Privacy, Unstuck style
What we know about you, what we do with it, what you can take back.
Most privacy policies are boilerplate plus a vendor list, written so you'll skim it and click 'I agree.' Ours starts with the highlights — the parts you'd actually want to know before handing us your data — then the full legal text below.
If a card and a clause disagree, the clause wins. But the cards are the truth, just shorter and angrier about it.
The cards summarize the policy. The legal text below is the policy. They're aligned, but only the legal text binds — that's how this works.
US + UK + EU friendly.
We honor CCPA, UK GDPR, and GDPR rights — access, correction, deletion, portability, the works. We'll sign your DPA and SCCs without a redline war. Customer Data is processed on infrastructure we operate in the US; if you need EU-only residency, talk to us before you sign.
Three buckets of data.
Account data — name, email, company, role you typed at signup. Usage data — pages visited, buttons clicked, errors hit, so we can fix bugs and ship better. Customer Data — the signals, leads, and scores you bring in or generate inside the product. Bucket three is yours; we just hold it for you.
We don't sell or "share" your data.
No data brokers. No "monetization partners." No off-label use. We don't run third-party advertising or retargeting pixels — nothing from Meta, LinkedIn, or Google on the marketing site, nothing inside the product. The only third parties that touch your data are the sub-processors we use to actually run Unstuck (hosting, analytics, email, payments).
Cookies, in two buckets.
Strictly-necessary cookies for login, session, and theme preference. First-party analytics (PostHog and Vercel Analytics) so we can see which pages get used and fix what breaks. No third-party ad pixels anywhere. We honor Global Privacy Control and Do Not Track — flip either on in your browser and analytics opts out automatically, no banner click required.
It's your data. Take it. Delete it. Just ask.
Want a copy? Email us and we'll send a clean export (CSV / JSON / Parquet). Want it gone? Same email, we delete within 30 days. Want to know everything we have on you (DSAR)? Same. No ticket portal, no chatbot loop — a real person reads the email and writes back.
1.Scope
1.1. This Privacy Policy describes how Unstuck Engine ("Unstuck," "we," "us") collects, uses, shares, and protects personal information in connection with the website at https://unstuckengine.com, the Unstuck Engine product surfaces (the Web UI, APIs, CLI, and MCP Server), and any related materials (collectively, the "Services").
1.2. This Policy applies to (a) prospects and visitors to the Website; (b) Unstuck customers and their authorized users; and (c) third parties whose information may appear in Customer Data uploaded to or generated by the Services.
2.Information We Collect
2.1. Account Data. When you create an account or contact us, we collect identifiers you provide directly, such as first name, last name, email address, company name, job title, and (if applicable) billing address.
2.2. Usage Data. When you use the Website or the Services, we automatically collect technical and behavioral data, including IP address, browser type, operating system, device identifiers, pages and screens viewed, features used, request latency, and error events.
2.3. Customer Data. When you use the Services, you upload to or generate within the Services data about your prospects, customers, and accounts ("Customer Data"), including signals, leads, companies, ICP and persona definitions, scores, and enrichment results. Customer Data may include personal data of third parties.
2.4. Cookies and Similar Technologies. We use cookies, local storage, and pixel-style beacons to operate the Website and the Services. Details are set out in Section 5 (Cookies & Tracking).
3.How We Use Information
3.1. Service Delivery. We use Account Data and Customer Data to provision your account, authenticate users, route API requests, run signal qualification, enrichment, and other product functions you invoke.
3.2. Product Operations and Improvement. We use Usage Data — and only Usage Data — to monitor reliability, debug errors, prioritize roadmap work, and measure feature adoption.
3.3. Communication. We use Account Data to send transactional messages (billing, security, account changes), respond to support requests, and — only with appropriate consent — to send marketing communications you can unsubscribe from at any time.
3.4. Security and Compliance. We use information as necessary to detect and prevent abuse, fraud, and security incidents, and to comply with our legal obligations.
3.5. We do not use Customer Data to train, fine-tune, or otherwise improve any machine learning model, whether ours or any third party's, except as strictly necessary to generate a single response to your request.
6.Data Retention
6.1. Account Data is retained for the lifetime of your account and for a reasonable period after termination as required by law or for the resolution of disputes.
6.2. Customer Data is deleted within thirty (30) days of account termination, as set out in the Terms of Service (Section 5), except where retention is required by law.
6.3. Usage Data is retained in identifiable form for up to twenty-four (24) months and thereafter only in aggregated or anonymized form.
6.4. Backups containing personal data are retained on a rolling basis and are overwritten or destroyed in accordance with our backup rotation schedule.
7.Your Rights
7.1. Subject to applicable law (including GDPR, UK GDPR, and CCPA), you have the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate or incomplete information; (c) request deletion of your personal information; (d) request a portable copy of your information in a commonly used machine-readable format; (e) object to or restrict certain processing; and (f) withdraw any consent you have previously given.
7.2. To exercise these rights, email run@unstuckengine.com from the address associated with your account, or — if you are a data subject whose information we process on behalf of an Unstuck customer — contact that customer directly. We respond to verified requests within thirty (30) days.
7.3. You also have the right to lodge a complaint with the data protection authority in your jurisdiction.
7.4. California Residents (CCPA). California residents have additional rights, including the right to know what personal information has been collected, sold, or shared in the past twelve (12) months, and the right to opt out of sale or sharing. We do not sell personal information for monetary consideration, and we do not engage in "sharing" for cross-context behavioral advertising — no retargeting pixels run on the Website or the product. To exercise CCPA rights or ask questions, email run@unstuckengine.com.
8.International Data Transfers
8.1. Unstuck Engine is established in the United States. By default, Customer Data is processed on infrastructure that we operate in the United States.
8.2. Where we transfer personal data of EU/EEA, UK, or Swiss data subjects out of those jurisdictions, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum.
8.3. Customers requiring EU-only data residency or other specific transfer arrangements should contact us before signing.
9.Security
9.1. We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit (TLS), encryption at rest, role-based access control, audit logging, and regular review of vendor security posture.
9.2. No method of transmission or storage over the internet is 100% secure. We cannot guarantee absolute security, but we work to detect, contain, and notify of incidents in line with applicable law and our customer agreements.
10.Third-Party Links and Services
10.1. The Website and the Services may contain links to third-party websites or services we do not control. This Policy does not apply to those properties; review their privacy policies before providing personal information.
11.Children's Privacy
11.1. The Services are not directed to individuals under the age of 18 and we do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it.
12.Changes to this Policy
12.1. We may update this Policy from time to time. Material changes will be communicated by updating the "Last updated" date at the top of this page and, where appropriate, by notice on the Website or to the email address on file.
12.2. Your continued use of the Website or the Services after the effective date of any change constitutes your acceptance of the updated Policy.
13.Contact
13.1. Questions, requests, or complaints about this Policy or your personal information may be directed to run@unstuckengine.com.