What we collect, and why.

Straterai is a software studio operated by Garrison Bryant, a Florida corporation, with offices at 309 S Fremont Ave, Tampa, Florida. Straterai is the data controller for the information described on this page.

This policy covers straterai.com and the internal business systems we run to operate the company. Work we perform for clients is governed by the written agreement with that client, and where that agreement conflicts with this page, the agreement controls.

If you submit the contact form, we receive the name, email address, company, and project description you enter. We use that information to respond to you and, if a working relationship follows, to administer it.

If you subscribe to our writing, we receive your email address and store it in our email platform so we can send you what you asked for. Every message includes an unsubscribe link.

We measure aggregate site usage and page performance. This measurement does not set advertising cookies, does not build a profile of you, and does not follow you to other sites. We do not sell personal information, and we do not run behavioral advertising.

When we build systems for a client, we process the data that client directs us to process. The categories vary by engagement and are set out in the agreement and any data processing addendum attached to it. We act as a processor for that data, not as a controller, and we do not use it for any purpose other than delivering the engagement.

We do not use client data to train models. Our language model provider operates under a commercial agreement with zero data retention, so prompts and outputs are not retained on their systems beyond what is required to return a response.

Straterai builds and runs applications for its own internal operations. These connect to business systems we own, including our accounting, banking, email, and source control systems, and they read and write only Straterai's own records.

Our internal accounting integration connects to our own QuickBooks Online company file to classify and reconcile our own transactions. It is used only by Straterai officers, it is not offered to or accessible by any third party, it is not distributed or listed publicly, and the data it touches is Straterai's own financial records. That data is not sold, not shared for marketing, and not used to train models.

We use a small set of third parties to host our systems, deliver email, and monitor reliability. Each one has a data processing addendum on file. The current list, what each provider does, the data categories involved, and the processing region are published on our sub-processors page.

We update that page when providers change. If you need advance notice of sub-processor changes for a contractual reason, ask us and we will arrange it.

Contact form submissions are retained while a conversation is active and for a reasonable period afterward for business records. Subscriber email addresses are retained until you unsubscribe. Client data is retained for the term of the engagement and the period specified in that agreement, then deleted or returned at the client's direction.

Aggregate usage measurement is retained in summary form and is not tied back to an identifiable person.

Access to systems is granted on a least privilege basis and reviewed on a schedule. Company endpoints are encrypted at rest. Secrets are held in a managed vault rather than in code or configuration files. We run a documented incident response process and maintain a compliance program with continuous control monitoring.

No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting your personal information, we will notify you and any required authority within the timeframes the law requires.

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. You can unsubscribe from our writing at any time. Depending on where you live, you may have additional rights under laws such as the GDPR or the Florida Digital Bill of Rights, including the right to object to processing or to lodge a complaint with a supervisory authority.

To exercise any of these, email us. We will respond within thirty days. We do not charge a fee, and we will not treat you differently for asking.

Our site and our services are directed to businesses. We do not knowingly collect personal information from anyone under sixteen. If you believe a child has provided us information, contact us and we will delete it.

If we change this policy, we will update the effective date above and, for material changes, describe what changed. Continued use of the site after a change means you accept the updated policy.