updated: May 27, 2026

Draft pending legal review

This document is a working draft. Final language is subject to attorney review prior to launch. Questions? Email legal@successionstack.com.

This Privacy Policy explains how The Productive ("we", "us") collects, uses, and protects personal information through the SuccessionStack platform and website.

What we collect

  • Account information — name, work email, organization, role.
  • Customer Data — the employee, role, and scoring data you upload to operate the Service.
  • Usage data — pages visited, features used, and aggregated performance metrics. Marketing site analytics are cookieless by default.
  • Communications — emails and form submissions you send to us.

How we use it

  • To deliver the Service and authenticate users.
  • To respond to support requests and security incidents.
  • To improve product reliability and performance.
  • For marketing communications you have explicitly opted into. You can unsubscribe at any time.

How we protect it

  • TLS 1.2+ in transit; AES-256 at rest.
  • Row-level security per tenant in our Supabase Postgres database.
  • Audit logging of every privileged action.
  • Bcrypt password hashing.
  • Least-privilege access controls for staff.

Subprocessors

We use a small number of carefully vetted subprocessors. See our Data Use & Subprocessorsdocument for the full list and links to each provider's Data Processing Addendum.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information. Email privacy@successionstack.com to exercise any of these rights. We respond within 30 days.

Cookies

We use a minimal set of cookies — see our Cookie Policy for the full breakdown and how to manage your preferences.

Data retention

Customer Data is retained for the duration of your subscription. On termination, we delete Customer Data within 30 days; backups roll off within a further 60 days. Marketing and analytics data is retained for up to 24 months.

Children

The Service is intended for use by businesses. We do not knowingly collect personal information from anyone under 16.

Changes

We may update this Privacy Policy from time to time. Material changes will be notified at least 30 days in advance.

Contact

Privacy questions: privacy@successionstack.com.