Privacy Policy

Last updated: draft, pending legal review

This Privacy Policy explains what data striq collects, why, and how you can control it. It is written to be broadly consistent with GDPR/UK GDPR-style data protection principles, but has not yet been reviewed by a lawyer and does not yet name a specific controlling entity or jurisdiction.

1. What we collect

Account data: email address, a securely hashed password (never the password itself), display name, and language preference.

Usage data: conversations and messages you send and receive, token and image-generation usage against your quota, and technical metadata such as timestamps and model identifiers.

Payment data: subscription tier, billing status, and a reference to your saved payment method held by our payment processor. We never receive or store your full card number.

Technical data: IP address and user-agent associated with login sessions, used for security (session management, abuse and fraud detection) and not for advertising.

2. Why we process it

To provide the service you signed up for: authenticating you, running your conversations through AI providers, generating images, tracking usage against your plan, and processing subscription payments.

To keep the service secure and prevent abuse, including automated anomaly detection that flags unusual account activity for manual review — this never automatically restricts your account.

To communicate essential account and billing notices. We do not send marketing email without separate consent.

3. Who we share it with

AI model providers process the content of your messages to generate responses; they receive message content but not your account credentials.

Our payment processor handles checkout and recurring billing and receives the billing details necessary to process a transaction.

Infrastructure providers (cloud hosting, object storage for generated images, transactional email delivery) process data as processors acting on our instructions, under their own data protection commitments.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

4. Data retention

Conversation history is retained until you delete it or delete your account. Billing records are retained as required for accounting and fraud-prevention purposes even after account deletion, limited to what is necessary.

Deleting your account removes your profile, conversations, and generated images from active systems; residual copies in backups are purged on our regular backup rotation schedule.

5. Your rights

You can access, export, and delete your conversation history and account directly from account settings at any time, without contacting support.

Depending on your location, you may have additional rights to request a copy of your data, correct inaccuracies, or object to certain processing. Contact us using the details in your account to exercise these rights; we will also route the request to a formal channel once one is published.

6. International transfers

Our infrastructure and AI providers may process data in countries other than your own. Where required, we rely on standard contractual safeguards recognized under applicable data protection law for such transfers.

7. Children

The service is not directed at children and is not intended for use by anyone below the age required to consent to data processing in their jurisdiction.

8. Changes to this policy

We may update this policy as the service evolves. Material changes will be highlighted in the product before they take effect.