Privacy Policy
Last updated: 27 March 2026
Witmakersstraat 10, 6211 JB Maastricht, The Netherlands
Chamber of Commerce (KvK): 14082961
Contact: [email protected]
1. Introduction
Gurustacks ("we", "us", "our") operates the gurustacks.com platform, which enables content creators ("Creators") to showcase curated collections of tools and software ("Stacks") to their audiences ("Users"). This Privacy Policy explains how we collect, use, share, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable Dutch and EU privacy laws.
By using Gurustacks, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the platform.
2. Data Controller
Gurustacks, registered at the Netherlands Chamber of Commerce under number 14082961, is the data controller for your personal data processed through the platform. For any data protection inquiries, you can reach us at [email protected].
3. What Data We Collect
3.1 Account Data
When you create an account, we collect your name, email address, and any profile information you choose to provide. If you sign up as a Creator, we may also collect payment-related details necessary for revenue sharing.
3.2 Payment Data
Payments on Gurustacks are processed by Paddle (Paddle.com Market Limited), which acts as our Merchant of Record. We do not store your full credit card number or payment credentials. Paddle processes your payment data in accordance with their own privacy policy. We receive transaction confirmations and the data necessary for invoicing and revenue distribution.
3.3 Usage Data
We collect information about how you interact with the platform, including pages visited, stacks viewed, links clicked, and features used. This data is collected via Google Analytics (which may use cookies — see our Cookie Policy for details).
3.4 AI-Processed Data
Gurustacks uses artificial intelligence to analyse publicly available content — such as YouTube videos — to identify tools, software, and sponsored content mentioned by Creators. This analysis is performed on publicly accessible data and does not involve the processing of User personal data. The resulting tool and sponsor information is used to enrich Stacks on the platform.
3.5 Communications Data
If you receive messages from Creators via the Gurustacks messaging system, we process the content of those messages and associated metadata (timestamps, read status) to facilitate delivery.
4. How We Use Your Data
We use your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and maintain your account | Performance of contract (Art. 6(1)(b)) |
| Process payments and distribute revenue | Performance of contract (Art. 6(1)(b)) |
| Share your email with the Creator who referred you (see Section 5) | Performance of contract (Art. 6(1)(b)) |
| Enable Creator-to-User messaging | Performance of contract (Art. 6(1)(b)) |
| Analyse platform usage and improve our services | Legitimate interest (Art. 6(1)(f)) |
| AI-powered analysis of public content for Stack enrichment | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations (tax, fraud prevention) | Legal obligation (Art. 6(1)(c)) |
5. Sharing Your Email with Creators
Gurustacks connects Users with Creators. As a core part of how the platform works, your email address is disclosed to the Creator whose content brought you to Gurustacks or whose Stack you subscribed to. Creators use this information to build and maintain their audience.
5.1 What Creators Can Do with Your Email
Once a Creator receives your email address, they may: view it within their Gurustacks dashboard, export or download it, use it for their own email marketing purposes outside of Gurustacks, and send you messages through the Gurustacks messaging system.
5.2 Creators as Independent Controllers
Once a Creator exports or downloads your email address, they become an independent data controller for that data under the GDPR. This means the Creator is independently responsible for how they handle your email address outside of Gurustacks, including compliance with applicable data protection laws. We encourage all Creators to maintain their own privacy policies and handle data responsibly, but we cannot control or be held liable for a Creator's use of your data outside of our platform.
5.3 Opting Out
You can opt out of receiving messages from a Creator at any time via your account settings. However, if a Creator has already exported your email address before you opt out, Gurustacks cannot retract that data. You would need to contact the Creator directly to request removal from their external lists.
6. Creator Messaging System
Creators on Gurustacks can send messages to Users who have subscribed to their Stacks. These messages are delivered through the Gurustacks platform. You can manage your messaging preferences and opt out of messages from specific Creators at any time in your account settings.
We do not monitor or pre-screen the content of Creator messages, but we reserve the right to suspend messaging privileges for Creators who violate our Terms and Conditions, including by sending spam or abusive content.
7. Affiliate Links and Revenue Sharing
Stacks on Gurustacks may contain affiliate links to tools and software. When you click an affiliate link and make a purchase, Gurustacks and/or the Creator may earn a commission. This does not affect the price you pay. Affiliate links may set cookies on third-party websites to attribute the referral — those cookies are governed by the respective third party's cookie and privacy policies, not by Gurustacks.
8. Third-Party Services
We share data with or use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Paddle | Payment processing (Merchant of Record) | Payment and billing information |
| Google Analytics | Website analytics | Usage data, device info, anonymised IP |
| YouTube / Google | Embedded video content | Data collected per Google's privacy policy when embeds load |
9. International Transfers
Some of our third-party service providers (including Google and Paddle) may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or the service provider's participation in recognised data protection frameworks.
10. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will remove your personal data from our active systems within 30 days, except where we are required to retain it for legal or compliance purposes (e.g., tax records). Please note that data already exported by Creators prior to your account deletion is outside our control (see Section 5.2).
11. Your Rights Under the GDPR
As a data subject, you have the following rights: the right to access your personal data and receive a copy of it, the right to rectification of inaccurate data, the right to erasure ("right to be forgotten") subject to the limitations described in this policy, the right to restrict processing, the right to data portability, the right to object to processing based on legitimate interest, and the right to withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
12. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit, secure storage, access controls, and regular security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the platform. Your continued use of Gurustacks after such changes constitutes your acceptance of the updated policy.