Privacy Policy

Effective date: June 6, 2026

1. Information we collect

We collect the following categories of data:

  • Account data: Email address, display name, and authentication credentials when you register.
  • Business profile data: Information you enter about your brand (name, industry, target audience, budget) to power AI generation.
  • Usage data: Campaign count, generation history, and interaction logs used to enforce plan limits and improve the Service.
  • Payment data: Billing information is handled by Stripe; we store only a Stripe customer ID and subscription metadata.
  • Technical data: IP address, browser type, and page-view logs for security and performance monitoring.

2. How we use your data

We use your data to:

  • Provide and improve the Service.
  • Generate AI campaign strategies tailored to your brand profile.
  • Process payments and manage your subscription.
  • Send transactional emails (account confirmation, billing receipts).
  • Detect and prevent fraud and abuse.

We do not sell your personal data to third parties.

3. Data sharing

We share data only with the following trusted sub-processors required to operate the Service:

  • Supabase — database and authentication hosting.
  • OpenAI — AI generation. Your brand profile and campaign brief are sent to OpenAI to produce output. OpenAI's data use policy applies.
  • Stripe — payment processing.
  • Vercel — application hosting and edge delivery.

4. Data retention

We retain your data for as long as your account is active. On account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g. billing records for 7 years).

5. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data. To exercise any of these rights, email hello@stradlab.com. We respond within 30 days.

6. Cookies

We use strictly necessary cookies to maintain your authenticated session. We do not use tracking or advertising cookies.

7. Security

All data is encrypted in transit (TLS) and at rest. Authentication is handled by Supabase with industry-standard practices. We conduct periodic security reviews.

8. Changes to this policy

We may update this policy periodically. Material changes will be communicated via email at least 14 days before taking effect.

9. Contact

Privacy questions or requests: hello@stradlab.com