Privacy Policy

Effective date: May 13, 2026

1. About Us

Stratify ("we", "us", "our") is a software AI personality analysis service available at https://stratifydesign.com. We provide personalised personality profiles and personal development tools based on structured data you provide to us.

For privacy enquiries contact: admin@stratifydesign.com

2. Data We Collect

We collect only what is necessary to provide the service:

  • Account data — email address and username, collected at registration.
  • Birth data — full name, date of birth, time of birth, and city of birth. Used solely to calculate your personality profile.
  • Questionnaire answers — your responses to MBTI and socionics questions.
  • Goal data — text descriptions of your "Point A" (current state) and "Point B" (desired outcome), used to personalise your strategic plan.
  • Token transactions — records of token purchases and usage for billing accuracy.
  • Technical data — IP address (for rate limiting and fraud prevention), session cookies for authentication management.

We do not collect payment card details. Card payments are handled by Paddle (Merchant of Record) under their own privacy policy. Cryptocurrency (USDT) transaction data is recorded on the public blockchain and is not stored separately by us.

3. Legal Basis for Processing (GDPR)

  • Contract performance (Art. 6(1)(b) GDPR) — processing birth data and questionnaire answers is necessary to generate your requested analysis and provide the Service.
  • Consent (Art. 6(1)(a) GDPR) — you give explicit consent to data processing and cross-border transfer at registration. Consent may be withdrawn at any time.
  • Legitimate interest (Art. 6(1)(f) GDPR) — technical data (IP, logs) is processed for security and fraud prevention purposes.
  • Legal obligation (Art. 6(1)(c) GDPR) — transaction records are retained to comply with applicable financial regulations.

4. How We Use Your Data

  • To generate and display your personality profile, strategic plan, and AI-Twin features.
  • To maintain your account and token balance.
  • To send transactional emails (registration confirmation, technical notices). No marketing emails without your explicit consent.
  • To prevent abuse, fraud, and unauthorised access.
  • To process payments via Paddle (minimum necessary data transferred).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. AI Processing

Your birth data and questionnaire answers are sent to Anthropic's Claude API to generate your profile. Anthropic processes this data under their own privacy policy. We do not store your data on Anthropic's servers — prompts are sent per request and are not retained beyond your Stratify account.

AI-generated reports are stored in your account and are accessible only to you. Your data is not used to train AI models and is not shared with other users.

Reminder: All AI outputs are intended solely for self-reflection. Stratify does not provide predictions, fortune-telling, or astrological forecasts.

6. Data Storage and Security

Your data is stored in a PostgreSQL database managed by Supabase, hosted in the USA. We implement industry-standard security measures: HTTPS (TLS), server-side session management, row-level security policies (RLS), and rate limiting.

No security measure is 100% guaranteed, but we take all reasonable steps to protect your information.

7. Data Retention

We retain different categories of data for the following periods:

  • Account data (email, username) — until account deletion + 30 days for recovery purposes.
  • Birth data and personality profile — until account deletion.
  • Token transaction records — 3 years from the date of transaction (financial record-keeping requirement).
  • Technical logs and IP addresses — no more than 30 days.
  • Session data — until logout or session expiry.

You may request deletion of your account and all associated data at any time by emailing admin@stratifydesign.com. Transaction records may be retained for mandatory retention periods under applicable law.

8. Cross-Border Data Transfers

Your data is transferred to the following providers required to operate the service (all USA-based unless noted):

  • Supabase — database and authentication (supabase.com/privacy)
  • Anthropic — AI profile generation (anthropic.com/privacy)
  • Resend — transactional email delivery (resend.com/privacy)
  • Railway — application hosting (railway.app/legal/privacy)
  • Paddle — card payment processing (UK / USA, paddle.com/legal/privacy). Paddle receives only data required to process your payment; your personality profile data is not shared with Paddle.

The legal basis for transfers is your explicit consent given at registration and the necessity of contract performance. Each provider operates under their own data processing agreements.

You may withdraw consent at any time, which will result in account deletion as the service cannot operate without these data transfers.

9. Your Rights (GDPR and Equivalents)

Depending on your jurisdiction, you may have the right to:

  • Access (Art. 15 GDPR) — obtain a copy of the personal data we hold about you.
  • Rectification (Art. 16 GDPR) — correct inaccurate data.
  • Erasure (Art. 17 GDPR) — request deletion of your data ("right to be forgotten").
  • Portability (Art. 20 GDPR) — receive your data in a structured, machine-readable format.
  • Objection (Art. 21 GDPR) — object to processing based on legitimate interests.
  • Restriction (Art. 18 GDPR) — request restriction of processing in certain circumstances.
  • Withdrawal of consent — withdraw consent to processing at any time without affecting the lawfulness of prior processing.

To exercise any right, email admin@stratifydesign.com. Response time: 7 business days. If you are unsatisfied with our response, you have the right to lodge a complaint with the data protection authority in your country.

10. Cookies

We use strictly necessary cookies only. See our Cookies Policy for details:

  • Session cookies — to keep you logged in during your visit.
  • Auth cookies — set by Supabase to maintain your authentication state.

We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across the web.

11. Children

Our service is not directed at children under 14. Purchases are only permitted for users aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us at admin@stratifydesign.com and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Registered users will be notified of material changes by email or a prominent notice on the site at least 7 days before they take effect. Continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions, requests, or complaints:
Email: admin@stratifydesign.com
Website: https://stratifydesign.com