About Stack Overflow
The Stack Overflow Network (also referred to herein as “Stack Overflow” or “Network”) is a set of related Internet sites and other applications for questions and answers, owned and operated by Stack Exchange, Inc. (“Stack Overflow”, “we” or “us”), a Delaware corporation.
Stack Overflow welcomes you to the Network, the largest community of developers in the world, and invites you to participate in the community by sharing knowledge with your peers and colleagues.
This Privacy Notice is applicable to you when you interact with us on Stack Overflow Basic.
About Stack Overflow Basic
Stack Overflow Basic (the “Product”) is a software application tailored for sharing questions and answers within your company and is owned and operated by Stack Overflow. This Product allows you to participate in both (i) the Public Network and (ii) to post privately within your Company to share knowledge with your peers and colleagues. Stack Overflow Basic allows you to share private content via authorized closed communities.
Here you will find details about the personal information we collect about you when you use the Stack Overflow Basic Platform, how and why we collect it, how we use it, and how we keep it secure. This Privacy Notice also tells you about your rights, how you can exercise those rights, and how the law protects you.
Stack Exchange Inc is the controller responsible for your personal data.
Determining Controllers and Processors
We may process data in 2 ways; as processor, acting on behalf of your organisation, or as controller acting for our own purposes. This privacy notice covers our obligation as controller, but we also explain when we act as processor on behalf of your organisation.
In accordance with our terms of service, when we provide the services to you on Stack Overflow for Basic, we act as processor, carrying out instructions on your behalf. In certain circumstances, we will also process data for our own purposes, as controller. More details are set out below.
Data we process for our own purposes as a controller
What information do we collect for our own purposes as controller?
- When you create or join a team, we will collect the following: Account registration information such as name, email address, IP address, that we will need from Customers or individuals granted access to your organization’s Private Network (“Authorised Users”).
- Billing and accounting information
We will collect, generate and/or receive certain other Information:
- Services metadata. When an Authorised User interacts with the Services, metadata is generated that provides additional context about the way Authorised Users work
- Log data. Our servers automatically collect information when you access or use our Websites or Services and record it in log files. This log data may include the Internet Protocol (IP) address, the address of the web page visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, language preferences and cookie data.
- Device information. Stack Overflow collects information about devices accessing the Services, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and crash data.
- Location information. We receive information from you and other third-parties that helps us approximate your location.
- Contact information. In accordance with the consent process provided by your device, any contact information that an Authorised User chooses to import (such as an address book from a device) is collected when using the Services.
- Usage information
How do we use the information?
As a participant on Stack Overflow Basic, we require you to create an individual account on our public Network and we associate this account registration with your Team for account security purposes and to verify your identity. Account registration information as well as company or team affiliation information is displayed to authorized users of your Team.
In addition to account registration and company or team affiliation information, Stack Overflow collects certain application metadata for the purposes of maintaining and enhancing the Stack Overflow for Teams product and related services we provide. This metadata is only made available to Stack Overflow authorized personnel and in some cases authorized third parties, such as vendors, under a duty of confidentiality.
How we share your personal data
We may share your personal data with companies within Stack Overflow and other parties detailed below. We may also transfer your personal data outside of the European Economic Area (EEA), but only when specific safeguards have been put in place in order to protect your personal data.
When you are using the private Network, your account settings including, name, affiliated role and company, and other information may be shared with your private Network Team members designated as authorized users of your private Network account. While some of the public and private Network profile information is required, much of it is within your control as we describe herein and can be modified, updated, and restricted by you in your Profile Settings (link requires you to be logged in).
Any content you provide in the course of your use of the Stack Overflow Basic product is shared privately with authorized users of your Team, and may include private questions and answers, votes, source code, and other sensitive data.
We may share your personal data with one or all of the following recipients:
- Internal Third Parties: Stack companies incorporated in the UK and Germany
External Third Parties which may include:
- Suppliers who we engage to provide services on our behalf, for example cloud services providers. These companies are based in the EU and North America.
- Professional advisors including lawyers, accountants and insurers where necessary to enable them to provide their services to us.
- Authorities who require reporting of processing activities in certain circumstances.
We may also share your personal data with third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with contractual obligations which ensure adequate protection for your personal data.
We may share your personal data with entities within Stack Overflow and transfer it into marketing systems used by Stack Overflow. Given that we are an international organization with our headquarters in the U.S., this may involve transferring your personal data outside of the European Economic Area (EEA). Some of the third parties to whom we transfer your personal data are also based outside of the EEA, so their processing of your personal data will likewise involve a transfer outside the EEA. Where your personal data is transferred outside of the EEA we will use specific contracts approved by the European Commission giving your personal data the same protection as it has in the EU.
How we protect your personal data
We are committed to protecting your personal data. We put in place safeguards including appropriate technologies, policies, and contractual arrangements, so that the data we have about you is protected from unauthorized access and improper use, and we will not keep your personal data for longer than necessary.
How long will we use your personal data?
We will keep your personal data only for as long as is necessary for the purposes set out in this privacy notice and to fulfill our legal obligations. We will not keep more data than we need. While you remain a user of the Public Network, we will retain your data in order to keep providing services to you.
We are required to keep some basic information about our customers for a longer period in accordance with applicable tax laws. In some circumstances you can ask us to delete your data.
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, and the right to object.
Under EU data protection laws you have a number of rights in relation to your personal data. These rights are not absolute – in some cases they will not apply to you, or to the particular use that we are making of your data. There are exceptions, for example if we have to process the data to comply with our own legal obligations; if that is the case we will let you know.
Your rights include:
- Access to your personal information (by what is commonly known as a "data subject access request").
- Require us to correct any mistakes in your information which we hold.
- Require the deletion of personal information concerning you in certain situations.
- Receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transmit that data to a third party in certain situations.
- Object at any time to processing of personal information concerning you for direct marketing.
- Object to Stack Overflow’s decisions being taken by automated means (including profiling) which produce legal effects concerning you.
- Object in certain other situations to our continued processing of your personal information.
- Otherwise restrict our processing of your personal information in certain circumstances.
For further information on each of these rights, including the circumstances in which they apply, See the guidance from the UK Information Commissioner’s Office (ICO) on individual rights under the General Data Protection Regulation.
You also have the right to take your concerns at any time to the Data Commissioner's Office (ICO, the UK supervisory authority for data protection issues (www.ico.org.uk).
Data we process on your behalf as processor
Where we act as a processor, our organisation will be the controller responsible for your personal data and it is your responsibility to comply with any applicable regulatory requirements including issuing any privacy notices and obtaining consent, where required, for processing personal data. We are also required to sign a Data Processing Agreement with the data controller under Art28 GDPR before we can provide you with any services.
We/Stack Exchange Inc. will collect data as processor for purposes of:
- Providing, maintaining, and updating the Product
- Processing lawful requests from law enforcement and government agencies
- Preventing and responding to security incidents
- Providing support and technical assistance as may be required or requested
- Aggregating data usage analytics
- Associating account registrations of Entity Representative(s) and/or Authorized User(s) with Company which, in the case of a Company name or other content that is a trademark, includes a revocable license to host and display such trademark during Subscription Term
On behalf of your organisation, we will collect Company or Entity name, Team Representative name, the names of authorized users, and you may elect to provide a Company or Team logo, trademark, or photo for account association purposes.
Any content you provide in the course of your use of the Stack Overflow for Teams product is shared privately with authorized users of your Team, and may include private questions and answers, votes, source code, and other sensitive data. Our collection of such content is solely to provide the Products and Services, and is provided pursuant to our private Network Terms. Stack Overflow personnel may not access such content except to the extent as may be required in response to a support request with your explicit permission, or when required for security or maintenance of the product or services. In such cases, Stack Overflow personnel will only access the minimum content necessary to resolve the issue and in accordance with the private Network Terms.
If you have any questions about this Privacy Notice or the way we use your personal data please contact us at firstname.lastname@example.org
The Stack Overflow Enterprise platform is not intended for children. We do not knowingly offer this service to anyone under the age of 16.
General Contact Information
- Privacy Officer, 110 William Street, Floor 28, New York, NY 10038, email@example.com, phone: 212-232-8280
- Privacy Trust, Communications House, 26 York Street, London, W1U 6PZ
- Privacy Officer, Bentima House, 168-172 Old Street, London EC1V 9BP, firstname.lastname@example.org, phone: +44 (0) 20 3349 1000