Privacy Policy

Effective date: April 9, 2026

This Privacy Policy describes how JS Designs (“we”, “us”, “our”) collects, uses, and protects information through Stelld (“the Service”), in compliance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Information We Collect

  • Account information: your name, email address, and password (stored as a secure hash) when you register.
  • Form data: the forms you create, their settings, and the responses submitted to them by your respondents.
  • Billing information: if you subscribe to a paid plan, Stripe collects and processes your payment details. We store only the Stripe customer ID and subscription status — we never store full card numbers.
  • Usage data: basic server logs (IP address, request timestamps) for security monitoring and debugging purposes.

2. How We Use Your Information

  • To provide, operate, and improve the Service.
  • To send transactional emails — submission notifications and password resets — via our email provider (Resend).
  • To process payments via Stripe for paid subscriptions.
  • To respond to support requests and inquiries.
  • To detect, investigate, and prevent fraudulent or unauthorized use.

We do not sell your personal information or your respondents’ data to any third party.

3. Data Residency

All form data and account information is stored on Amazon Web Services (AWS) infrastructure in the ca‑central‑1 region (Canada). Your data does not leave Canada.

4. Third-Party Services

We use the following third-party services to operate Stelld:

  • Stripe — payment processing. Stripe is PCI-DSS compliant. See Stripe’s Privacy Policy.
  • Resend — transactional email delivery. Emails contain no personal data beyond your email address.
  • Amazon Web Services — cloud hosting and storage, located in Canada.

5. Cookies

We use a single session cookie to keep you logged in. We do not use tracking or advertising cookies.

6. Data Retention

We retain your account information and form data for as long as your account is active. Server logs are retained for up to 90 days. You may request deletion of your account and associated data by contacting us.

7. Your Rights (PIPEDA)

Under PIPEDA, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Withdraw consent to collection or use of your personal information (which may require closing your account).
  • Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, contact us at info@jsdesigns.ca.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (TLS 1.2+), hashed passwords (bcrypt), and access controls on our infrastructure. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Children’s Privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated Policy.

11. Contact

Privacy inquiries may be directed to JS Designs at info@jsdesigns.ca.

For our full Terms of Service, see our Terms of Service page.