Privacy Policy

01Who we are

Stavleak provides software that lets participants discover hackathons, form teams and submit projects, lets organizations host events, and lets jury members evaluate submissions. For the data you provide to run your account, Stavleak is the operator. For the data you submit inside a specific hackathon, the hosting organization is a joint operator together with us. Questions about this Policy can be sent to privacy@stavleak.com.

02Information we collect

We collect only what we need to run the platform:

• Account data: name, email address, username and a securely hashed password.
• Profile data: bio, skills, country and city, avatar and banner images, and links to your social or portfolio profiles.
• Hackathon activity: registrations, team membership, project submissions, messages, and the scores or feedback you give or receive.
• Technical data: IP address, device and browser type, language and theme preferences, and server log data collected automatically.

03How we use your information

Your data is used to:

• Create and secure your account and authenticate you across our subdomains.
• Enable core features such as event registration, team formation and project submission.
• Deliver your registration and submission data to the organizers and jury of events you join.
• Send service notifications about your teams, registrations, invitations and results.
• Provide support, prevent fraud and abuse, and keep the platform secure.
• Improve the platform using aggregated, de-identified usage statistics, and comply with our legal obligations.

04Legal basis and consent

We process your personal data on the basis of the consent you give when you create an account and submit data, the performance of our agreement with you (these Terms), our legitimate interest in operating and securing the platform, and compliance with the law. You may withdraw your consent at any time by editing or deleting your data, which may limit your ability to use certain features.

05How we share information

We never sell or rent your personal data. We share it only as follows:

• With organizations whose hackathons you register for, so they can review and manage your participation.
• With jury members assigned to an event, so they can evaluate the submissions of teams you belong to.
• With other participants through team-formation and collaboration features, limited to your public profile.
• With service providers that host and operate the platform on our behalf (for example our cloud database and email delivery providers), bound by confidentiality.
• With state authorities where disclosure is required by the law of the Republic of Kazakhstan.

06Cross-border processing

Our infrastructure may store and process data on cloud servers located outside the Republic of Kazakhstan. Where this happens, we transfer data only to countries that ensure protection of personal data and take measures consistent with Law No. 94-V to keep your data safe in transit and at rest.

07Cookies

We use only strictly necessary cookies to keep you signed in and to remember your language and theme. We do not use third-party advertising or cross-site tracking cookies. You can clear cookies in your browser, but doing so will sign you out.

08Data retention

We keep your personal data for as long as your account is active and for as long afterwards as we are required to by law or to resolve disputes and enforce our agreements. When you delete your account we remove or irreversibly anonymize your personal data, except where retention is legally required.

09Your rights

Under the law of the Republic of Kazakhstan you have the right to:

• Access the personal data we hold about you and learn how it is processed.
• Correct inaccurate data or update it through your account settings.
• Block, withdraw consent for, or request deletion of your personal data.
• Object to specific processing and request a copy of your data in a portable form.
• Lodge a complaint with the authorized body for the protection of personal data of the Republic of Kazakhstan.

10Security

We protect your data with encryption in transit, hashed credentials, row-level access controls and least-privilege access for our team. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to protect your information and will notify you of a breach as required by law.

11Children

The platform is not directed to children under 16. If you are under the age of majority in your country, you may use Stavleak only with the consent and supervision of a parent or legal guardian. We delete data we learn was collected from a child without the required consent.

12Changes to this Policy

We may update this Policy as the platform and the law evolve. We will post the updated version here and change the "last updated" date, and for material changes we will notify you through the platform before they take effect.