Privacy

• Your account: your email address and, if you sign up with a password, a hash of it (never the password itself). If you continue with Google, the email address and name on your Google account.
• Your work: the projects, evidence, factors, matrices, comments and uploaded documents you put into Strama, and the people you invite to a project.
• Billing: your plan and its dates. Card details are entered with our payment provider and never reach us.
• Cookies: described below.

To sign you in, run your projects, bill you, send the emails you ask for (a confirmation link, a password reset, a project invite), and keep the service working. We don't sell your data and we don't use it for advertising.

We use these providers to run Strama. Each handles your data only to provide its service to us.

• Supabase: sign-in (email, password hash, Google profile details) and the database and file storage for your projects. Hosted in Seoul, South Korea.
• Vercel: hosts the app. Our functions run in Seoul (icn1).
• Creem: takes payments and manages subscriptions as our payment provider.
• Anthropic (Claude): reads uploaded financial statements and powers the AI assists, only when you use them. See AI and your data.
• Amazon SES: delivers transactional email such as confirmation and reset links.
• Google: if you choose “Continue with Google”, Google signs you in and shares your email address and name with us. Its own privacy policy applies to that step.
• Google Analytics: counts visits to our public pages, such as the home page, pricing, the sample EFE, the sign-in and sign-up pages and these policy pages, so we can see which pages people find. It is switched off inside your projects and account pages, so it records nothing there; Google signals and ad personalization are switched off, and we don't use it for advertising.

We don't use advertising trackers.

• Session cookies keep you signed in. They are essential and expire when your session does.
• A short-lived recovery cookie marks a password-reset session, so the reset page can only be used from a reset link.
• A theme cookie remembers light or dark mode.
• Google Analytics sets its own cookies (named _ga and _ga_ followed by an ID) on our public pages to tell new visits from returning ones.

Your account and projects are kept until you delete them or ask us to. Deleting a project deletes its documents and page images. Backups held by our providers age out on their own schedules.

To see, correct or delete your data, or to close your account, email raymund.adrian.rafael@gmail.com. We'll confirm it's you and act on it.

Questions about this page: raymund.adrian.rafael@gmail.com.