Legal
Privacy Policy
Last updated: May 27, 2026
Draft pending legal review
This document is a working draft. Final language is subject to attorney review prior to launch. Questions? Email legal@successionstack.com.
This Privacy Policy explains how The Productive ("we", "us") collects, uses, and protects personal information through the SuccessionStack platform and website.
What we collect
- Account information — name, work email, organization, role.
- Customer Data — the employee, role, and scoring data you upload to operate the Service.
- Usage data — pages visited, features used, and aggregated performance metrics. Marketing site analytics are cookieless by default.
- Communications — emails and form submissions you send to us.
How we use it
- To deliver the Service and authenticate users.
- To respond to support requests and security incidents.
- To improve product reliability and performance.
- For marketing communications you have explicitly opted into. You can unsubscribe at any time.
How we protect it
- TLS 1.2+ in transit; AES-256 at rest.
- Row-level security per tenant in our Supabase Postgres database.
- Audit logging of every privileged action.
- Bcrypt password hashing.
- Least-privilege access controls for staff.
Subprocessors
We use a small number of carefully vetted subprocessors. See our Data Use & Subprocessorsdocument for the full list and links to each provider's Data Processing Addendum.
Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information. Email privacy@successionstack.com to exercise any of these rights. We respond within 30 days.
Cookies
We use a minimal set of cookies — see our Cookie Policy for the full breakdown and how to manage your preferences.
Data retention
Customer Data is retained for the duration of your subscription. On termination, we delete Customer Data within 30 days; backups roll off within a further 60 days. Marketing and analytics data is retained for up to 24 months.
Children
The Service is intended for use by businesses. We do not knowingly collect personal information from anyone under 16.
Changes
We may update this Privacy Policy from time to time. Material changes will be notified at least 30 days in advance.
Contact
Privacy questions: privacy@successionstack.com.