Last updated: February 2026
The Stable Company ("we," "us," or "our") operates The Stability Index. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
Account Information: When you register, we collect your company name, email address, and a hashed password. We never store passwords in plain text.
Team Member Information: Names, email addresses, departments, and roles of employees you add to your account.
Survey Responses: Likert-scale ratings, eNPS scores, and open-ended text feedback submitted by team members.
Usage Data: Basic server logs including IP addresses, request timestamps, and browser user-agent strings for security and debugging purposes.
We use collected information to: (a) generate your organization's stability scores, dimension breakdowns, and PDF reports; (b) send survey invitations and reminders via email when you request them; (c) build anonymized, aggregated industry benchmarks; and (d) maintain the security and integrity of the Service.
We do not sell, rent, or trade your personal information or survey data to third parties. We may share data with: (a) service providers who assist in operating the Service (e.g., hosting, email delivery), subject to confidentiality agreements; and (b) as required by law or to protect our legal rights.
We implement industry-standard security measures including: encrypted passwords (bcrypt), CSRF protection on all forms, rate limiting on authentication endpoints, secure HTTP-only session cookies, and parameterized database queries to prevent SQL injection.
Your account data and survey responses are retained as long as your account is active. You may request deletion of your account and all associated data by contacting us at the email below.
We use a single session cookie to maintain your login state. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
You have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion of your data; and (d) withdraw consent for email communications at any time.
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email.
For privacy-related questions or data requests, contact us at hello@stableco.io.