Privacy Policy

1. Introduction

STELLAR, operated by ALTIVO Sp. z o.o. in Poland, is committed to protecting your privacy and personal data in accordance with applicable data protection laws including GDPR.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the STELLAR platform and services.

We are the data controller for the personal data we process.

2. Personal Data We Collect

2.1 Information You Provide

• Account information: name, email address and password (stored only as a hash); or, if you sign in with a third-party account, the name, email address and profile picture it shares with us
• Payment information: card details, cardholder name and billing address, and for some regional payment methods a phone number. They are passed to our payment processor to take the payment; we do not store card numbers or security codes
• Specialist information: experience, skills, CV, portfolio, LinkedIn and GitHub links, quiz and test answers; for payouts, a passport or ID document, proof of address and bank details (account holder, bank name, IBAN)
• Communications: messages sent through our platform, support inquiries
• Service requests: project descriptions, requirements

2.2 Automatically Collected Information

• Technical data: IP address, browser type and version, device information
• Security data: your IP address and the country derived from it, used to protect sign-up and sign-in and to apply the country restrictions in our AML Policy
• Cookies and tracking technologies (see our Cookie Policy)

2.3 Information from Third Parties

We receive the payment result from our payment processor and, if you choose to sign in with a third-party account, your name, email address and profile picture from that sign-in provider.

3. Legal Basis and Purposes for Processing

We process your personal data only when we have a lawful basis:

3.1 Contractual Necessity

To provide our services, process transactions, and fulfill our contractual obligations to you.

3.2 Legitimate Interests

• Platform improvement and optimization
• Fraud prevention and security
• Customer support and relationship management

3.3 Legal Obligations

To comply with legal requirements including accounting and regulatory obligations.

3.4 Consent

Where we ask for your consent, you may withdraw it at any time. We currently set only necessary cookies, which do not need consent, and we do not send marketing emails.

4. Data Sharing and Disclosure

We do not sell your personal data. We share data only as follows:

4.1 Service Providers

We engage trusted third-party processors for:

• Payment processing
• Cloud hosting and infrastructure
• Email communications
• AI model provider (to match your request with suitable specialists)

All processors are bound by data processing agreements ensuring compliance.

4.2 Specialists

When you engage a specialist, relevant project information is shared to facilitate service delivery.

4.3 Legal Requirements

We may disclose data when required by law, to protect our rights, or in response to valid legal requests from authorities.

5. International Data Transfer

Our hosting, database and other service providers may process data outside the European Economic Area, including in the United States. Where they do, we rely on appropriate safeguards:

• Standard Contractual Clauses
• Adequacy decisions where applicable
• Other legally recognized transfer mechanisms

6. Data Retention

We retain personal data only as long as necessary:

• Account data: while your account is active. When you delete your account, your name, email address and sign-in details are removed straight away; payment and transaction records stay in anonymised form
• Transaction records: 7 years for accounting and regulatory purposes
• Technical logs: 90 days

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (HTTPS)
• Access controls and authentication
• Passwords stored only as hashes
• Card numbers and security codes are never stored on our servers
• Incident response procedures

In the event of a data breach affecting your rights, we will notify you and the relevant authorities as required by law.

8. Your Rights

You have the following rights regarding your personal data:

8.1 Right of Access

Request a copy of your personal data we hold.

8.2 Right to Rectification

Correct inaccurate or incomplete personal data.

8.3 Right to Erasure

Request deletion of your personal data (subject to legal retention requirements).

8.4 Right to Restriction

Request restriction of processing in certain circumstances.

8.5 Right to Data Portability

Receive your data in a structured, commonly used format and transmit it to another controller.

8.6 Right to Object

Object to processing based on legitimate interests or for direct marketing.

8.7 Right to Withdraw Consent

Withdraw consent for processing based on consent (does not affect prior lawful processing).

To exercise these rights, contact us at support@stellarai.space. We will respond within one month. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or with the data protection authority of the country where you live.

9. Cookies and Tracking

We use cookies and similar technologies. For detailed information, see our Cookie Policy. We set only necessary cookies. You can delete or block cookies in your browser settings at any time.

10. Marketing Communications

We do not send marketing emails: our emails are about your account, payments and orders. If we ever start, we will ask for your consent first, and every message will carry an unsubscribe link. Questions: support@stellarai.space.

11. Children's Privacy

STELLAR is for adults only: you must be at least 18 to use it. We do not knowingly collect personal data from anyone under 18. If you believe we have collected data from a minor, please contact us immediately at support@stellarai.space.

12. Automated Decision Making

We may use automated systems to match clients with specialists. You have the right to request human review of automated decisions that significantly affect you.

13. Changes to Policy

We may update this Privacy Policy from time to time. Material changes will be notified to you by email or prominent notice on our platform at least 30 days in advance.