1. Data we collect
- Account & identity data — your name, email address, and authentication identifiers, captured when you create an account through our identity provider.
- Order & billing data — records of the artefacts you purchase, amounts, currency, and the payment/session identifiers returned by our payment provider, together with any billing or tax details you enter at checkout. We do not receive or store your full payment-card number.
- Questionnaire inputs — the information you provide to generate an artefact, including the mandatory fields (country of operation, company name, industry, company size, revenue band, and document currency) and the artefact-specific business information you supply.
- Uploaded materials — any company logo or materials you upload for inclusion in your artefact.
- Generated artefacts — the documents we produce for you, stored so you can download them from your dashboard.
- Technical & usage data — server logs, IP address, device/browser information, and the essential cookies needed to operate the site and keep you signed in (see our Cookie Policy).
- Support communications — messages you send us and our responses.
2. How we use your data and our legal bases
Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases:
- To provide the Service — creating your account, generating, formatting, quality-reviewing, storing, and delivering your artefacts (performance of a contract).
- To process payments and keep financial records — (performance of a contract and compliance with legal obligations such as tax and accounting).
- To send transactional emails — order confirmations and artefact-ready notifications (performance of a contract).
- To secure the Service and prevent fraud or abuse, and to operate and improve Stradhoc (legitimate interests).
- To respond to your support requests (legitimate interests and performance of a contract).
We do not use Your Content to train artificial-intelligence models, and our AI generation provider does not use data submitted through its commercial API to train its models. We do not sell your personal data.
3. Service providers (sub-processors)
We share personal data only with the service providers that help us operate Stradhoc, each bound by contract to protect it and to process it only on our instructions:
| Provider | Purpose | Primary location |
|---|---|---|
| Clerk | Account authentication and identity | United States |
| Stripe | Payment processing and tax calculation | United States / global |
| Anthropic | AI generation of artefact content | United States |
| Microsoft Azure | Hosting, database, file storage, and secrets management | European Union (West Europe) |
| Resend | Delivery of transactional email | United States |
We may also disclose personal data where required by law, to enforce our Terms of Service, or in connection with a corporate transaction such as a merger or acquisition.
4. International transfers
Our application, database, and file storage are hosted in Microsoft Azure's West Europe (European Union) region. Some of our service providers are located in the United States or other countries, so your personal data may be transferred and processed outside your country of residence. Where we transfer personal data out of the EEA, the UK, or South Africa, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or equivalent mechanisms.
5. How long we keep your data
- Account data — for as long as your account is active.
- Order and transaction records — retained as required to meet tax, accounting, and other legal obligations (typically up to seven years).
- Questionnaire responses, uploaded logos, and generated artefacts — retained so they remain available in your dashboard until you delete them or close your account, subject to any legal retention requirements.
6. Your rights
Depending on where you live, you may have the following rights over your personal data.
EEA / United Kingdom (GDPR / UK GDPR)
Access; rectification; erasure; restriction of processing; data portability; objection to processing based on legitimate interests; and the right to withdraw consent where we rely on it. You also have the right to lodge a complaint with your local data-protection supervisory authority.
California (CCPA / CPRA)
The right to know what personal information we collect and how we use it; to access and to delete it; to correct inaccurate information; and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information or share it for cross-context behavioural advertising, and we will not discriminate against you for exercising your rights.
South Africa (POPIA)
The right to access your personal information; to request correction or deletion; and to object to processing. You may also complain to the Information Regulator of South Africa.
To exercise any of these rights, email us at privacy@stradhoc.com. We may need to verify your identity before we act on your request, and we will respond within the timeframes required by applicable law.
7. Cookies
Stradhoc uses only the cookies that are strictly necessary to operate the site and keep you signed in. Our use of cookies is described in our Cookie Policy.
8. Security
We protect personal data with measures appropriate to its sensitivity, including encryption in transit (TLS 1.2 or higher) and at rest, secrets held in a managed key vault, a network-isolated database, and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.
9. Children
Stradhoc is a business service intended for professionals and is not directed to anyone under 18. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where the changes are material, take reasonable steps to notify you.
11. Contact us
For any privacy question or to exercise your rights, contact IntelliTechne Inc. at privacy@stradhoc.com.