Skip to content

Acceptable use

What this covers

This policy applies to the supastack website, the purchase and license-delivery services behind it, and the licensed codebase itself. It exists to keep the service safe for customers and to keep the codebase from becoming a vehicle for abuse.

Fair use

Use the site and services as they are meant to be used. Forms, checkout, and license endpoints are rate-limited; scripted or excessive traffic that degrades the service for others can be throttled or blocked.

Your account and your users

You are responsible for what happens under your account and license — including developers you add to your seats and, where the law allows it, anyone who gains access because your credentials were not reasonably secured.

Prohibited activity

Do not use supastack — the site, the services, or the codebase — for any of the following:

  • Unlawful or infringing material — content that violates applicable law, intellectual-property rights you don't hold, export controls, or that is defamatory or an illegal threat.
  • Spam and unconsented messaging — unsolicited bulk or commercial messages, purchased contact lists, or any messaging list that is not confirmed opt-in.
  • Malicious or deceptive activity — probing or attacking infrastructure, injecting malware, accessing accounts or data you are not authorized for, evading payment, or misrepresenting a product as endorsed by supastack.
  • Harassment and harm — hate speech, incitement to violence, content that exploits or endangers anyone, or discrimination against any group or individual.
  • License and seat abuse — sharing access beyond your purchased seats or redistributing the codebase itself, as set out in the license.

Enforcement

If you or your users break this policy, we can suspend or terminate access, revoke the license and its repository invitations, and — where the law requires it — report activity to the relevant authorities. No credit or refund is owed for interruptions that result from a violation.

Changes to this policy

This is not an exhaustive list of unacceptable activity. We may revise this policy by publishing the updated version on this page; for existing customers it takes effect 30 days after publication, or on your next use of the services, whichever comes first.

Questions

If you are unsure whether something is allowed, ask through the contact form before you do it.

Frequently asked questions

14 questions

What is supastack?

supastack is a modular foundation for building AI-powered SaaS products. It brings together common infrastructure so you can focus on product-specific features.

Does it support web and mobile?

Yes. supastack includes Next.js and Expo apps as starting points for web and mobile experiences.

What authentication is included?

Better Auth covers email OTP, magic-link, and social sign-in; email/password stays available at the API layer and through the Auth.js credentials engine for products that need it. Personal workspaces are provisioned with the account so product records stay scoped from day one.

How does it support AI?

supastack includes configurable multi-provider AI, usage tracking, budgets, and encrypted bring-your-own-key support.

How are subscriptions handled?

For products built on the kit, Stripe billing, subscriptions, and entitlements form the paid-access foundation. Provider secrets stay server-only.

Where does my product-specific code live?

Product-specific features remain in a separate codebase while the product configures and integrates supastack’s foundation modules.

How does supastack pricing work?

The kit is a one-time purchase with lifetime updates: One Platform at $249 (temporary launch price, $100 off the regular $349) — your pick of Next.js (Web), Expo (iOS & Android), or Tauri (macOS & Windows Desktop) — or the All Platforms Bundle at $499 (temporary launch price, $100 off the regular $599) with every platform and the full monorepo, plus $75 per extra developer seat. No kit subscription. Checkout on this site delivers your license key by email, with repository access via GitHub invite.

How do workspaces scope my data?

User-owned records are scoped by workspaceId. Identity, entitlements, AI usage, billing events, and audit entries stay inside the personal workspace boundary.

How do background jobs work?

Trigger.dev is the explicit job runtime. The JobRunner contract only promises enqueue, status, and cancel—workflow semantics stay Trigger.dev-specific and explicit.

How is email different from outreach?

Transactional email covers product workflows such as completion notices. Cold outreach and campaigns are product concerns outside this kit’s email module.

How do mobile purchases work?

Mobile includes native purchases and restore through RevenueCat, with access verified by your server. Configure the store accounts and complete device testing before release. Web billing remains separate.

Where do AI provider keys live?

Bring-your-own-key credentials are encrypted and stay server-only. Keys are redacted from logs; usage and budgets remain visible at the workspace level.

Which payment methods does checkout accept?

The Stripe-hosted checkout accepts cards and can also offer Alipay and WeChat Pay once those wallets are enabled on the Stripe account — handy for buyers in China. Wallet authorizations confirm asynchronously, so the license page updates as soon as the payment clears.

Can I get a refund?

After you've got access to the repository, supastack is yours forever, so it cannot be refunded. But rest assured, you get the complete source code with lifetime updates to build and ship unlimited products for yourself or clients. You just cannot resell the code or redistribute the repository as a starter kit or template.

EN