Privacy policy

Strata (“Strata,” “we,” “us”) provides a platform for building, backtesting, and allocating systematic futures strategies. This policy describes the personal information we collect through strataalgo.com and app.strataalgo.com (together, the “Service”), how we use it, and the choices you have. By using the Service you agree to the practices described here.

Account and authentication data. When you create an account, our authentication provider (Clerk) collects your email address, name, and sign-in credentials or third-party login identifiers. We never see or store your password.

Billing data. Payments are processed by Stripe. Stripe collects your card details directly; we store only your subscription plan, billing status, and a Stripe customer reference — never full card numbers.

Content you create. Strategies, backtests, portfolios, and related configuration you build in the Service.

Usage and device data. Log data such as IP address, browser type, pages visited, and actions taken — used for security, debugging, and product analytics.

Communications. Messages you send us (e.g. support requests). Waitlist signups capture only your email, the page you signed up from, and the timestamp.

• Provide, operate, and maintain the Service
• Authenticate you and keep your account secure
• Process subscription payments and send receipts
• Send transactional email (account notices, billing alerts) via Resend; marketing email only with your consent, with an unsubscribe link in every message
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Understand product usage to improve the Service
• Comply with legal obligations

We don’t sell your personal information, and we don’t share it with advertisers or data brokers. We don’t train AI models on your strategies without your explicit opt-in.

We share personal information only with service providers that help us operate the Service, under contracts limiting their use of it: authentication (Clerk), payments (Stripe), database and storage (Supabase, Neon), hosting (Vercel), transactional email (Resend), and market data (Databento). A current subprocessor list is available on request at the address below.

We may also disclose information if required by law or legal process, to protect the rights, safety, or property of Strata or others, or as part of a merger, acquisition, or sale of assets — in which case this policy continues to apply to your data and we will notify you of any change in ownership.

We use a minimal set of first-party cookies: session cookies for authentication (set by Clerk) and preference cookies (e.g. theme). No third-party advertising cookies, and we do not respond to browser “Do Not Track” signals because we don’t track you across other sites in the first place.

Account data is retained while your account is active. If you delete your account, we delete your personal data and content, and purge backups, within 30 days — except records we’re required to keep longer (e.g. billing and tax records retained per applicable law).

Data is encrypted in transit (TLS) and at rest, with access limited to personnel who need it to operate the Service. No method of transmission or storage is 100% secure; if we learn of a breach affecting your personal information, we will notify you as required by law.

You can access, export, correct, or delete your personal data at any time — from your account settings or by emailing privacy@strataalgo.com. We will verify your request and respond within the timeframe required by applicable law, and we will never discriminate against you for exercising these rights.

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to delete it, to correct it, and to opt out of its sale or sharing — we do not sell or share personal information as those terms are defined there. Residents of other US states with comparable privacy laws have similar rights, exercisable the same way.

The Service is operated from the United States and your data is processed there. If you use the Service from outside the US, you understand your information will be transferred to and stored in the US.

The Service is for trading professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children under 13; if you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy as the Service evolves. We’ll post the new version here with an updated date, and for material changes we’ll notify you by email or in-app notice before they take effect.

Questions or requests: privacy@strataalgo.com.