Privacy policy
Last updated: 2 October 2026
This policy explains how STRATIVA handles personal data of the people who use it: owners, managers and employees of the companies that are our customers, and visitors of our website.
1. Who we are
STRATIVA is a business management service (reports, projects, warehouse, fleet, sales, finance, strategy). [Legal name, registered address and registration number of the STRATIVA company — to be completed.]
For the data our customers enter about their business and their staff, the customer company decides what is processed and why (it is the controller), and STRATIVA processes it on its behalf (we are the processor). The data processing terms describe this in detail.
2. Which personal data we process
Account data: name, email address, job title, department, role, language.
Work data entered by your company: reports, tasks, jobs and their locations, photos, fuel entries with mileage, sales contacts and deals, documents.
Security data: sign-in times, device type (for example "Chrome on Windows"), approximate location derived from the IP address (city and country), a shortened IP address, and failed sign-in attempts.
Questions asked to Ask STRATIVA (the AI assistant) and its answers, if your company uses it.
3. Why we process it
To provide the service your company signed up for (contract).
To keep accounts and data secure: two-factor sign-in, sign-in history, alerts about new devices (legitimate interest and legal duties on security).
To answer support requests and to meet legal obligations (for example tax and accounting rules).
4. Who receives it
Only the people in your own company, according to their role. Other companies using STRATIVA can never see your data.
Service providers that run parts of STRATIVA for us (sub-processors): Supabase (database, Singapore), Vercel (hosting), Google (Gemini, only for Ask STRATIVA questions when your company switches it on), Faktura.uz (only when your company sends e-invoices), Resend (emails). They may only use the data to provide their service to us.
Authorities, only when the law requires it.
5. Where the data is stored
The database is hosted in Singapore. Some providers may process data in other countries under appropriate safeguards.
[For the lawyer: Uzbekistan's personal data law (article 27¹ of Law No. ZRU-547) requires personal data of citizens of Uzbekistan to be stored on servers located in Uzbekistan. Similar rules may apply in other markets. To be reviewed before publication.]
6. How long we keep it
Account and work data: as long as your company uses STRATIVA. When a company asks for deletion, its data is deleted 30 days after the request.
Sign-in history: 12 months.
Backups: up to [period to be completed] after deletion.
7. Your rights
You can ask to see, correct, export or delete your personal data, and object to or limit its processing, as the law where you live allows. For data entered by your employer, please contact your company first: it decides about that data; we help it answer you.
You can download your company's data (owners) and a person's data from STRATIVA at any time.
8. Security
Every company's data is separated in the database and checked automatically on every change to STRATIVA. Two-factor sign-in, sign-out after inactivity, encrypted connections (HTTPS), encrypted storage of connection secrets, an audit trail of changes and strict browser security rules protect the data.
9. Contact
Questions or requests: [privacy contact email to be completed]. You may also complain to the data protection authority of your country.