Our Commitment
CiderStack is built on trust. We collect only what we need to provide our service, we never sell your data, and we're transparent about how we use it.
1. Who We Are
CiderStack ("we", "us", "our") is a macOS virtualization software company. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website, software, and services.
Contact Information:
CiderStack
2261 Market Street STE 72423
San Francisco, CA 94114
Email: [email protected]
2. Information We Collect
Information You Provide
- Account Information: Name, email address, company name when you sign up for beta access or create an account
- Survey Responses: Role, use case, and other optional information you provide during signup
- Payment Information: Billing details processed securely through Stripe (we don't store full card numbers)
- Support Communications: Messages you send to our support team
Information Collected Automatically
- License Activation Data: Machine identifiers (hardware UUID) used to activate and validate licenses
- Usage Analytics: Basic analytics about feature usage to improve our product (can be disabled)
- Website Analytics: Anonymous page views via visitors.now (privacy-focused, no personal data collected)
Information We Do NOT Collect
- Contents of your virtual machines
- Files on your computer
- Network traffic from your VMs
- Screenshots or recordings
- Keystrokes or personal communications
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide our software and services | Account info, license data | Contract performance |
| Process payments | Billing information | Contract performance |
| Send important updates | Email address | Contract performance |
| Improve our product | Anonymous usage data | Legitimate interest |
| Respond to support requests | Contact info, messages | Contract performance |
| Send marketing (beta updates) | Email address | Consent |
4. Data Sharing
We share your data only with:
- Stripe: Payment processing
- Resend: Transactional email delivery
- Railway: Cloud hosting (data processing)
- Neon: Database hosting
- visitors.now: Anonymous website analytics (no personal data)
We do not sell your personal information. We do not share your data with advertisers. We do not use your data for AI training.
5. Data Retention
- Account data: Retained while your account is active, deleted within 30 days of account deletion
- License activation data: Retained while license is valid
- Payment records: Retained for 7 years (legal requirement)
- Support communications: Retained for 2 years
- Beta signup data: Retained until you request deletion or 2 years after last contact
6. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data
- Portability: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing emails
- Withdraw consent: Where processing is based on consent
To exercise these rights, email [email protected]. We'll respond within 30 days.
7. Security
We protect your data with:
- Encryption in transit (TLS 1.3) and at rest
- Secure password hashing (Argon2)
- Regular security audits
- Limited employee access on a need-to-know basis
- Ed25519 cryptographic signatures for license validation
8. Cookies & Analytics
Our website uses minimal cookies:
- Session cookie: Required for login functionality (if you have an account)
- CSRF token: Security cookie to prevent cross-site attacks
We use visitors.now for privacy-focused website analytics. This service collects anonymous page view data only—no personal information, no cookies, and no cross-site tracking. You can learn more at visitors.now.
9. International Transfers
Our servers are located in the United States. If you're accessing our services from outside the US, your data will be transferred to and processed in the US. We ensure appropriate safeguards are in place for such transfers.
10. Children's Privacy
CiderStack is not intended for children under 16. We don't knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of significant changes by email or through our website. The "Last updated" date at the top indicates when the policy was last revised.
12. Contact Us
Questions about this Privacy Policy? Contact us:
- Email: [email protected]
- Address: 2261 Market Street STE 72423, San Francisco, CA 94114
California Residents
Under the California Consumer Privacy Act (CCPA), you have additional rights including the right to know what personal information we collect and the right to opt-out of the "sale" of personal information. We do not sell personal information.