StratupsSign in
v1.0

Stratups Privacy Policy

1. Who we are

Stratups is a trading sub-division of Focus15 Limited ("Focus15", "we", "our" or "us"), which is the data controller for personal data processed through the Stratups platform (the "Platform").

This policy explains what personal data we collect, why, how it's used, who it's shared with, and the rights you have over it. It should be read alongside our Terms and Conditions.

2. What we collect

Account information — the email address and password you register with, held via our authentication provider, Supabase.

Company Content — everything you enter into the Platform while building your strategy or plan: your answers across the Financial Plan, Operations Strategy, People Strategy and Commercial Strategy modules, including any figures, drivers, KPIs and free-text responses you provide.

Payment information — handled entirely by Stripe. We never see or store your card details ourselves; we only receive confirmation that a payment succeeded, failed, or a subscription changed status.

Support and feedback — anything you send us directly, for example through an in-app feedback form or by emailing us.

With your consent, we use Google Analytics to understand overall site traffic — which pages are visited, and roughly how people find the site. It's off by default; see §3 Cookies for how that consent works. We don't use any advertising tracking or ad pixels.

3. Cookies

The only cookies set automatically by the Platform are strictly necessary ones used to keep you signed in and to protect your account (managed by Supabase's authentication system).

On your first visit, you'll also be asked to accept or decline Google Analytics cookies. If you decline, no analytics cookies are set and no data is sent to Google. Google's own policy on what it collects and how it's used is at policies.google.com/privacy.

4. How your data is used

  • to create and maintain your account, and let you sign in securely;
  • to save your Company Content as you enter it, and show it back to you across sessions;
  • to generate AI-assisted drafts, summaries and reviews from the answers you’ve provided;
  • to process payments and manage your subscription;
  • to respond to support requests or feedback you send us; and
  • to maintain the security, reliability and performance of the Platform.

5. AI processing

Certain features use Anthropic's AI models to help draft summaries, reviews and suggestions from the Company Content you've entered. This processing is limited to generating the specific output you've asked for.

We do not use your Company Content to train general-purpose AI models, and we do not share it with Anthropic or any other provider for any purpose beyond generating your own requested output, except where you've given consent or a separate contractual arrangement authorises it.

6. Who we share data with

We don't sell personal data. We share it only with the third-party providers who help us actually run the Platform, each acting under their own data protection obligations to us:

  • Supabase — authentication and database hosting for your account and Company Content;
  • Stripe — payment processing and subscription management;
  • Anthropic — AI-assisted drafting, limited to the outputs you request (see §5);
  • Google Analytics — site traffic analysis, only if you’ve accepted analytics cookies (see §3); and
  • our hosting provider, to serve the Platform itself.

We may also disclose personal data where required by law, to protect our legal rights, or to investigate fraud or abuse.

7. International transfers

Some of the providers listed in §6 may process data outside the UK or European Economic Area. Where this happens, we rely on appropriate safeguards recognised under data protection law, such as Standard Contractual Clauses, to ensure your data remains protected.

8. How long we keep it

We keep your account and Company Content for as long as your account is active. If you cancel your subscription, your data remains accessible until the end of the billing period you've already paid for, consistent with our Terms.

Following account closure, Company Content may remain in storage for a limited period before deletion, in line with our retention practices, unless we're required to keep it for longer (for example, financial records for tax purposes).

9. Your rights

Under UK data protection law, you have the right to:

  • ask what personal data we hold about you, and get a copy of it;
  • ask us to correct inaccurate data;
  • ask us to delete your data, subject to any legal reason we may need to keep it;
  • object to or restrict certain processing; and
  • ask for your data in a portable format.

To exercise any of these, contact us using the details in §11. If you're unhappy with how we've handled your data, you also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ico.org.uk).

10. Security

We rely on our providers' security practices (Supabase, Stripe, our hosting provider) alongside our own access controls to protect your data. No system is completely immune to risk, but we take reasonable, industry-standard steps to keep your information secure.

11. Contact

Questions about this policy, or requests relating to your data, can be directed to Focus15 Limited using the contact details provided on the Platform.

12. Changes to this policy

We may update this policy from time to time to reflect changes to the Platform or legal requirements. Material changes will be notified where appropriate. The version number at the top of this page reflects the current version.