Platform Privacy Policy

At Stravu, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing the Stravu application for collaborative strategy and decision-making services, (the “Platform”), you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy. 

Ensuring the privacy and security of your data is a matter of the highest importance at Stravu. We place strict internal controls over access to Platform user data and have technical controls and audit policies in place to ensure the confidentiality, integrity, and availability of such data. We also employ industry leading technology to safeguard Platform user data. Like most SaaS platforms, we do gather analytics from authorized users within the Platform, as discussed in this Privacy Policy; however, we take steps to ensure that any such data is not used for advertising or any other purposes beyond internal product and training improvements by us or our Service Providers. 

You may print a copy of this Privacy Policy by clicking here Print this page. As we continually work to improve our Platform, we may need to change this Privacy Policy from time to time. We will alert you of material changes by placing a notice on the Platform or by some other means. If you use the Platform after any changes to the Privacy Policy have been posted, that means you agree to all such changes.

In the ordinary course of making the Platform available to our enterprise customers we may process personal data about individuals at the direction of enterprise customers. In those cases we are a service provider and our processing of that data is governed by the agreement in place between us and the applicable enterprise customer. The enterprise customer’s privacy policy or other agreement between the enterprise customer and you or your organization, and not this Privacy Policy or the Platform Privacy Policy, applies to such processing. Where that is the case, please contact the relevant enterprise customer, and not Stravu, in the first instance to address your rights with respect to such data.

Privacy Policy Table of Contents

• What this Privacy Policy Covers
• Personal Data
  • Categories of Personal Data We Collect
  • Our Commercial or Business Purposes for Collecting Personal Data
  • Other Permitted Purposes for Processing Personal Data
  • Categories of Sources of Personal Data
• How We Share Your Personal Data
• Tracking Tools, Advertising and Opt-Out
• Data Security
• Personal Data of Children
• California Resident Rights
• Other State Law Privacy Rights
• Contact Information

What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Platform. “Personal Data” means any information that identifies or relates to a particular individual user and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations. This Privacy Policy applies only to the information collected with respect to the Platform and does not apply to data collected when using or accessing our public-facing corporate website, stravu.com (the “Website”) and other related activities or interactions as set forth in our Website Privacy Policy, available here. This Privacy Policy also does not cover the practices of companies we don’t own or control or people we don’t manage, nor does it apply to data we process for and on behalf of our customers. In that case, the customer's privacy policy or other agreement between you and them, and not this Privacy Policy, would apply to such processing. If you wish to discontinue such processing or otherwise exercise your rights with respect to such data, please contact the entity on whose behalf we process such data.

Personal Data

Categories of Personal Data We Collect

This chart details the categories of Personal Data that we collect and have collected over the past 12 months:

Category of Personal Data (and Examples)	Business or Commercial Purpose(s) for Collection	Categories of Third Parties With Whom We Disclose this Personal Data
Profile or Contact Data	First and last name Email  Phone number Organization ID Job Title	Service Providers Analytics Providers
Payment Data	Payment card type Last 4 digits of payment card Billing address and billing email	Service Providers (specifically our payment processing partner, currently Stripe, Inc.)
Commercial Data	Purchase history and consumer profiles	Analytics Providers
Device Data	IP address Device ID and type of device Operating system Browser used to access the Services	Analytics Providers
Web Analytics	Platform interactions and usage data Referring webpage from which you accessed the Service	Analytics Providers that we collect this data from, as per their terms (see Cookies section)
Geolocation Data	IP address-based location information	Analytics Providers
Other Identifying Information that You Voluntarily Choose to Provide	The content of emails, letters, and texts you send us.	Service Providers

 

Categories of Sources of Personal Data

We collect Personal Data about you from the following categories of sources:

• You

• When you provide such information directly to us.
  • When you use our interactive tools and Platform.
  • When you voluntarily provide information in free-form text boxes through the Services or through responses to surveys or questionnaires.
  • When you send us an email or otherwise contact us.  
• When you use the Platform and such information is collected automatically.
  • If you use a location-enabled browser, we may receive information about your location or device, as applicable.
  • Through Cookies (defined in the “Tracking Tools and Opt-Out” section below).

• Third Parties

• Third-Party Credentials
  • If you provide your third-party account credentials to us or otherwise sign in to the Platform through a third-party site or service, some content and/or information in those accounts may be transmitted into your account with us.

Our Commercial or Business Purposes for Collecting Personal Data

• Providing, Customizing and Improving the Platform 

• Creating and managing your account or other user profiles.
• Processing orders or other transactions; billing.
• Providing you with the products, Platform or information you request.
• Meeting or fulfilling the reason you provided the information to us.
• Providing support and assistance for the Platform.
• Improving the Platform, including testing, research, internal analytics and product development.
• Personalizing the Platform, website content and communications based on your preferences.
• Doing fraud protection, security and debugging.
• Carrying out other business purposes stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws.

• Corresponding with You

• Responding to correspondence that we receive from you, contacting you when necessary or requested, and sending you information about Stravu or the Platform.

• Meeting Legal Requirements and Enforcing Legal Terms

• Fulfilling our legal obligations under applicable law, regulation, court order or other legal process, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities.
• Protecting the rights, property or safety of you, Stravu or another party.
• Enforcing any agreements with you.
• Responding to claims that any posting or other content violates third-party rights.
• Resolving disputes.

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice.

How We Share Your Personal Data

We disclose your Personal Data to the categories of service providers and other parties listed in this section. Depending on state laws that may be applicable to you, some of these disclosures may constitute a “sale” of your Personal Data. For more information, please refer to the state-specific sections below.

• Service Providers. These parties help us host the Platform or perform business functions on our behalf. They include support platforms to facilitate customer service.

• Analytics Providers. These parties provide us with analytics services to analyze your usage of the Platform. 

Legal Obligations

We may share any Personal Data that we collect with third parties in conjunction with any of the activities set forth under “Meeting Legal Requirements and Enforcing Legal Terms” in the “Our Commercial or Business Purposes for Collecting Personal Data” section above. 

Business Transfers

All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices. 

Data that is Not Personal Data

We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and share it with third parties for our lawful business purposes, including to analyze, build and improve the Platform and promote our business, provided that we will not share such data in a manner that could identify you.  

Tracking Tools and Opt-Out

The Platform use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser, tell us how and when you visit and use our Platform, analyze trends, learn about our user base and operate and improve our Platform. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Platform and are transmitted securely to the backend. Please note that because of our use of Cookies, the Platform does not support “Do Not Track” requests sent from a browser at this time.

We use the following types of Cookies:

• Essential Cookies. Essential Cookies are required for providing you with features or Platform that you have requested. For example, certain Cookies enable you to log into secure areas of our Platform. Disabling these Cookies may make certain features and Platform unavailable. 
• Functional Cookies. Functional Cookies are used to record your choices and settings regarding our Services, maintain your preferences over time and confirm the authenticity of users accessing the Services. 
• Performance/Analytical Cookies. Performance/Analytical Cookies allow us to understand how visitors use our Platform. They do this by collecting information about the number of visitors to the Platform, what pages visitors view on our Platform and how long visitors are viewing pages on the Platform. 

You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Platform and functionalities may not work. 

To explore what Cookie settings are available to you, look in the “preferences” or “options” section of your browser’s menu. To find out more information about Cookies, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/.

Data Security and Retention

We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. Although we work to protect the security of your data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure.

We retain Personal Data about you for as long as necessary to provide you with our Platform. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.

Additional Rights

You may have additional rights under other foreign or domestic laws that apply to you. Please see our Website Privacy Policy,  for a discussion of such rights and processing. 

Contact Information:

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us at: 

• https://stravu.com/
• support@stravu.com