Skip to content
supastack
Theme
Sign in

Menu

Sign in
EN

Privacy

What this covers

This page describes how supastack handles information when you use the public website, create an account, or submit a contact or newsletter form. It is not a certification, audit report, or claim that every product built on the kit follows the same practice.

Account and workspace data

If you sign in, we store the email and name on your account, session data, and records owned by your personal workspace. Product records such as AI usage, entitlements, billing events, and audit entries are scoped by workspaceId. Provider secrets stay on the server and are not written into logs.

Billing

supastack license purchases on this site are processed by Stripe Checkout; card details are entered on Stripe's hosted page and never touch our servers. Order, license, and invite records are stored so access can be delivered and enforced. When Stripe is configured for a product built on this kit, customer, subscription, and entitlement records are stored so access can be enforced.

Messages you send us

Contact and newsletter forms send the details you type (name where asked, email, and message) to an operator inbox only when delivery is configured. We do not publish a subscriber count. If delivery is not connected, the form says so instead of pretending the message was mailed.

Analytics and cookies

We use PostHog and Google Analytics to understand how visitors use this site. In the EEA, the UK and Switzerland we ask first. If you accept, both run with cookies. If you reject, Google Analytics stays off and PostHog counts anonymous page views without cookies or browser storage, using a hash computed on its servers that changes daily and can't identify you. Elsewhere both run by default, and you can turn them off at any time with the analytics link in the footer. We honor Global Privacy Control signals. Server-side we record completed purchases without your email address.

What we do not claim

We do not sell a customer list, invent testimonials, or promise a specific deletion portal beyond what you can do from account settings (name update and sign-out today). Ask via the contact form if you need a record removed from an operator inbox.

Frequently asked questions

14 questions

What is supastack?

supastack is a modular foundation for building AI-powered SaaS products. It brings together common infrastructure so you can focus on product-specific features.

Does it support web and mobile?

Yes. supastack includes Next.js and Expo apps as starting points for web and mobile experiences.

What authentication is included?

Better Auth covers email OTP, magic-link, and social sign-in; email/password stays available at the API layer and through the Auth.js credentials engine for products that need it. Personal workspaces are provisioned with the account so product records stay scoped from day one.

How does it support AI?

supastack includes configurable multi-provider AI, usage tracking, budgets, and encrypted bring-your-own-key support.

How are subscriptions handled?

For products built on the kit, Stripe billing, subscriptions, and entitlements form the paid-access foundation. Provider secrets stay server-only.

Where does my product-specific code live?

Product-specific features remain in a separate codebase while the product configures and integrates supastack’s foundation modules.

How does supastack pricing work?

The kit is a one-time purchase with lifetime updates: One Platform at $249 (temporary launch price, $100 off the regular $349) — your pick of Next.js (Web), Expo (iOS & Android), or Tauri (macOS & Windows Desktop) — or the All Platforms Bundle at $499 (temporary launch price, $100 off the regular $599) with every platform and the full monorepo, plus $75 per extra developer seat. No kit subscription. Checkout on this site delivers your license key by email, with repository access via GitHub invite.

How do workspaces scope my data?

User-owned records are scoped by workspaceId. Identity, entitlements, AI usage, billing events, and audit entries stay inside the personal workspace boundary.

How do background jobs work?

Trigger.dev is the explicit job runtime. The JobRunner contract only promises enqueue, status, and cancel—workflow semantics stay Trigger.dev-specific and explicit.

How is email different from outreach?

Transactional email covers product workflows such as completion notices. Cold outreach and campaigns are product concerns outside this kit’s email module.

How do mobile purchases work?

Mobile includes native purchases and restore through RevenueCat, with access verified by your server. Configure the store accounts and complete device testing before release. Web billing remains separate.

Where do AI provider keys live?

Bring-your-own-key credentials are encrypted and stay server-only. Keys are redacted from logs; usage and budgets remain visible at the workspace level.

Which payment methods does checkout accept?

The Stripe-hosted checkout accepts cards and can also offer Alipay and WeChat Pay once those wallets are enabled on the Stripe account — handy for buyers in China. Wallet authorizations confirm asynchronously, so the license page updates as soon as the payment clears.

Can I get a refund?

After you've got access to the repository, supastack is yours forever, so it cannot be refunded. But rest assured, you get the complete source code with lifetime updates to build and ship unlimited products for yourself or clients. You just cannot resell the code or redistribute the repository as a starter kit or template.

EN