Privacy Policy

1. What We Collect

We collect only the data necessary to deliver the strategIA platform services:

• Organization details — name, sector, and size provided when creating or joining an organization on the platform.
• Contact information — name, email address, and role used for authentication and account management.
• Strategic initiative data — initiative context, assessment scores, AI analysis results, and adversarial analysis responses generated during your sessions.
• Usage data — pages visited and features used, collected in aggregate for product improvement.

2. How We Use Your Data

• To provide strategic assessment and analysis services.
• To generate AI-powered insights, sUI scores, and reports tied to your initiatives.
• To improve the platform based on anonymized, aggregated usage patterns.
• We never sell your data to third parties. Your strategic content is never used to train AI models without explicit consent.

3. AI Processing

The strategIA platform uses third-party AI models to generate strategic analysis, adversarial perspectives, and synthesis reports.

• Your initiative data is passed to AI models only when you actively trigger an assessment or adversarial stress-test session.
• AI outputs are stored alongside your assessment data under the same access controls and retention policies.
• AI processing by third-party providers is governed by their respective data processing agreements. We use providers who offer data processing agreements compatible with LGPD and GDPR.

4. Data Storage & Security

• Data is stored with encryption at rest and regular automated backups.
• All connections between your browser and our servers use TLS/SSL encryption.
• Access is controlled via authentication tokens and role-based permissions — only members of your organization can access your organization's data.
• We retain your data for as long as your account is active. Upon deletion, data is permanently removed within 30 days.

5. Your Rights

Depending on your jurisdiction, you have the following rights with respect to your personal data:

• Access — view all data we hold about you at any time through the platform.
• Deletion — request permanent deletion of your account and associated data by contacting us.
• Portability — export your assessment data and reports in machine-readable formats.
• Correction — update inaccurate personal data directly in your account settings.

These rights are applicable under LGPD (Lei Geral de Proteção de Dados, Brazil) and GDPR (General Data Protection Regulation, EU) where relevant.

6. Cookies

• We use essential cookies only — specifically, session tokens required for authentication. These cannot be disabled without breaking the application.
• We do not use third-party tracking cookies.
• We do not use advertising cookies of any kind.

7. Contact

For privacy-related requests, questions, or concerns, contact us.