StemAllDay

Privacy Policy

Last updated: March 2026

1. Information We Collect

Account Information. When you create an account through Clerk, we collect your email address, display name, and authentication credentials. Clerk manages all authentication data on our behalf.

Database Credentials. When you connect a data source, we store your database connection credentials. All credentials are encrypted at rest using AES-256-GCM encryption before being stored.

Payment Information. Payments are processed through PortOne (Toss Payments). We never store your credit card numbers, CVV codes, or full payment details on our servers. PortOne handles all sensitive payment data in compliance with PCI DSS standards.

Usage Data. We collect basic, non-identifiable usage data such as page views and feature interaction patterns to improve the service.

2. How We Use Your Information

  • Delivering and maintaining the service, including user authentication.
  • Connecting to your database and running read-only signup queries.
  • Processing subscription payments and managing billing.
  • Improving the service and fixing bugs.

3. Database Access

StemAllDay only executes read-only queries on your database. We never modify, delete, or insert any data. All queries are limited to COUNT and time-based aggregation for signup statistics.

Credentials are encrypted with AES-256-GCM, and encryption keys are managed via environment variables.

4. Data Retention and Deletion

Account data is deleted immediately upon account closure. Database credentials are permanently deleted when you remove a source or close your account.

Payment records are retained for a minimum of 5 years as required by applicable law.

5. Third-Party Services

We do not share personal information with third parties except as required by law. The following external services are used to operate the platform:

  • Clerk — Authentication and user management.
  • PortOne / Toss Payments — Payment processing.
  • MongoDB Atlas — Service data storage.
  • Upstash Redis — Statistics caching.

6. Cookies

StemAllDay only uses essential cookies for authentication session management. We do not use any third-party marketing or analytics cookies.

7. Your Rights

  • Access and update your personal information.
  • Request account deletion and data removal.
  • Request deletion of database connection credentials.

8. Contact

For privacy-related inquiries, please contact us at appbidge@gmail.com.