Compliance

Privacy regulations we align with

• GDPR (EU) and UK GDPR — lawful bases for processing, data-subject rights, and breach notification.
• CCPA / CPRA (California) — transparency about sharing, the right to opt out of sale/sharing, and non-discrimination.
• Israel Protection of Privacy Law (PPL) — security obligations and rights of access, correction, and deletion.
• Australia Privacy Act — transparency, overseas-disclosure notice, and reasonable security.

Details of what we collect and why are in our Privacy Policy.

Data-subject rights

We honor requests to access, correct, delete, and port personal data, and to opt out of analytics/marketing. Data portability is supported directly by the product — export your data any time with stn export (portable Markdown files), and delete your account and data from your dashboard. To make a request, email support@stndp.io.

Cookies & consent

Non-essential analytics/marketing cookies are only set with prior, granular consent, and we honor Global Privacy Control (GPC) signals. See our Cookie Notice.

Sub-processors & data residency

We publish the third parties that process data on our behalf, with their purpose and location, on our Sub-processors page. Application data is hosted in the United States; cross-border transfers rely on appropriate safeguards as described in the Privacy Policy.

Data Processing Agreement (DPA)

A GDPR Article 28 Data Processing Agreement is available for business customers. To put one in place, contact support@stndp.io.

Certifications & audits

We want to be straightforward: stndp is an early-stage service and has not yet completed third-party certifications such as SOC 2 or ISO 27001. We apply the security-by-design practices described on our Security page, and we will update this page as our program matures.

Questions

For compliance questionnaires, security reviews, or documentation requests, email support@stndp.io.