Stare
Get Access
Stare

About
  • Contact
Legal
  • Terms of Service
  • Privacy Policy

Privacy Policy

Our privacy policy and how we use your data

Effective Date: March 1, 2026
Last Updated: March 1, 2026

Stare Co., Ltd. ("Stare," "we," "us," or "our"), a company incorporated under the laws of the Republic of Korea, located at 33F, Building B, Intelliz 2, Bundang-gu, Seongnam-si, Gyeonggi-do, Republic of Korea, operates the Stare platform at stare.dev (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information.

1. Information We Collect

Information you provide: Account details (name, email, password, profile photo), organization and team membership data, user content (documents, prompts, workflows), and support correspondence. Payment details are collected by our third-party payment processors — we do not store payment card details, only billing email and transaction identifiers.

Integration data: When you connect third-party services (email, calendar, CRM, messaging platforms), we collect data based on the permissions you grant via OAuth 2.0. You can revoke access at any time in your account settings.

Automatic data: Usage data (pages visited, features used, timestamps), device information (browser, OS, screen resolution), log data (IP addresses, access times, referring URLs), and aggregated analytics metrics via third-party analytics services.

Enrichment data (Processor Role): Stare enables customers to enrich contact and company data via third-party providers. In this context, customers are the data controllers and Stare acts as a data processor. Enriched data may include professional details (job title, seniority), company information (industry, size, location), and publicly available social profiles. Customers are responsible for ensuring lawful basis and fulfilling notice obligations to enriched individuals.

2. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Power AI features including sales automation, prospect research, analytics, and workflow orchestration
  • Send transactional emails, service updates, and security alerts
  • Send marketing communications (with your consent)
  • Detect, prevent, and address fraud and security incidents
  • Comply with legal obligations

3. AI and Automated Processing

Our AI agents, powered by third-party large language model providers, process your data to generate insights, draft communications, and automate workflows. Agents may also conduct web searches via third-party providers to gather publicly available information. We do not use automated processing to make decisions with legal or similarly significant effects without human oversight.

Model training: Under our AI providers' commercial API terms, data submitted through their APIs is not used to train their models. Stare does not use your data to train or fine-tune any AI models.

Your control: You decide what data your AI agents can access through integration permissions and workflow configurations. All AI outputs are suggestions for your review.

4. Legal Bases for Processing (EEA/UK)

Under the GDPR, we process personal data based on: (a) contract performance to provide the Service; (b) legitimate interests such as improving the Service, fraud prevention, and security; (c) consent for optional activities like marketing and analytics; and (d) legal obligations.

5. How We Share Your Information

We do not sell your personal information. We share data with third-party service providers who perform services on our behalf, subject to data processing agreements. These include providers for:

  • Cloud infrastructure and hosting
  • Payment processing
  • AI and machine learning
  • Email delivery
  • Analytics
  • Data enrichment
  • Web search and research

A current sub-processor list is available upon request at j-choi@stare.dev. We provide at least 30 days' advance notice before adding new sub-processors.

We may also share data: with third-party platforms you connect via integrations; as required by law or valid legal process; or in connection with a merger, acquisition, or sale of assets (with prior notice to you).

6. Cookies and Tracking

We use three categories of cookies:

  • Essential: Authentication, session management, and security.
  • Functional: Preferences such as sidebar state and theme.
  • Analytics: Usage data via third-party providers, activated only after you consent through our cookie banner.

We do not respond to Do Not Track (DNT) signals. We honor Global Privacy Control (GPC) signals as required by applicable law. You can manage cookies through your browser settings or our cookie banner. See our Cookie Policy for details.

7. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the Service. When you delete your account, we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by applicable law (e.g., billing records for tax compliance). Enrichment data expires after 6 months. Aggregated and anonymized data may be retained indefinitely for service improvement.

8. Data Security

We protect your information with encryption in transit and at rest, strict data isolation between accounts, role-based access control, secure authentication for integrations, and CSRF protection. However, no method of transmission or storage is 100% secure.

Breach notification: If a breach affects your personal data, we will notify relevant authorities within required timeframes and notify affected users without undue delay, including details about the breach and remedial measures.

9. Your Privacy Rights

All users may request access, correction, deletion, or portability of their personal data, and may withdraw consent at any time. Account deletion is available directly in your settings. For data portability requests, contact j-choi@stare.dev.

EEA/UK residents (GDPR) may additionally restrict or object to processing and lodge complaints with their supervisory authority. As we are established outside the EEA, we are appointing an EU representative per GDPR Article 27 — details will be published here once finalized. Contact j-choi@stare.dev for GDPR inquiries.

California residents (CCPA/CPRA) have additional rights: the right to know what data we collect and share, to delete, to opt-out of sale or sharing (we do not sell or share data for behavioral advertising), to limit use of sensitive personal information, and to non-discrimination for exercising privacy rights.

10. International Data Transfers

Stare operates from the Republic of Korea. Data may be transferred to other jurisdictions where our providers operate. For transfers from the EEA/UK, we use Standard Contractual Clauses (SCCs) or other lawful mechanisms.

11. Data Processing Agreements

We offer a standard DPA for customers who require one under GDPR or other data protection laws. Contact j-choi@stare.dev to request.

12. Additional Provisions

Children: Stare is not intended for individuals under 16. We do not knowingly collect data from children and will delete any such data promptly upon discovery.

Third-party links: We are not responsible for the privacy practices of third-party services linked from Stare.

Policy changes: We will notify you of material changes via email or in-app notification at least 30 days before they take effect.

13. Contact Us

  • Company: Stare Co., Ltd.
  • Address: 33F, Building B, Intelliz 2, Bundang-gu, Seongnam-si, Gyeonggi-do, Republic of Korea
  • Email: j-choi@stare.dev

We respond within 30 days or within the timeframe required by applicable law.