Privacy Policy

1. Introduction

Welcome to the StractusAI Privacy Policy. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, process, and store your information when you use our AI-powered data extraction service.

2. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, password, and billing information when you register on our platform.
• Usage Data: Information about how you use our service, including extraction metrics (like number of extractions, models used), usage frequency, and features accessed.
• User Content: The text and documents you submit for extraction through our platform. We process this content solely to provide the extraction service.
• Device and Technical Information: IP address, browser type, operating system, and other technical details used to access our platform for security and analytics purposes.
• Payment Information: When you subscribe to a paid plan, our payment processor (e.g., Stripe) collects your payment details directly. We do not store your full credit card information.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our data extraction services;
• Process your subscriptions and payments;
• Improve, personalize, and expand our platform based on usage patterns;
• Understand and analyze how you use our services for optimization;
• Develop new products, services, and features;
• Communicate with you, including sending service updates, support messages, and marketing communications (which you can opt-out of);
• Detect, prevent, and address technical issues, fraud, or abuse;
• Monitor usage for billing and credit calculations;
• Comply with legal obligations and enforce our terms.

4. Data Storage and Security

We implement industry-standard security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information and user content. Your information is stored on secure servers (e.g., MongoDB Atlas) and encrypted during transmission (HTTPS).

We retain your account data for as long as your account is active or as needed to provide you services. Usage data and user content may be retained for a limited period necessary for service provision, billing, and analysis, or as required by law. You can request the deletion of your account and associated data.

5. Information Sharing

We do not sell or rent your personal information. We may share your information only in the following limited circumstances:

• With Service Providers: We share information with third-party vendors and service providers who help us operate our platform (e.g., cloud hosting like Vercel, database providers like MongoDB, payment processors like Stripe, AI model providers like OpenAI/Ollama). These providers are bound by confidentiality obligations.
• For Legal Reasons: If required by law, such as responding to subpoenas, court orders, or legal processes, or to establish or exercise our legal rights or defend against legal claims.
• To Protect Rights and Safety: To protect our rights, privacy, security, or property, and/or that of our affiliates, you, or others.
• Business Transfers: In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, with notice provided to users where feasible.

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request access to the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to certain exceptions.
• Restriction: Request restriction of processing of your data in certain circumstances.
• Objection: Object to the processing of your data based on legitimate interests.
• Portability: Request a copy of your data in a machine-readable format.
• Withdraw Consent: Withdraw your consent at any time where we rely on consent for processing.

You can typically manage your account information through your account settings. To exercise other rights, please contact us using the information provided in the "Contact Us" section.

7. Cookies and Similar Technologies

We use essential cookies for authentication (e.g., via NextAuth) and basic site functionality. We may also use cookies for analytics (e.g., Google Analytics) to understand website usage and improve user experience. You can control the use of non-essential cookies through your browser settings or cookie consent tools if implemented.

8. Children's Privacy

Our service is not directed to individuals under the age of 13 (or a higher age threshold depending on the jurisdiction). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date, or through other communication channels (like email) if the changes are material.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: support@stractusai.com