Privacy Policy

1. Who We Are

AskMyStack is a product of Salterton Technologies, Inc., operating under the Vambrace AI brand. We help writers bring their content archives to life through AI-powered conversations.

2. What Data We Collect

From Writers (Account Holders)

• Account information: Email address, name (if provided via Google OAuth)
• Content uploads: Your Substack archive files (HTML, markdown, or exported content)
• Payment information: Processed securely through Stripe (we do not store card numbers)

From Readers (Chat Users)

• Chat logs: Questions asked and AI responses generated
• Email address: If provided through email gate (optional, configured by writer)
• Session data: Anonymous session identifiers for conversation continuity

Automatically Collected

• IP address (for security and rate limiting)
• Browser type and device information
• Usage analytics (page views, feature usage)

3. How We Process Your Data

Your uploaded content is processed to create searchable embeddings stored in our vector database. This enables the AI to find relevant excerpts when answering reader questions.

4. Where We Store Your Data

• Application hosting: Vercel (United States)
• Database: Digital Ocean managed PostgreSQL (United States)
• File storage: Digital Ocean Spaces (United States)

All data is encrypted in transit (TLS) and at rest.

5. Third-Party Services

We integrate with the following services:

• Google OAuth: For account authentication
• Stripe: For payment processing
• DeepSeek: For AI chat functionality

Each service has its own privacy policy governing how they handle data.

6. Data Sharing

We may share data:

• With service providers necessary to operate the Service (as listed above)
• When required by law or to protect our legal rights
• In connection with a business transfer (merger, acquisition, etc.)

7. Data Retention

• Account data: Retained while your account is active
• Content uploads: Retained while your account is active
• Chat logs: Retained for 90 days, then anonymized or deleted
• After account deletion: All data removed within 30 days

8. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Delete your account and all associated data
• Export: Download your uploaded content at any time
• Opt-out: Unsubscribe from marketing emails

To exercise these rights, email us at privacy@vambrace.ai

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics are collected in aggregate without individual tracking.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. California Privacy Rights (CCPA)

California residents have additional rights including the right to know what personal information we collect, the right to delete your information, and the right to opt-out of the sale of your information. We do not sell personal information.

12. European Privacy Rights (GDPR)

If you are in the EEA, you have rights under GDPR including data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is contract performance (providing the Service) and legitimate interests (improving our Service).

13. Changes to This Policy

We will notify you of material changes by email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

14. Contact Us

For privacy questions or to exercise your rights: