StratBox AI Privacy Policy

Last updated: 10 June 2026

This Privacy Policy explains how StratBox AI LLC ("StratBox AI," "we," "us," or "our") collects, uses, shares, and protects personal information when you visit stratbox.ai (the "Site"), create an account, or use the StratBox AI platform and related services (together, the "Services").

We are the controller of the personal information described in this policy unless we are processing it on behalf of a customer, in which case we act as a processor and the customer is the controller. Where we act as a processor, the customer's own privacy notice and our agreement with that customer govern how the relevant information is handled.

If you have questions, contact us at privacy@stratbox.ai.

1. Who this policy applies to

This policy applies to:

  • Visitors to our Site
  • People who sign up for a free trial, early access, or a paid subscription
  • Authorized users who are invited into a customer workspace by an administrator
  • People who contact us, subscribe to updates, or otherwise interact with us

StratBox AI is built for organizations and the people who use it for work, though anyone who meets our eligibility requirements is welcome to use the Services.

2. Information we collect

2.1 Information you provide

Account and profile information. When you sign up and complete onboarding, we collect your name, work email address, password, organization or company name, job role, and the profile details requested during setup. Onboarding asks you to provide certain required information so we can configure your workspace.

Workspace content. When you use the Services, you and your team create and store content such as your stated vision, goals, standard operating procedures, assessments, questionnaires, checklists, task assignments, responses, scores, comments, and related notes ("Customer Content"). This content may include the names and roles of people inside your organization.

Payment and billing information. When you purchase a paid subscription, billing details are collected and processed by our third party payment processor. We do not store full card numbers on our own systems.

Communications. If you contact support, request a pilot, respond to a survey, or sign up for our newsletter, we collect the information you choose to share, including your message content and contact details.

2.2 Information collected automatically

When you use the Site or the Services, we and our service providers automatically collect:

  • Device and connection data such as IP address, browser type, operating system, and language
  • Usage data such as pages viewed, features used, actions taken, timestamps, and referring pages
  • Approximate location derived from IP address
  • Cookies and similar technologies (see our Cookie Policy for details)

2.3 Information from integrations you connect

If you choose to connect a third party service such as a file storage or productivity tool (for example Google Drive or Dropbox), we receive information from that service that is necessary to provide the integration you requested, in line with the permissions you grant. You control these connections and can disconnect them at any time. We process this information only to deliver the feature you enabled.

2.4 Information from other sources

We may receive limited information from analytics providers, advertising partners, and publicly available sources, and from the administrator who invites you into a workspace.

3. How we use information

We use personal information to:

  • Provide, operate, and maintain the Services
  • Create and manage accounts, workspaces, and user roles
  • Process subscriptions, trials, early access, and payments
  • Generate dashboards, scores, progress tracking, and insights that are core to the product
  • Operate features that rely on artificial intelligence, including automated scoring and the generation of insights and recommendations (see Section 5)
  • Provide customer support and respond to requests
  • Send service and transactional messages, and, where permitted, product updates and marketing
  • Monitor, secure, and improve the Services, including troubleshooting and analytics
  • Detect, prevent, and address fraud, abuse, and security incidents
  • Comply with legal obligations and enforce our Terms of Service

We do not sell your personal information, and we do not share it for cross context behavioral advertising.

4. Legal bases for processing (EU and UK users)

Where the General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on the following legal bases:

  • ‍Performance of a contract, to provide the Services you or your organization signed up for‍
  • Legitimate interests, to operate, secure, analyze, and improve the Services, and to communicate with you, provided these interests are not overridden by your rights‍
  • Consent**, for example for certain cookies, optional marketing, and where consent is otherwise required; you may withdraw consent at any time
  • privacy@stratbox.ai., to comply with applicable laws and lawful requests

Where we process information as a processor on behalf of a customer, that customer is responsible for establishing the legal basis for the processing.

5. Artificial intelligence and automated processing

The Services use artificial intelligence to analyze workspace content and produce outputs such as scores, progress assessments, insights, and recommendations. These outputs are intended to support human judgment, not to replace it. They may contain errors and should be reviewed by a person before any consequential decision is made.

We do not use your Customer Content to train foundational AI models for unrelated third parties. Where we use third party AI providers to deliver features, we do so under agreements designed to protect the confidentiality of your content.

If automated processing ever produces a decision that would have a legal or similarly significant effect on an individual without human involvement, we will provide the protections required by applicable law, including the ability to request human review. The Services are designed so that organizational decisions remain with the customer and its authorized users.

6. How we share information

We share personal information only as described below.

Service providers and subprocessors. We use trusted vendors to host infrastructure, process payments, send communications, provide analytics, deliver customer support, and supply AI capabilities. They may access personal information only to perform services for us and are bound by confidentiality and data protection obligations. A current list of subprocessors is available on request at privacy@stratbox.ai.

Within your organization. Customer Content and certain profile information are visible to other authorized users of your workspace according to the roles and permissions configured by your administrator.

Integrations you enable. When you connect a third party service, information flows between that service and StratBox AI as needed to provide the integration. Your use of that third party service is governed by its own terms and privacy policy.

Legal and safety. We may disclose information where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of StratBox AI, our users, or others.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

We do not sell personal information.

7. International data transfers

StratBox AI operates across borders, and your information may be transferred to and processed in countries other than the one in which you reside, including the United States, which may have different data protection laws.

Where we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we put in place appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and any other mechanisms recognized under applicable law. You may request more information about these safeguards using the contact details below.

8. Data retention

We retain personal information for as long as your account or workspace is active, and for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

When information is no longer needed, we delete or anonymize it. If you close your account, we will delete or return Customer Content in accordance with our agreement with the relevant customer and applicable law, subject to backups that are deleted on a routine cycle.

9. How we protect information

We maintain administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration. These measures include access controls, encryption in transit, and role based permissions. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal information.

For individuals in the EU, UK, and similar jurisdictions:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion
  • Restrict or object to certain processing
  • Request portability of information you provided to us
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with your local supervisory authority

For residents of California and other US states with privacy laws:

  • Know what personal information we collect and how we use it
  • Access and request a copy of your personal information
  • Request correction or deletion
  • Opt out of any sharing for targeted advertising or any sale (we do not sell or share for these purposes)
  • Not receive discriminatory treatment for exercising your rights

To exercise any right, contact us at privacy@stratbox.ai. We will verify your request and respond within the timeframe required by law. If your information is held within a customer workspace where we act as a processor, we may refer your request to that customer.

11. Cookies and similar technologies

We use cookies and similar technologies to operate the Site, remember your preferences, analyze usage, and, where you consent, support marketing. For full details and your choices, see our Cookie Policy and the cookie preferences control available on the Site.

12. Third party sites and services

The Site and Services may contain links to third party websites and integrate with third party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing information with them.

13. Children's privacy

The Services are not directed to children. We do not knowingly collect personal information from children under the age required for consent in their jurisdiction. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

15. How to contact us

StratBox AI LLC

Email: privacy@stratbox.ai

For users in the European Economic Area or the United Kingdom, you may contact us using the email above for any privacy related request.

You have the right to lodge a complaint with a data protection supervisory authority in your country of residence.