Last updated: April 19, 2026
This Privacy Policy explains how Stemwire ("we", "us", or "our") collects, uses, stores, and otherwise processes personal data in connection with the Stemwire platform, related public websites, onboarding flows, and support communications (the "Service").
Stemwire is operated by Matěj Balcar, doing business as Stemwire, an individual entrepreneur registered in the Czech Trade Register, with address at Jižní 315, Stěžery, Czech Republic, IČO: 19840829.
Depending on how you use the Service, we may collect and process:
- account and contact data, such as your name, email address, workspace details, and communication preferences; - subscription, billing, and transaction data, such as your selected plan, billing status, renewal status, invoice data, and limited payment-related metadata; - technical and usage data, such as IP address, browser type, device information, timestamps, log data, page views, and feature usage; - support and communication data, such as messages, replies, attachments, and records of support requests; - customer content and workspace data that you upload or manage through the Service; - anti-abuse and verification data processed through security tools such as Google reCAPTCHA; and - where enabled, marketing and measurement data collected through Meta Pixel, such as browser identifiers, page views, and conversion-related events.
We do not store full payment card details. Subscription payments are processed by Polar as merchant of record.
We process personal data for the following purposes and legal bases under GDPR:
- to create and manage accounts, provide subscriptions, authenticate users, onboard customers, and operate the Service, where processing is necessary for the performance of a contract or to take steps at your request before entering into a contract; - to process billing, invoicing, refunds, bookkeeping, consumer-rights requests, and other legally required records, where processing is necessary to comply with legal obligations; - to secure the Service, prevent abuse, investigate incidents, maintain logs, handle support, troubleshoot issues, improve reliability, and protect our business, customers, and systems, where processing is necessary for our legitimate interests in operating and protecting the Service; - to use optional measurement or marketing technologies such as Meta Pixel where enabled and where consent is required, on the basis of your consent; and - to communicate with you about service updates, support matters, legal notices, and operational messages, where processing is necessary for contract performance, legal compliance, or our legitimate interests in administering the Service.
Where we rely on consent, you may withdraw it at any time for future processing without affecting the lawfulness of processing carried out before withdrawal.
We may share personal data with service providers and recipients that support operation of the Service, including:
Polar — payment processing, checkout, subscription management, invoicing, and tax handling.
Supabase, Inc. — database and backend infrastructure hosting.
Cloudflare, Inc. — hosting, CDN, DNS, security, edge infrastructure, and transactional email delivery.
Open Exchange Rates — exchange-rate data used in service operations where applicable.
Google reCAPTCHA — abuse prevention and request verification.
Meta Platforms — measurement and attribution data where Meta Pixel is enabled and permitted.
We may also disclose personal data where reasonably necessary to comply with law, enforce our terms, protect rights or safety, or respond to lawful requests from courts, regulators, or authorities.
Some of our service providers may process personal data outside the European Economic Area, including in the United States.
Where personal data is transferred to a third country, we rely on appropriate safeguards under GDPR, such as an adequacy decision, the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism, depending on the provider and transfer context.
You may request more information about applicable transfer safeguards, including how to obtain a copy where relevant, by contacting hello@stemwire.io.
We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy.
Account and workspace data is generally retained while your subscription or account remains active. After cancellation, termination, suspension, or a deletion request, we may retain relevant account data and customer content for up to 60 days, unless a longer retention period is required by law or is reasonably necessary for security, fraud prevention, dispute resolution, legal claims, or legitimate business recordkeeping.
Invoices, tax records, billing records, support records, and security logs may be retained for longer where required or permitted by law or where reasonably necessary for legitimate business purposes.
Subject to applicable law, you may have the right to:
- request access to your personal data; - request correction of inaccurate or incomplete data; - request deletion of personal data; - request restriction of processing; - object to processing based on legitimate interests; - receive a portable copy of personal data where GDPR portability applies; - withdraw consent where processing is based on consent; and - lodge a complaint with a supervisory authority.
If you are in the Czech Republic or another EU or EEA jurisdiction, you may lodge a complaint with the relevant supervisory authority. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, "ÚOOÚ"): https://uoou.gov.cz/
To exercise your rights, contact hello@stemwire.io.
We use essential cookies and similar technologies required for authentication, session handling, security, and basic operation of the Service.
Where enabled, we may also use Meta Pixel or similar measurement technologies to understand page visits, campaign performance, and conversions. In regions where consent is required for such technologies, we rely on consent before enabling non-essential tracking, and you may change your choice through the cookie settings controls made available on the Service where applicable.
Some personal data is required for us to provide the Service, including data needed to create an account, authenticate access, process subscriptions, respond to support requests, and maintain service security.
If you do not provide required data, we may be unable to provide some or all of the Service.
We do not use solely automated decision-making, including profiling, that produces legal effects or similarly significant effects on you within the meaning of GDPR Article 22.
We may update this Privacy Policy from time to time.
If we make material changes, we will provide notice by updating the policy on the Service or website and, where appropriate, by email or another reasonably prominent method.
For privacy questions, rights requests, complaints, or other data-related matters, contact:
hello@stemwire.io
Use this contact for privacy questions, data requests, complaints, or legal follow-up. hello@stemwire.io