1) Scope
This policy covers Stratenity websites, applications, and related services (the “Services”). By using the Services, you agree to this Privacy Policy and our Terms of Use.
2) Data We Collect
- Account & Profile: name, email, organization, role, preferences.
- Usage: pages viewed, features used, clicks, approximate location (from IP), device & browser metadata.
- Content You Provide: uploads, prompts, project scopes, comments, and related artifacts you submit.
- Forms & Inquiries: information you submit through our investor interest, design partnership, advisory intake, and similar forms, such as your name, email, organization, and responses. To prevent abuse, we also record a one-way hash of your IP address, your browser user agent, and the result of a press-and-hold human check. We use this information to review and respond to your submission.
- Payments: billing contact and transaction metadata (handled via our payment processor; we do not store full card numbers).
- Support: messages, tickets, and feedback.
- Cookies & Similar: session, analytics, and preference cookies (see Cookies below).
3) How We Use Data
- Provide, maintain, and improve the Services.
- Operate core features (workspaces, collaboration, AI outputs, payments).
- Security, fraud prevention, diagnostics, and compliance.
- Customer support and service communications.
- Research, analytics, and product development (in aggregate or de‑identified where feasible).
- Marketing with your consent or as otherwise permitted by law (you can opt out).
4) Legal Bases (EEA/UK)
Where GDPR/UK GDPR applies, we rely on: (a) performance of a contract; (b) legitimate interests (e.g., to secure and improve the Services); (c) consent (e.g., certain cookies or marketing); and (d) compliance with legal obligations.
5) Data Retention
We retain personal data only as long as necessary for the purposes described here or as required by law. Retention may vary by data type, account state, and regulatory obligations. We may maintain aggregated or de‑identified data for longer.
7) International Transfers
Where data is transferred internationally, we use appropriate safeguards such as Standard Contractual Clauses, supplementary measures, and data minimization.
8) Security
We employ administrative, physical, and technical controls appropriate to the data we process, including encrypted transport, scoped credentials, and access controls. No method is 100% secure; please report concerns promptly.
▸Technical Measures (summary)
- Encryption in transit, restricted storage access, and environment isolation.
- Audit logging and least‑privilege, role‑based access.
- Key rotation and secret management for server‑side operations.
9) Your Rights
Depending on your region, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object or withdraw consent. You also may have the right to lodge a complaint with your supervisory authority.
11) AI Processing
Some features generate AI‑assisted outputs from the content you provide. We restrict providers’ use of data to service delivery and improvement under contract, apply minimization, and avoid using your content to train public models unless you expressly opt in.
12) Children
The Services are not directed to children under the age of 13 (or as defined by local law). We do not knowingly collect personal data from children.
13) Privacy Requests
To exercise your rights, contact us at advisory@velorstrategy.com. We may need to verify your identity and jurisdiction before responding.
14) Changes to This Policy
We may update this policy to reflect changes to the Services or legal requirements. We will update the “Last Updated” date and, where required, provide additional notice.
15) Contact
Questions about this policy or our practices? Email advisory@velorstrategy.com.