Privacy policy

Strata is a work management platform used by companies to run projects, client delivery and their operating rhythm. This policy explains what we collect, why, who we share it with and the choices you have. It covers the Strata app at app.stratacenter.ai, its client portal, and the Strata connector for Claude.

Who is responsible

Each company that uses Strata (a “workspace”) decides what goes into it and who can see it; for that content, the company is the controller and we process it on its behalf. We are responsible for the account and service data described below. Questions about a workspace's content are best sent to that company's Strata admin; anything else to support@stratacenter.io.

What we collect

• Account details: your name, work email, role and the workspaces you belong to. Strata is invite-only, so these usually come from the admin who invited you.
• Workspace content: what you and your teammates put in: projects, tasks, comments, files, time entries, meeting notes, goals, forms and settings.
• Sign-in data: sessions and one-time sign-in links (we store only hashes of tokens, never the tokens themselves), and the sign-in method used.
• Security and usage records: an audit log of actions in a workspace (what was done, by whom, when and from which IP address; never the content itself), plus standard server logs.
• Integrations: when an admin connects Slack, Jira, Salesforce, HubSpot, webhooks or single sign-on, the settings and credentials needed for it. Credentials are encrypted at rest.

We don't sell personal information, we don't show ads, and we don't use workspace content to train AI models.

How we use it

• To run the service: show you your work, save changes, send the notifications and emails you've asked for, and keep teammates in sync.
• To keep it secure: sign-in, access rules, rate limits, the audit log and investigating abuse.
• To support you when you write to us, and to tell you about important changes to the service.

Claude and other AI features

The Strata connector for Claude. When you connect Claude, you sign in to Strata and approve access. Claude can then read and change your work through the connector's tools (listing projects, searching and reading tasks, creating and updating tasks, commenting and setting project status), always as you and with exactly your permissions. We receive only the requests the tools make; we don't receive or store your Claude conversations. Access tokens last an hour and are refreshed while you stay connected; we store only their hashes. You can disconnect at any time in Strata under Settings → Connect Claude, and access also ends if you are removed from the workspace. Claude itself is provided by Anthropic under its own terms and privacy policy.

AI features inside Strata (such as drafting a status update or a template) are optional and switched on by the workspace. When you use one, the relevant content you can already see is sent to Anthropic's API to produce the result. It isn't used to train models.

Who we share it with

We use a small number of service providers to run Strata, each only for its purpose:

• Vercel: hosting and file storage.
• Neon: the database.
• Resend: sending email.
• Anthropic: AI features, when a workspace uses them.
• Google: “Sign in with Google”, when you choose it.

Integrations a workspace admin connects (for example Slack or Jira) receive the data that integration is for. Clients of a company see only what that company shares with them in the client portal. We may disclose information if the law requires it, and we'd pass it on to a successor if Strata were sold or merged, under this policy.

Cookies

We use only the cookies the app needs: your sign-in session and short-lived security cookies during sign-in. The browser also remembers some of your choices (theme, layout) on your own device. No advertising or tracking cookies.

How long we keep it

Workspace content stays while the workspace exists or until it's deleted. Sync records are kept for 3 days and the audit log for 365 days. When a company's workspace is deleted, its data and stored files are deleted with it.

Security

Data is encrypted in transit, integration credentials are encrypted at rest, sign-in tokens are stored only as hashes, and every request is checked against the workspace's access rules.

Your choices and rights

Your workspace's admin can update or remove your account and export the workspace's data. You can also write to support@stratacenter.io to ask for a copy of your personal information, a correction, or its deletion, and we'll respond within 30 days. Depending on where you live you may have further rights, including complaining to your local data protection authority.

Children

Strata is a business tool and isn't meant for children under 16.

Changes

We'll update this page when our practices change and change the date above. For significant changes, we'll tell workspace admins first.

Contact

Write to support@stratacenter.io.