Privacy Policy

1. Scope and our role

This Policy explains how Bakaro Art LLC handles information for Stratafold. We are the controller of account, billing, security, support and website information. For content, subscriber lists, form submissions and visitor analytics a customer places in Stratafold, the customer decides why and how it is used; we act as its service provider or processor.

2. Notice at collection

We collect the following categories for the stated purposes and retain them using the criteria in section 6:

• Identifiers and account information, such as name, work email, organization, login records and optional phone number, to create and secure accounts and communicate with you.
• Commercial and billing information, such as plan, transaction, tax and billing-contact details, to provide subscriptions, prevent fraud and keep financial records. Stripe processes full payment-card details; we do not receive them.
• Customer content, including schemas, entries, media, prompts, form submissions and mailing-list information, to provide the features the customer requests.
• Internet, device and usage information, such as IP address, browser, security events, API activity and feature use, to operate, diagnose, measure and protect the service.
• Support communications to answer requests and improve the service.

We do not sell personal information or share it for cross-context behavioral advertising.

3. How we use information

We use information to provide and personalize Stratafold; authenticate users; process billing; operate delivery APIs, forms, mail, analytics and AI; maintain reliability and backups; detect abuse and security incidents; provide support; comply with law; and improve the service. Where a legal basis is required, we rely on performing our contract, legitimate interests in operating and protecting the service, legal obligations, or consent where applicable.

4. AI processing

When a user requests an AI action, Stratafold sends the instructions, relevant workspace brief, schema and content needed for that action to the selected AI provider. Managed AI uses our provider account; BYOK uses the customer’s account. Do not submit sensitive personal data to AI unless your organization has authorized it and the selected provider’s terms permit it. We do not use customer content to train our own general-purpose AI models.

5. When information is disclosed

We disclose information only as needed to service providers that host infrastructure, databases, object storage, communications, security, support, payments and selected AI processing; to professional advisers; in a business transaction; when law requires it; or with your direction. Stripe receives billing information. The AI provider chosen by the customer receives data needed for requested AI work. Service providers are limited by contract or their applicable service terms.

6. Retention

Account and customer content are generally retained while the account is open and for a limited period afterward to support recovery, resolve disputes and meet legal obligations. Customers control content deletion and form-retention settings. Security logs are retained only as long as useful for security and operations. Billing and tax records are kept for legally required periods. Backups expire on their rotation schedule. We may retain de-identified information that cannot reasonably identify a person.

7. Cookies and analytics

The signed-in app uses secure session cookies that are necessary to authenticate users. Stratafold’s first-party customer-site analytics does not set cookies and does not store raw visitor IP addresses; it uses a one-way identifier whose salt rotates daily. We do not use advertising trackers on the Stratafold marketing site.

8. Security and international transfers

We use access controls, encryption in transit, encryption of stored provider credentials, tenant isolation, logging and other safeguards. No system is perfectly secure. Information may be processed where we or our providers operate; where required, we use recognized transfer mechanisms and contractual protections.

9. Your choices and rights

Depending on where you live, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, or appeal a decision. You may also have the right not to receive discriminatory treatment for exercising privacy rights. Email stratafold@bakaroart.com. We may verify your identity and may retain information where law permits or requires it. If your information was submitted to one of our customers, contact that customer first; we assist it with verified requests.

10. Children

Stratafold is a business service and is not directed to children under 18. We do not knowingly create accounts for them.

11. Changes and contact

We will post updates here and provide additional notice for material changes. Privacy questions and requests may be sent to stratafold@bakaroart.com.