Privacy Policy

Last updated: date to be confirmed · Operated by Stradigi (full legal company name to be confirmed)

This version is a draft pending counsel review.

This policy explains what Stradigi ("the platform") collects, why, and how it's handled, for the business owners and marketing operators who use it and for the clients whose accounts it connects to on their behalf.

What we collect

• Business profile data you or your team enter for a client: business name, address, phone, service area, owner bio, website, and similar public-facing business details used to generate content and citations.
• Connected-account credentials: when you connect a social platform (Facebook, Instagram, LinkedIn, X, TikTok, YouTube) or GoHighLevel, we store the access token issued by that platform — never your username or password. Tokens are used only to publish content or trigger workflows you initiate.
• Content you generate: articles, social posts, and video renders produced through the platform, stored so you can review, edit, and republish them.
• Team accounts: for each person on the team who signs in, their name, email address, role, which clients they can see, and the details needed to sign them in. Passwords are saved hashed (scrambled one way, so they cannot be read back); an account saved before that was added is converted the next time that person signs in.
• An activity record: who did what in the platform and when (for example who approved and sent a month), with the network (IP) address the request came from.
• Messages from a client's blog contact form, only for a client that has this form switched on (it is off unless an administrator turns it on): the visitor's name, email address or phone number, and message, with a scrambled code made from their IP address to stop junk messages. The address itself is not stored with the message.
• Usage signals: which features get used, so the platform's own suggestions (keyword ideas, style guidance) can improve over time. This is operational telemetry about platform usage, not third-party tracking.

What we don't do

• We do not sell business or client data to third parties.
• We do not ask for or store a client's platform username or password — connections use each platform's own OAuth authorization, or (for GoHighLevel) a scoped integration token you generate and control.
• We do not post, publish, or trigger anything without an explicit action from an authorized operator.

AI content generation

Generated articles, social posts, and other written content are produced by an AI model. The business profile fields you enter (name, industry, city, service area, owner bio, and similar) and the keyword are sent to the AI service as part of generating that content. We do not send client-identifying secrets (passwords, payment details, or connected-account tokens) to any AI service. AI-generated content is a draft — an authorized operator reviews it before it's published anywhere.

The AI services the platform can use, depending on how it is set up:

• Anthropic (Claude), the normal service for written content, either through Anthropic's API or through Anthropic's Claude Code tool. If web research is switched on for a client, Claude also runs a few web searches about the keyword.
• A local model run with Ollama on the computer that runs the platform. The data stays on that computer.
• An OpenAI-compatible model service chosen by the platform's administrator. It can run on the same computer or be a hosted provider; if hosted, the data goes to that provider.
• OpenAI and Stability AI for images, when an administrator adds their keys. The image description sent includes the client's type of business and services.
• A local image model (Ollama or mflux) on the computer that runs it. The data stays on that computer.
• Bland AI or Vapi for AI phone calls, only if an administrator sets up calling. The caller's phone number and the call itself are handled by that provider.

Each provider's handling of this data is governed by its own privacy policy and terms.

Payments

Paid plans are handled by Stripe. Card and bank details are entered on Stripe's page and held by Stripe; we never see or store them. We keep the Stripe ids of the customer, subscription and invoices, the plan, the billing period, and each invoice's amount, status and Stripe link, so the account's admin can see its billing history.

Services we use to run the platform

• Replit hosts the platform.
• Neon runs the platform's database, through Replit.
• Anthropic writes the draft content (see AI content generation above).
• Stripe handles payments.
• GoHighLevel receives the client's social posts for scheduling, when the client's GoHighLevel account is connected.
• The client's own WordPress website, on whichever host the client uses, receives the client's articles.
• Google Drive holds copies of each client's monthly content (the month backup). The Stradigi team copies them there from its own computer; the platform itself does not connect to Google Drive.

Only when an administrator sets them up:

• an AI image service (OpenAI or Stability AI) for images, as above;
• an email provider, the email server chosen in Settings, for alerts and summaries the platform sends;
• Twilio for text messages;
• Google Search Console and Google Analytics, read-only, to show how a client's website is doing;
• an off-site storage provider for copies of the database;
• Sentry for error reports about the platform itself;
• SerpApi for search ranking checks: the keyword and the client's city and state are sent;
• Netlify or Vercel to publish a website the platform generates for a client.

How connected-account tokens are used

Tokens obtained through Facebook/Instagram, LinkedIn, X, TikTok, YouTube, and GoHighLevel OAuth are used exclusively to perform the action you requested — publishing a scheduled post, pushing a CRM workflow — on the connected account. A connected account can be disconnected at any time, which deletes the stored token immediately; the Data Deletion page says how.

Data deletion

To request deletion of your business's data, or to have a connected account's stored token removed, see our Data Deletion page.

Retention

A client's records are not deleted automatically: they are kept until they are deleted on request (see Data Deletion above). Deleting a client first hides it, and an administrator can undo that; a permanent deletion removes the client's records from the platform and cannot be undone.

Copies outside the live records last longer: when the database tools are available on the server, the platform makes a full copy of its database each time it starts and keeps the newest 10, and month backups in Google Drive are kept until the Stradigi team removes them. Anything already published on a client's website or social accounts stays there until it is removed on that site.

Contact

Questions about this policy: ask your Stradigi contact. A contact email address will be listed here.