Legal
Privacy policy
Last updated 5 September 2026. This page is public so you can review how RizeStack handles personal data, including Google account access.
1. Who we are
RizeStack (“we”, “us”) designs, builds and hosts websites for independent businesses, including online booking, quotes, orders, payments and an AI assistant. This privacy policy explains what information we collect, why we use it, and how you can contact us. It applies to rizestack.com, booking.rizestack.com, and related services we operate.
2. Contact
Questions about this policy or your data? Contact RizeStack support using the link below.
3. Information we collect
Website visitors: pages viewed, device and browser type, and similar technical data needed to run the site. Customers ordering a website: name, email, password (stored hashed), business details, branding, logos and images you upload, and payment status. We do not store full card numbers — payments are handled by Stripe. Businesses using a RizeStack dashboard: account login, booking and customer records you enter or that your customers submit (for example name, email, appointment details), and, where you connect payments, Stripe account identifiers. Shop customers on a RizeStack commerce site: name, email, order contents and fulfilment status.
4. How we use information
We use this information to provide and improve the service: to build and host your website, process orders and payments, send transactional email (order, booking and fulfilment messages), provide dashboards and support, keep the service secure, and meet legal obligations. We do not sell your personal information.
5. Google account and Gmail
Businesses can connect Gmail so RizeStack can send booking, order and quote confirmations from their own address. That connection only requests permission to send email — we do not read a business inbox. The RizeStack operator (our own CRM) may connect Gmail with send and read access so we can match customer replies to the right conversation. When you connect Google, we receive an OAuth token and the Gmail address of the connected account. We do not use Gmail content for advertising, and we do not share Gmail content with third parties except as needed to operate the service (for example hosting providers that store encrypted tokens).
6. Google API Services User Data Policy (Limited Use)
RizeStack’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data obtained through Google APIs is used only to provide or improve user-facing features that are prominent in the requesting application. We do not transfer Gmail data to others unless it is necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice. We do not use Gmail data for serving advertisements. We do not allow humans to read Gmail data unless we have your affirmative agreement for specific messages, it is necessary for security or legal compliance, or the data is aggregated and no longer associated with a user.
7. Payment processors
Card payments and connected business payouts are processed by Stripe. Stripe’s privacy policy applies to data they process as a payment provider. We store Stripe identifiers and payment status, not full card details.
8. Cookies and similar technology
We use cookies or local storage as needed to keep you signed in, remember a shopping basket, and run the website. We do not use them to sell advertising profiles.
9. How long we keep data
We keep account, order and booking records for as long as you use the service and for a reasonable period afterwards for support, accounting and legal reasons. You can ask us to delete an account by contacting RizeStack support using the link below. We may retain limited records where the law requires it.
10. Sharing
We share data with service providers who help us operate RizeStack (hosting, database, email delivery, and Stripe). They may only use the data to provide those services to us. We may disclose information if required by law.
11. Security
We use industry-standard measures including HTTPS, hashed passwords, and encrypted storage of Google refresh tokens. No method of transmission or storage is completely secure.
12. Your rights
Depending on where you live, you may have the right to access, correct, or delete personal data, or to object to certain processing. Contact RizeStack support using the link below. If you connected Google, you can disconnect Gmail from your RizeStack settings and revoke access in your Google Account permissions.
13. Children
RizeStack is not directed at children under 16, and we do not knowingly collect their personal information.
14. Changes
We may update this policy. The current version will always be published at https://rizestack.com/privacy. Continued use of the service after an update means you accept the revised policy.