Privacy policy

Last updated: March 28, 2026. This policy explains how StrataIndex handles personal data on the marketing site, during early-access onboarding, and in the product. It is intended as a clear baseline notice for users, prospects, and customers. It is not legal advice.

Who we are

StrataIndex provides software for extracting, reviewing, and indexing requirements from uploaded documents. For marketing-site data and direct prospect information, StrataIndex generally acts as the controller of personal data. For customer or client documents uploaded into the product, StrataIndex generally acts as a processor or service provider on behalf of the customer, subject to applicable agreements.

What information we collect

Contact details such as name, work email, and company information if you provide them.
Early-access signup data, including attribution fields like UTM parameters, referrer, and landing path.
Account and workspace data needed to authenticate users and operate the product.
Document content, extracted requirements, review actions, and related metadata uploaded by customers.
Operational, security, and usage logs needed to run, secure, and improve the service.
Cookie and analytics preferences, plus optional website analytics where consent is required.

How we use information

To operate the website, product, onboarding flow, and customer support.
To process early-access requests and communicate with interested users or customers.
To authenticate users, protect accounts, prevent abuse, and investigate incidents.
To process uploaded content, generate extractions, surface conflicts, and maintain audit trails.
To improve the service, monitor performance, and understand product or marketing effectiveness.
To comply with legal obligations and enforce our agreements.

Legal bases

Depending on the context and applicable law, we rely on one or more of the following legal bases: your consent, performance of a contract, compliance with legal obligations, and legitimate interests such as securing the service, supporting customers, preventing misuse, and improving product quality. Where consent is the basis, you may withdraw it at any time, although that will not affect prior processing.

Cookies and analytics

We use essential cookies or similar storage to run the site and maintain basic preferences. Optional analytics load only if you accept them through the cookie banner. If you reject optional analytics, the marketing site should continue to function without them. You can change your choice by clearing your site data and setting your preference again when the banner reappears.

How we share information

We share information only where needed to operate the service, including with infrastructure, authentication, email, analytics, AI, and database providers, plus advisers or authorities where legally required. We do not sell personal information. If we ever engage in activities that applicable law treats as a sale or share, we will update this policy and related notices before doing so.

International transfers

StrataIndex and its service providers may process data in countries other than the country where it was collected. Where applicable law requires transfer safeguards, we intend to rely on lawful transfer mechanisms such as contractual commitments and supplementary measures appropriate to the transfer.

Retention

We keep personal data only as long as reasonably necessary for the purposes described in this policy, including to provide the service, maintain security, comply with law, and resolve disputes. Marketing inquiries are retained only as long as useful for follow-up or legal recordkeeping. Customer content is retained according to the product configuration and customer relationship, subject to backup, security, and legal retention constraints.

Your rights

Depending on your location and applicable law, you may have rights to access, correct, delete, export, restrict, or object to certain processing, and to withdraw consent where consent applies. You may also have the right to complain to a supervisory authority. If you are a California resident and StrataIndex is subject to the CCPA as amended, you may also have rights to know, delete, correct, opt out of sale or sharing, limit certain sensitive data uses, and avoid discrimination for exercising those rights.

How to exercise rights

To make a privacy request, use the contact details provided in your StrataIndex onboarding, order, or other written communications. If you are evaluating the service through the public site only, use the active contact channel published on strataindex.io. We may need to verify your identity before completing certain requests.

Customer responsibilities

Customers are responsible for ensuring they have an appropriate legal basis and authority to upload documents or personal data into StrataIndex, and for providing any required notices to their own users, employees, clients, or data subjects. Where StrataIndex acts as a processor or service provider, the customer remains responsible for its controller obligations.

Security

We use administrative, technical, and organizational safeguards designed to protect personal data based on the nature of the information and the risks involved. No system is perfectly secure, and we cannot guarantee absolute security.

Children

StrataIndex is intended for business use and is not directed to children. We do not knowingly collect personal data from children in connection with the public site or product.

Changes to this policy

We may update this policy from time to time to reflect product, legal, or operational changes. When we do, we will update the effective date above and, if appropriate, provide additional notice.