ScreenStack

Privacy

Privacy Policy for ScreenStack

Last Updated: September 2, 2026

At ScreenStack (accessible from https://screenstack.dev, and referred to as "ScreenStack," "we," "our," or "us"), protecting the privacy of our website visitors, customers, and assessment participants is a top priority. This Privacy Policy describes the types of information we collect, how we use and process it, the categories of parties with whom we share it, and your rights regarding your personal data.

This Policy applies to (a) visitors to our website, (b) employers and other customers who purchase or manage assessments, and (c) individuals who take a technical assessment hosted through ScreenStack ("candidates"). Where a candidate takes an assessment at the direction of their employer, we may also receive information about that candidate from the employer, such as name and email address. By using our website or participating in an assessment, you acknowledge this Policy.

1. Information We Collect

We collect information you provide to us directly, information we collect automatically when you use our platforms, and, in limited cases, information we receive from third parties such as the employer sponsoring an assessment.

A. Account & Billing Information (Customers/Employers)

B. Candidate Assessment & Interaction Data

When a candidate takes a technical assessment hosted through ScreenStack, we collect the data needed to deliver and evaluate the assessment:

C. Technical & Usage Information

2. How We Use Your Information

We process personal data only for the limited purposes set out below, each with the legal basis on which we rely:

Where a particular use of your data relies on your consent rather than the bases above, we will say so when we ask for it. You may withdraw consent at any time by contacting us; withdrawal does not affect the lawfulness of processing carried out before you withdrew.

3. AI-Assisted Evaluations

ScreenStack uses AI systems to help generate evaluation reports from a candidate's code submissions, AI interactions, and execution data. The resulting reports are advisory: they are intended to be reviewed and weighed by a human member of the hiring organization, and no assessment outcome is applied solely on the basis of automated processing. ScreenStack does not make, and takes no part in, any hiring decision. We engage AI model providers to process relevant data on our behalf under their data processing terms, and we do not use candidate assessment data for any purpose other than those described in this Policy.

4. Data Sharing & Service Providers

We share personal data only (a) with the service providers described in this section or (b) where required or lawfully permitted to do so, such as to comply with a subpoena or other valid legal process, or to protect the rights, safety, or property of ScreenStack, our users, or the public.

We use service providers (and subprocessors) in the following categories. The providers named below are the principal ones in use as of the "Last Updated" date above. We may add, modify, or replace service providers from time to time as our technology and tooling change, and this list is updated as described in Section 12:

Each service provider is contractually bound to process your personal data solely to operate ScreenStack and in accordance with this Policy and applicable data protection law. We maintain a current list of our service providers and make it available to you on request (see Section 13). We do not sell, rent, or otherwise disclose personal data or assessment content for monetary or other valuable consideration, and we do not "share" personal information for cross-context behavioral advertising, in each case as those terms are defined under applicable privacy law.

5. International Data Transfers

ScreenStack operates on infrastructure that may process and store personal data in the United States and other countries. If you reside in a jurisdiction (such as the European Economic Area or the United Kingdom) whose laws restrict the international transfer of personal data, we take steps to ensure appropriate safeguards, such as standard contractual clauses where required, so your data receives a level of protection consistent with that jurisdiction's laws.

6. Data Retention

We retain personal data only for as long as is reasonably necessary to (a) complete the purposes described in this Policy, (b) provide and support our service, (c) comply with legal, tax, and accounting obligations, or (d) resolve disputes and enforce our agreements. We delete or anonymize data thereafter, unless applicable law requires us to retain it.

7. Security

We maintain technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure, including encryption of data in transit (HTTPS/TLS), scoped and expiring credentials, edge-level access controls, and restricted access to systems holding personal data. If we become aware of a security incident affecting your personal data, we will notify affected individuals and, where required, relevant supervisory authorities in accordance with applicable law. No method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Data Rights

Depending on where you live, you may have the right to:

To exercise these rights, contact us using the details in Section 13. We may ask you to verify your identity before fulfilling a request and will respond within the timeframes required by applicable law. Where we cannot honor a request in full, for example because the data is subject to a legal claim or another recognized exception, we will explain why.

Where applicable, you also have the right to lodge a complaint with your local data protection supervisory authority.

Role of the hiring organization. Where an employer commissions an assessment, the employer is the primary actor in its hiring process and may act as an independent data controller for candidate data in connection with its own hiring purposes. We act as a data processor for the hiring organization where we handle candidate data to deliver or support an assessment, and in that capacity we process such data only on the hiring organization's documented instructions, including under data processing terms we may enter into with our customers. If your request concerns a specific hiring decision or records held primarily by the hiring organization, we will direct you to that organization and, where we act as processor, help coordinate the response. Where we process data for our own purposes, such as platform security or legal compliance, we act as an independent controller.

9. California Residents

If you reside in the State of California, the following supplements the rights above. We do not "sell" or "share" (as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act) your personal information for monetary or other valuable consideration, and we do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA. We do not discriminate against you for exercising your privacy rights. No third party can override the terms in this Privacy Policy; any statement by a third party (including on our website) does not change the terms of this Policy.

10. Children & Minors

Our services are intended for a professional audience, and we do not knowingly collect personal data from individuals under the age of 18. If we learn that we have collected personal data from a minor without the consent of a parent or guardian where required, we will delete it from our systems.

11. Third-Party Links

Our website and platform may contain links to external sites or third-party tools and documentation. ScreenStack is not responsible for the privacy practices or content of third-party websites, and this Policy does not apply to them.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, infrastructure, legal requirements, or other relevant factors. Any updates will be posted on this page with a revised "Last Updated" date. Where a change materially affects how we process your personal data, we will use reasonable efforts to notify affected users by email (or, where we have no email address on file, by prominent notice on the service) before the change takes effect, to the extent required by applicable law. By continuing to use our website or services after an updated policy takes effect, you acknowledge that policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, or wish to exercise your data rights or request our current list of service providers, please contact us at: