Privacy Policy
Plain-language summary of what we collect, why, and how to have it deleted. Last updated: September 2026.
1. Who we are
RabStack S.A.S. (“RabStack”, “we”) is a software engineering company based in Montevideo, Uruguay. For any privacy question you can write to hello@rabstack.com.
2. What we collect
- Information you send us. When you use the contact form, email us or book a call we collect your name, work email, company and the message you write. We use a third-party scheduling provider if you choose to book a slot.
- Client workspace data. If you are a client, project data (tickets, recordings, documents) lives in the workspace agreed in your contract and is processed only to deliver the engagement.
- Technical data. Standard server logs (IP address, user agent, requested URL) and privacy-friendly aggregate analytics to understand which pages are useful.
3. What we do not do
- We do not sell or rent your data to anyone.
- We do not use client data to train AI models for other customers.
- We do not send marketing email to people who did not ask for it.
4. Legal bases
Where GDPR applies we rely on: consent (contact form submissions), contract performance (client engagements) and legitimate interest (securing and improving this website). You can withdraw consent at any time by writing to us.
5. Retention
Contact enquiries that do not become engagements are deleted after 12 months. Client engagement data is retained for the term of the contract plus the period required by our contractual and accounting obligations, then deleted or returned.
6. Sub-processors
We use a small set of vendors to run the business — hosting, email, error monitoring and scheduling. Clients receive the current sub-processor list with the security addendum before an engagement starts.
7. Your rights
You can request access, correction, export or deletion of your personal data, and object to processing. Write to hello@rabstack.com and we will respond within 30 days.
8. Cookies
This site uses only essential cookies plus privacy-friendly aggregate analytics. We do not run third-party advertising trackers.
9. Changes
If we change this policy we update the date at the top of this page. Material changes are communicated to active clients by email.
This page is a good-faith summary of our practices, not legal advice. Ask us for the signed contract terms or the security addendum before an engagement — we are happy to answer questions from your legal team. See also our Terms of Service.
Need our security addendum or DPA?
We share our sub-processor list, data handling notes and the standard addendum before any engagement begins.