Privacy Policy
Last updated: April 13, 2026
1. Who we are
Stratensight — Paris, France. Contact: contact@stratensight.com
2. Data we collect
We collect the following data when you use Stratensight:
- Account information (email address) via our authentication provider.
- Patent datasets you upload for analysis (CSV/Excel files).
- Analysis results generated from your uploads.
- Technical logs (errors, performance) via our monitoring provider.
We do not collect advertising data, sell your data, or share it with third parties outside of the service providers listed below.
3. How we use your data
Your data is used exclusively to:
- Provide the patent analysis service you requested.
- Authenticate your identity and maintain your session.
- Diagnose technical errors and improve service reliability.
- Comply with legal obligations.
4. Legal bases for processing
- User account: contract performance.
- Payment: legal obligation.
- Usage analytics: legitimate interest.
- Support: legitimate interest.
5. Retention periods
- Account data: subscription duration + 3 years.
- Technical logs: 90 days.
- Payment data: 10 years (legal obligation).
- Deleted data: purged within 30 days.
You may delete any analysis at any time from the Reports page, exercising your right to erasure under GDPR Article 17. Account deletion requests can be submitted to contact@stratensight.com and will be processed within 30 days.
6. Cookies and authentication
We use strictly necessary session cookies required for the service to function. These cookies are required for login and cannot be disabled without preventing authentication. We do not use advertising cookies, tracking pixels, or analytics cookies.
7. Our Service Providers
We use the following third-party processors to operate Stratensight. Each operates under a Data Processing Agreement (DPA) and, where applicable, Standard Contractual Clauses (SCC) for transfers outside the EU.
| Provider | Purpose | Region | Transfer basis |
|---|---|---|---|
| Anthropic | AI-powered analysis engine | 🇺🇸 USA | SCC (Commercial Terms DPA) |
| Clerk | User authentication & identity | 🇺🇸 USA | SCC |
| Stripe | Payment processing & billing | 🇺🇸 USA | SCC |
| Sentry | Error monitoring (PII-filtered) | 🇺🇸 USA | SCC |
| Cloudflare R2 | Dataset file storage | 🌍 Global | SCC / Adequacy |
| Railway | Backend hosting & database | 🇳🇱 Netherlands (EU) | EU — no transfer |
| Upstash | Redis cache & rate limiting | 🇪🇺 EU | EU — no transfer |
| Resend | Transactional email delivery | TBD | SCC if outside EU |
| Make.com | Internal workflow automation | 🇪🇺 EU | EU — no transfer |
All processors are prohibited from using your data for their own purposes. Full sub-processor list and DPA documentation: privacy@stratensight.com
8. Your rights (GDPR)
As a European user, you have the following rights:
- Right of access — Request a copy of your personal data.
- Right to rectification — Correct inaccurate data.
- Right to erasure — Delete your analyses and account.
- Right to portability — Export your data in a standard format.
- Right to object — Object to processing.
To exercise any right, contact us at contact@stratensight.com. You may also file a complaint with the French data protection authority (CNIL): www.cnil.fr.
9. Changes to this policy
We may update this Privacy Policy as the service evolves. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.