Our commitment to you
We built StageMerge on a simple principle: your data belongs to you. We collect only what we need to provide the service, we protect it with industry-standard encryption, and we will never sell, rent, or trade your information to anyone. There are no hidden uses and no surprises.
Information we collect
We keep data collection deliberately minimal:
- Account details — your name and email address, so we can create your account and keep you signed in securely.
- Contentful connection credentials — the API tokens you provide to connect your spaces. These are encrypted at rest with AES-256-GCM before they ever touch our database, and they are only ever decrypted in memory to perform the actions you explicitly request.
- Operational data — merge requests, connection metadata, and similar records that make the product work for your team.
How we protect your data
Security is engineered into StageMerge from the ground up, not bolted on afterwards:
- Passwords are hashed, never stored. We secure every password with argon2id, a modern, memory-hard hashing algorithm. We never store — and can never see — your plaintext password.
- Sensitive credentials are encrypted at rest using authenticated AES-256-GCM encryption.
- Encrypted in transit. All traffic is protected with TLS/HTTPS, so your data is safe as it travels to and from our servers.
- Least-privilege access. Credentials are decrypted only at the moment they are needed and only to carry out an action you requested.
How we use your data
We use your information solely to operate, secure, and improve StageMerge — authenticating you, connecting to your Contentful spaces on your behalf, sending essential account emails (such as verification and password resets), and keeping the service reliable. That is the full extent of it.
Your rights and control
You are always in control of your data. At any time you can:
- Access and update your account details from your profile.
- Disconnect any Contentful connection, removing its stored token.
- Request deletion of your account and associated data by contacting us.
Cookies and sessions
We use secure, essential cookies purely to keep you signed in and to protect your session. We do not use them to track you across other websites.
Contact us
Have a question about your privacy? We are happy to help — reach us any time at contact@stagemerge.com.