SuccessionStackLegal

Privacy Policy

This policy explains how The Productive (“we”) handles personal data within SuccessionStack, a succession and talent-management platform. It covers data our customers load into the product about their own workforce, and data we collect to operate the service.

1. Who is responsible for your data

For workforce data loaded into SuccessionStack (employee records, performance and potential ratings, succession plans), the customer organization is the data controller and The Productive is the data processor, acting on the customer’s instructions under our Data Processing Agreement. For account and operational data described below, The Productive is the controller.

2. What we process

  • Workforce data (controller: the customer): names, work email, job title, department, manager, performance and potential ratings, retention-risk flags, development notes, and succession candidacy. Provided by the customer’s administrators or via an optional HRIS integration they enable.
  • Account data: the email address and role of each user who signs in.
  • Operational data: an immutable audit log of privileged actions, AI interaction summaries (PII-redacted), and product-analytics events with personal identifiers stripped before emission.

3. Why we process it

To provide the contracted service, secure it, debug and improve it, and meet legal obligations. We do not sell personal data, and we do not use customer workforce data to train AI models.

4. Subprocessors

We rely on the following subprocessors. Each is engaged under data-protection terms:

  • Supabase — Managed Postgres database, authentication, file storage, and authentication email (invitations, password reset).
  • Vercel — Application hosting, edge network, and serverless compute.
  • Anthropic (Claude) — AI assistance features (when enabled by the customer).
  • Voyage AI — Text embeddings powering semantic search (when AI is enabled).
  • PostHog — Product analytics (PII-redacted event stream).
  • Sentry — Application error monitoring (when configured).
  • Nango — Brokering optional third-party HRIS / communication integrations.
  • Upstash — Distributed rate-limit counters (opaque keys — user IDs and hashed email digests, no candidate data).

5. Data location and security

Data is encrypted in transit and at rest. Access is governed by per-tenant row-level security and role-based controls, with an immutable audit trail. Data is hosted in the United States on AWS infrastructure managed by our database and application platforms. Customers with a data-residency requirement in another region should contact us before onboarding; residency is configured per deployment.

6. Retention and deletion

We retain workforce data for as long as the customer maintains their account, then delete or return it per the customer’s instruction. See the Data Retention & Erasure Policy for schedules and the self-service erasure process.

7. Your rights

Depending on your jurisdiction (e.g. GDPR, UK GDPR, PIPEDA), you may have rights to access, correct, export, or erase your personal data. Because the customer organization controls the workforce data, direct such requests to your employer; we assist controllers in fulfilling them. Administrators can export a complete data bundle and initiate erasure from within the product.

8. Contact

Questions about this policy: privacy@successionstack.com.