Privacy Policy

Last updated: October 8, 2026

1. Introduction

KoreStack ("we", "us", "our") provides website, cloud, security, AI, automation and software development services. This policy explains what personal data we collect when you use our website or services, why we collect it, and the choices you have. KoreStack is the data controller responsible for this processing, and this policy is intended to comply with the EU General Data Protection Regulation (GDPR) and Spain's data protection framework.

2. Information we collect

• Contact details you submit through forms or email, such as your name, email address, and company.
• Account information if you register, including your name, email address, and a securely hashed password, or, if you use Google, GitHub or Discord to sign in, the basic profile details those providers share with us.
• Basic technical data such as browser type, device type, and pages visited, collected automatically to keep the site secure and working correctly.
• Information you provide when requesting a quote or contacting support, including project details you choose to share.

3. How we use your information, and our legal basis

• To respond to inquiries and prepare custom quotes (based on your consent or pre-contractual steps you initiate).
• To create and manage your account and dashboard access, including linking Google, GitHub or Discord sign-in to your account at your request (necessary to perform our contract with you).
• To deliver, maintain, and improve the services you've engaged us for (contractual necessity).
• To send service-related communications, such as security notices or account updates (contractual necessity or legitimate interest).
• To meet legal and accounting obligations (legal obligation).

4. Cookies

We use a small number of cookies to remember your language, theme, and cookie preferences. See our Cookie Policy for full details and how to manage your choices.

5. Sharing your information

We do not sell your personal data. We may share limited information with trusted service providers who help us operate our infrastructure (such as hosting and email delivery), with Google, GitHub or Discord if you choose to sign in or link your account with them, or where required by law.

6. International data transfers

Some of the service providers we rely on (such as cloud hosting or email delivery) may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards recognized under GDPR, such as Standard Contractual Clauses, to protect your data.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed for these purposes, we delete or anonymize it.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at support@korestack.ma. If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) or your local supervisory authority.

9. Children's privacy

Our services are intended for people 18 years of age or older, consistent with our Terms of Service, and we do not knowingly collect personal data from anyone younger. If you believe a minor has provided us with personal data, contact us and we will delete it.

10. Security

We apply reasonable technical and organizational measures, including encryption in transit, password hashing, and access controls, to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

12. Contact us

Questions about this policy can be sent to support@korestack.ma.