Privacy Policy

1. Scope and applicability

This policy applies to personal information we process about visitors to our marketing website, prospective customers who contact us, account holders, and users of our cloud-based software products.

Some products may link to separate applications hosted on their own domains (for example, swanx.app). Where a product has product-specific privacy terms, those terms supplement this policy for that product.

By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree, please do not use the Services.

2. Information we collect

We collect information in the following categories, depending on how you interact with us:

Information you provide directly

• Account and profile data — name, email address, password or authentication credentials, organization name, job title, billing contact details, and preferences you set in your account.
• Contact and sales enquiries — information submitted through our contact form or email, such as your name, email, company, area of interest, and message content.
• Payment information — billing details and transaction records. Payment card data is typically processed by our payment processor; we do not store full card numbers on our servers.
• User-generated content — text, files, simulation transcripts, financial entries, configuration data, and other content you submit while using our products.
• Communications — support requests, feedback, and correspondence with our team.

Information collected automatically

• Device and usage data — IP address, browser type, operating system, device identifiers, pages viewed, features used, session duration, referral URLs, and crash or performance logs.
• Product analytics — interaction events within our applications (for example, sessions completed, features accessed, and error reports) to operate, secure, and improve the Services.
• Cookies and similar technologies — as described in Section 6.

Information from third parties

• Authentication providers — if you sign in with Google or another identity provider, we may receive your name, email address, and profile identifier as permitted by that provider.
• Service providers — hosting, analytics, payment, email delivery, and fraud-prevention partners may provide us with technical or transactional data.
• Business partners — where you access Stratix through a partner, reseller, or enterprise customer, we may receive limited account or provisioning information.

We do not intentionally collect sensitive personal information unless you choose to provide it in free-text fields or where required to deliver a specific feature. Please avoid submitting special-category data unless necessary.

3. How we use information

We use personal information for the following purposes:

• Providing, operating, maintaining, and improving the Services
• Creating and managing accounts and authenticating users
• Processing subscriptions, invoices, and payments
• Delivering AI-powered features, coaching, scoring, recommendations, and automation within our products
• Responding to enquiries, support requests, and partnership opportunities
• Sending service-related notices, security alerts, and administrative messages
• Analysing usage trends, debugging, and developing new features
• Detecting, preventing, and addressing fraud, abuse, and security incidents
• Complying with legal obligations and enforcing our terms
• With your consent or direction, sending marketing communications about Stratix products (you may opt out at any time)

We do not sell your personal information for money. We may use advertising or analytics tools on our marketing site; where required by law, we provide opt-out mechanisms as described in Section 12.

4. Legal bases (EEA, UK & Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information only where we have a valid legal basis under applicable data protection law, including:

• Contract — to provide the Services you request or to take steps at your request before entering a contract
• Legitimate interests — to operate, secure, and improve our business, provided those interests are not overridden by your rights (for example, fraud prevention, product analytics, and responding to enquiries)
• Consent — where required for optional cookies, certain marketing, or specific processing you agree to
• Legal obligation — where we must retain or disclose information to comply with law

You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

5. AI and automated processing

Stratix builds AI-powered SaaS products. Depending on the product, we may process user inputs (such as messages, transcripts, financial data, or scenario content) using automated systems and third-party AI model providers to generate responses, scores, coaching feedback, classifications, or recommendations.

• AI outputs are generated automatically and may not always be accurate; they are provided for training, productivity, or informational purposes and should not be relied on as professional, legal, financial, or medical advice.
• We take steps to limit use of your content for model training where our product terms or settings indicate that restriction.
• We may use de-identified or aggregated data to improve product quality, safety, and performance.

Where applicable law grants you rights related to automated decision-making, you may contact us to request human review or additional information about significant automated processing.

6. Cookies and similar technologies

We and our partners use cookies, local storage, pixels, and similar technologies to:

• Keep you signed in and remember preferences
• Understand how visitors use our website and products
• Measure marketing performance
• Protect against abuse and unauthorized access

You can control cookies through your browser settings. Blocking certain cookies may affect functionality. Where required by law (including in the EEA and UK), we will request consent before placing non-essential cookies.

7. How we share information

We may share personal information with:

• Service providers — cloud hosting, databases, email delivery, customer support tools, analytics, payment processing, and AI infrastructure providers that process data on our behalf under contractual safeguards
• Affiliates — entities under common ownership or control, subject to this policy
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections
• Legal and safety — when required by law, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, and security
• With your consent — when you direct us to share information or connect integrations

We require processors to handle personal information only according to our instructions and applicable law.

8. International data transfers

Stratix is based in the United States. If you access the Services from outside the US, your information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate.

Those countries may have data protection laws that differ from those in your jurisdiction. Where required, we implement appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses approved by the European Commission or UK authorities, and supplementary measures where appropriate.

9. Data retention

We retain personal information for as long as necessary to provide the Services, fulfil the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements.

Typical retention practices include:

• Account data — for the life of your account and a reasonable period thereafter
• Marketing enquiries — generally up to 24 months unless a longer period is needed for follow-up or legal compliance
• Logs and security records — for a limited period based on operational and security needs
• Backup copies — may persist for a limited time in encrypted backups after deletion from active systems

When information is no longer needed, we delete or de-identify it in accordance with our retention schedules.

10. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit, monitoring, and secure development practices. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

If you believe your account or data has been compromised, contact us promptly at security@stratixintelligence.com.

11. Your rights (EEA, UK & Switzerland)

Subject to applicable law, individuals in the EEA, UK, or Switzerland may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests or for direct marketing
• Receive your information in a portable, machine-readable format where technically feasible
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local supervisory authority

To exercise these rights, email privacy@stratixintelligence.com. We may need to verify your identity before responding. We aim to respond within one month, or the period required by applicable law.

EU/EEA supervisory authorities are listed at edpb.europa.eu. UK residents may contact the ICO at ico.org.uk.

12. Your rights (United States)

California residents (CCPA / CPRA)

If you are a California resident, you may have the right to:

• Know the categories and specific pieces of personal information we collect, use, disclose, and share
• Request deletion of personal information, subject to certain exceptions
• Request correction of inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising (we do not sell personal information for money; if we engage in activities defined as “sharing” under California law, you may opt out)
• Limit use of sensitive personal information where applicable
• Not receive discriminatory treatment for exercising privacy rights

Submit requests to privacy@stratixintelligence.com with the subject line “California Privacy Request.” We will verify your request as required by law.

You may designate an authorized agent to submit a request on your behalf. California residents may also contact the California Privacy Protection Agency for more information about their rights.

Other US states

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights regarding access, deletion, correction, portability, and opt-out of targeted advertising or certain profiling. Contact us to exercise applicable rights.

13. Children’s privacy

Our Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children without appropriate parental consent where required by law.

WiseSurfing and certain family-oriented features may be used by parents or guardians on behalf of household members. If you believe we have collected information from a child without proper consent, contact us and we will take appropriate steps to delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page and revise the “Last updated” date. Where required by law, we will provide additional notice (for example, by email or in-product notification).

Your continued use of the Services after the effective date of an update constitutes acceptance of the revised policy, to the extent permitted by law.

15. Contact us

For privacy questions, requests, or complaints:

This policy is provided for transparency and general information. It is not legal advice. We encourage you to review product-specific terms where applicable.