Privacy Policy

Cellstack ("we," "us," or "our") operates the Cellstack platform, an AI-powered lead prioritization and research tool for B2B sales teams. This Privacy Policy explains how we collect, use, store, and share information when you use our website and services (the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Account Information

When you create an account, our authentication provider (Clerk) collects your email address, name, and authentication credentials. We store a unique user identifier associated with your account across our systems.

1.2 Campaign and Analysis Data

When you use the Service, you provide data including:

• Ideal Customer Profile (ICP) descriptions and persona descriptions
• Company names and website URLs for analysis (via CSV upload or manual entry)
• Company profile information (product descriptions, target audience, writing style samples)
• Signal preferences (funding, hiring roles, tools)

1.3 AI-Generated Data

Our Service generates and stores data derived from your inputs, including:

• Company compatibility scores and ICP match assessments
• Buy signals with source citations (funding events, hiring activity, technology adoption)
• Contact information for potential leads (names, titles, LinkedIn profile URLs, and publicly available email addresses)
• Personalized outreach messages and revision history

1.4 Usage Data

We track campaign usage counts to enforce service tier limits. We do not use third-party analytics or tracking tools. Authentication session cookies are managed by our authentication provider.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process your campaign requests through our AI analysis pipeline
• Research companies against your ICP using publicly available data
• Identify potential contacts at target companies using public sources
• Generate personalized outreach messages based on analysis results
• Enforce usage limits and manage your account
• Communicate with you about the Service (account-related notices)

3. Third-Party Services and Data Sharing

To provide the Service, we share data with the following categories of third-party providers:

3.1 AI Processing (OpenAI)

We use OpenAI's API to power our analysis agents. Data sent to OpenAI includes company names, URLs, ICP descriptions, persona descriptions, and publicly available web content gathered during research. OpenAI does not use API data to train or improve its models. For details, refer to OpenAI's Enterprise Privacy policy.

3.2 Web Research (Exa)

We use Exa's search API to research companies, discover buy signals, and find contact information from publicly available sources. Company names, URLs, and search queries derived from your inputs are sent to Exa.

3.3 Authentication (Clerk)

We use Clerk for user authentication and session management. Clerk processes your email address, authentication credentials, and session data. Clerk is GDPR-compliant and certified under the Data Privacy Framework. See Clerk's Privacy Policy.

3.4 Infrastructure

Our application is hosted on Vercel. Our database is hosted on Neon (PostgreSQL). Both providers maintain industry-standard security practices and offer GDPR-compliant Data Processing Agreements.

3.5 Other Disclosures

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Cellstack, our users, or the public.

4. AI-Powered Analysis and Automated Processing

Our Service uses AI to analyze companies, score ICP compatibility, identify buy signals, and generate outreach messages. These outputs are intended as research tools to assist your sales decision-making, not as sole determinants of any action. All AI-generated scores, assessments, and recommendations are advisory in nature. You retain full control over how to act on any analysis results.

5. Data Retention

We retain your account data and campaign results for as long as your account is active. Deleted campaigns are soft-deleted (marked as removed) and may be permanently purged during routine maintenance. Company profiles can be permanently deleted at any time through the Service.

If you wish to delete your account and all associated data, please contact us at the email address provided below.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encrypted connections (TLS/HTTPS) for all data in transit
• Database encryption at rest provided by our infrastructure provider
• User-scoped data access (each user can only access their own data)
• Secure API key management through environment variables
• Authentication and session management through Clerk

7. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data, subject to legal obligations.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing of your personal data for certain purposes.

To exercise any of these rights, contact us at info@cellstackai.com. We will respond within 30 days.

8. International Data Transfers

Your data may be processed in the United States and other jurisdictions where our service providers operate. Our providers (Clerk, Vercel, Neon, OpenAI) maintain appropriate safeguards for international data transfers, including Data Processing Agreements and certifications under the Data Privacy Framework where applicable.

9. Cookies

We use essential cookies only, managed by our authentication provider (Clerk), to maintain your login session. We do not use advertising, analytics, or tracking cookies.

10. Children's Privacy

The Service is intended for business professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

info@cellstackai.com