01Data controller
This policy explains how Stack Vibe LLC (United States), parent company of its subsidiary AppWeb Plus, collects and uses your personal data when you visit this website, contact us or use our services.
- Company
- Stack Vibe LLC
- Contact
- contact@appweb-plus.com
- Phone
- +216 25 789 309
02Data we collect
We only collect the data we need:
- Contact data: name, email, phone number, company, content of your messages — when you write to us or request a quote.
- Contract and billing data: company name, billing address, tax number where applicable, order and invoice history.
- Payment data: processed directly by our payment provider (see section 04). We only receive limited information (amount, date, status, last four digits and card type).
- Technical data: IP address, browser type, pages viewed, technical logs required for the operation and security of the website.
- Project data: access credentials, content and files you entrust to us to deliver the service.
03Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to your enquiries and preparing quotes | Pre-contractual steps taken at your request |
| Delivering services, invoicing, collecting payment | Performance of the contract |
| Meeting our accounting and tax obligations | Legal obligation |
| Securing the website, preventing fraud | Legitimate interest |
| Audience measurement (if enabled) | Consent |
| Informing you about our services (existing clients) | Legitimate interest — you can unsubscribe at any time |
We never sell or rent your personal data.
04Payments
Card payments are processed by a specialised payment provider certified PCI-DSS Level 1. Your card details are entered and stored directly with this provider; they never pass through our servers and we never have access to them. The provider may use certain data for fraud prevention, in accordance with its own privacy policy.
05Recipients and processors
Your data is accessible only to the members of our team who need it, and to our technical processors, strictly within the scope of their assignment:
- payment provider;
- website and project hosting, email services;
- project management and version control tools (for example GitHub / GitLab);
- AI model providers, only where the client's project requires it and with the client's consent.
These providers are bound by confidentiality and security obligations. We may also disclose data where required by law.
06International transfers
As our business and some of our providers are located outside your country (notably in the United States), your data may be transferred abroad. Where required, these transfers are subject to appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
07Retention periods
- Contact requests and quotes not followed up: 3 years after the last exchange.
- Client data and contracts: duration of the relationship, then 5 years.
- Invoices and accounting records: the period required by applicable law (up to 10 years).
- Technical logs: 12 months maximum.
09Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), restricted and named access, strong authentication on our tools, regular backups and updates. As no method is infallible, we will notify you of any incident affecting your data where required by law.
10Your rights
Depending on the applicable legislation (in particular the GDPR for individuals located in the European Union, or any other applicable local data protection law), you have the following rights:
- access, rectification and erasure of your data;
- restriction of and objection to processing;
- data portability;
- withdrawal of your consent at any time;
- lodging a complaint with the competent data protection authority.
To exercise your rights, write to contact@appweb-plus.com. We will respond within 30 days at most. Proof of identity may be requested.
11Data of our clients' customers
When we develop or maintain a website, store or application on your behalf, we act as a processor: we process your users' data solely on your instructions and for the purposes of the service. A data processing agreement (DPA) can be concluded on request.
12Changes
We may update this policy to reflect changes in our services or in regulations. The date of the last update appears at the top of this page.