Scalestack Legal Terms for Module Developers

Last Updated: August 2025

Welcome to Scalestack's legal terms for module developers. This document outlines the terms of service, privacy practices, and security measures that apply when developing modules on our agentic, enterprise-grade GTM orchestration & activation platform.

Terms of Service for Module Development

1. Acceptance of Terms

By accessing or using the Scalestack platform to develop modules, you agree to be bound by these Terms of Service. If you disagree with any part of these terms, you may not access our platform or develop modules.

2. Module Development Framework

2.1 Development Environment

• Modules are lambda functions designed for specific actions, primarily data enrichment
• Development occurs through your code editor with deployment via GitHub repository integration
• All modules must be written in Python using the scalestack_sdk
• Modules run exclusively on Scalestack infrastructure

2.2 Registration and Approval

• Developer registration and approval are required before building modules
• No fees are charged for registration, development, or deployment
• Code review by Scalestack team is mandatory before production deployment
• Staging deployments do not require code review by Scalestack team

3. Intellectual Property Rights

3.1 Module Ownership

• Scalestack Inc. retains all intellectual property rights to modules developed on our platform
• Modules cannot be distributed outside of the Scalestack platform

3.2 Platform Usage

• You retain ownership of any pre-existing intellectual property you bring to the platform
• Your use of the Scalestack platform grants us the right to incorporate modules into our service platform

4. Module Requirements and Restrictions

4.1 Prohibited Content

You may not create modules that:

• Contain malware, viruses, or malicious code
• Facilitate illegal activities
• Damage or compromise the Scalestack platform
• Attempt to access sensitive or unauthorized data
• Violate any applicable laws or regulations

4.2 Technical Requirements

• API keys and sensitive data must not be hardcoded
• Modules may interact with external APIs
• Modules can access non-sensitive data only
• You are responsible for maintaining modules when APIs change

5. Developer Obligations

5.1 Code Quality

• Maintain clean, documented, and efficient code
• Follow Python best practices and scalestack_sdk guidelines
• Ensure modules perform their stated functions reliably

5.2 Support

• Module support is recommended but not mandatory
• You should respond to critical issues affecting platform stability

6. Platform Rights and Modifications

6.1 Platform Changes

• We may modify platform APIs with reasonable notice
• You are responsible for updating modules to maintain compatibility
• We provide documentation updates for breaking changes

6.2 Module Management

• Modules violating these terms may result in immediate account termination
• We reserve the right to audit and edit module code for compliance

7. Liability and Warranties

7.1 Disclaimer of Warranties

7.2 Limitation of Liability

8. Termination

• Either party may terminate this agreement at any time
• Violation of terms results in immediate account termination
• Upon termination, access to development tools ceases immediately
• Existing deployed modules may continue to operate at Scalestack's discretion

Privacy and Data Protection

9. Data Collection and Use

9.1 Developer Information

We collect:

• Registration information (name, email, company)
• GitHub repository connections
• Module code and metadata
• Platform usage analytics

9.2 Data Processing

• All data is processed in accordance with applicable privacy laws
• We implement appropriate technical and organizational measures

10. Module Data Access

• Modules can access only non-sensitive platform data
• User data accessed by modules remains under Scalestack's control
• Developers must not attempt to extract or store user data externally

Security Practices

11. Platform Security

11.1 Infrastructure Security

Based in New York, security is fundamental to our platform design. Enterprise clients trust Scalestack with their data, and we maintain high security standards through:

• Encrypted data transmission using TLS/SSL
• Regular security audits and monitoring
• Access controls and authentication mechanisms

11.2 Compliance

Scalestack maintains compliance certifications including:

• SOC 2 compliance with annual audits
• Regular vulnerability assessments
• Business continuity and disaster recovery planning

12. Module Security Requirements

12.1 Secure Development

Developers must:

• Never hardcode API keys or credentials
• Implement secure coding practices
• Handle errors gracefully without exposing system information
• Use only approved scalestack_sdk methods for data access

12.2 Code Review Process

• All production deployments undergo security review
• Automated scanning for common vulnerabilities
• Manual review for logic and security issues
• Continuous monitoring of deployed modules

13. Authentication and Access Control

13.1 Developer Authentication

• Secure username/password authentication required
• Multi-factor authentication available
• Session management with appropriate timeouts
• GitHub integration uses OAuth for repository access

13.2 Module Permissions

• Modules operate with limited, scoped permissions
• No access to sensitive platform data
• External API calls must use secure protocols
• Credential management through platform-provided mechanisms

14. Incident Response

14.1 Security Reporting

• Report security issues to: tpolacek@scalestack.ai
• We investigate all reports promptly
• Critical vulnerabilities receive immediate attention
• We maintain confidentiality of security reports

14.2 Incident Management

• 24/7 monitoring for security incidents
• Defined escalation procedures
• Regular security training for our team
• Post-incident reviews and improvements

15. Data Protection

15.1 Encryption

• Data encrypted in transit using TLS 1.2+
• Data encrypted at rest using AES-256
• Secure key management practices
• Regular encryption protocol updates

15.2 Data Retention

• Module code retained while account is active
• Logs retained for security and debugging
• Data deletion upon account termination
• Compliance with legal retention requirements

General Provisions

16. Support and Communication

• Documentation available at docs.scalestack.ai
• Support inquiries: tpolacek@scalestack.ai
• Platform updates communicated via email
• Critical security updates issued immediately

17. Changes to Terms

• We may update these terms periodically
• Material changes communicated with 30 days notice
• Continued use constitutes acceptance of new terms
• Previous versions available upon request

18. Governing Law

These terms are governed by the laws of the State of New York, without regard to conflict of law principles.

19. Contact Information

---

By developing modules on Scalestack, you acknowledge that you have read, understood, and agree to be bound by these terms.