Privacy Policy

This policy applies to Striq’s websites, product, support channels, and other services that link to it. It does not govern a customer’s own privacy practices or third-party services that a customer chooses to connect.

For account, website, billing, security, and support information, Striq determines why and how the information is handled. For creator files, campaign records, contracts, review notes, and other workspace content submitted by an organization, Striq generally processes the information on that organization’s instructions. The organization remains responsible for its notices, permissions, and lawful basis.

Where a law requires a legal basis, Striq relies on performance of a contract, steps requested before entering a contract, legitimate interests such as security and product administration, compliance with legal obligations, and consent where consent is the appropriate basis.

An organization that uploads creator or campaign information is responsible for identifying its own legal basis and providing any notice or choice required for that processing.

Striq may use deterministic rules and configured analysis providers to identify possible matches, omissions, or policy conflicts. These outputs support a reviewer; they are not legal advice, do not guarantee compliance, and do not replace manual final approval.

Private creator drafts, campaign files, and workspace content are not used to train general-purpose models without the organization’s explicit permission. If an optional provider is enabled in the future, its role, data handling, and configuration will be disclosed before use.

Striq does not sell personal information for money and does not share personal information for cross-context behavioral advertising. Striq does not use private workspace content to advertise third-party products.

If these practices change, this policy and any legally required choice mechanism will be updated before the new practice begins.

Striq uses necessary technologies to keep people signed in, maintain sessions, remember settings, balance traffic, prevent abuse, and understand basic service performance. Optional analytics or communication technologies, if introduced, will be handled according to applicable consent and notice requirements.

Browser controls can limit some technologies, but blocking necessary storage may prevent authentication or other product functions from working.

Striq uses measures designed for the nature of the service, including encrypted transport, private storage patterns, signed access URLs, role-based access, workspace authorization, logging, and restricted service credentials. Security controls evolve with the product and risk.

No online service can guarantee absolute security. Customers must protect credentials, review member access, configure sharing and retention, and notify security@striq.ai promptly of suspected unauthorized access.

If an incident affects personal information, Striq will investigate, take reasonable containment and remediation steps, and notify affected customers or authorities when applicable law or contract requires it.

Striq and its providers may process information in countries other than the country where it was collected. Where law requires a transfer mechanism, Striq uses an available safeguard such as an adequacy decision, standard contractual clauses, or another recognized mechanism.

Enterprise customers may request available location, subprocessor, and transfer information through the data-processing terms or by contacting privacy@striq.ai.

If Striq handles information on behalf of a customer, the request should usually be directed to that customer. Striq will support verified customer instructions as required by contract and law.

To submit a request, email privacy@striq.ai. We may verify identity, authority, workspace membership, and the scope of the request before responding. An authorized agent may be required to provide proof of authority.

The categories described in this policy may include identifiers, customer-record information, commercial information, internet or network activity, approximate location derived from IP address, professional information, audio or visual content, and inferences generated for the configured review workflow.

Striq collects and discloses these categories for the business purposes described above. Applicable state law may provide rights to know, correct, delete, obtain a copy, opt out of sale or sharing, limit certain sensitive-information uses, and appeal a denied request. A particular right applies only when the relevant law covers the person, information, and business.

Striq is a business service and is not directed to children. Workspace customers must not submit children’s personal information unless they have established the authority, notices, consents, and safeguards required for that campaign and use.

We may update this policy as the service, providers, or law changes. The effective date will be revised, and material changes will receive additional notice where appropriate.

Questions, requests, and complaints may be sent to privacy@striq.ai. Security reports should be sent to security@striq.ai. Contractual data-processing questions may also be addressed through the organization’s workspace owner.