Privacy Policy

01 Information You Provide Directly

We collect information that you actively submit to us during the following interactions:

• Account Registration: When creating an account or requesting project quotes, we collect your full name, work email address, company name, phone number, and account credentials.
• Payment & Billing: When purchasing products or subscriptions, financial transactions are securely processed via third-party PCI-DSS compliant gateways (e.g., Stripe, Google Play Billing, Apple In-App Purchases). We do not store full credit card numbers on our servers.
• Support & Consultations: Communications submitted through support tickets, inquiry forms, or project estimation calculators.

02 Information Collected Automatically

When interacting with our websites, mobile apps, or web services, we automatically log technical telemetry:

• Device Telemetry: Device type, hardware model, operating system version, screen resolution, browser type, and system language preferences.
• Log Data: IP address, HTTP headers, request timestamps, pages visited, referring domain, and feature interaction metrics.
• Application Crash Diagnostics: Crash stack traces, memory dumps, and operating state collected via Firebase Crashlytics and Sentry.

03 Information Received from Third Parties

We may receive identity data when you authenticate via third-party identity providers:

• Social Authentication: Signing in via Facebook Login, Google Identity, or Sign in with Apple provides us with basic profile data (name, email address, profile picture) authorized in your consent grant.
• App Distribution Partners: Google Play Store and Apple App Store report purchase validation tokens and subscription lifecycle events.

04 How We Use Controlled Information

We process controller data under explicit legal bases (Contract performance, Legitimate Business Interest, Legal Compliance, or User Consent):

• To build, provision, operate, and maintain your account and customized software applications.
• To send transaction confirmations, security alerts, and system status updates.
• To evaluate product usage patterns, optimize app responsiveness, and troubleshoot bugs.
• To prevent fraudulent access, secure infrastructure, and enforce contractual terms.

05 Ownership & Confidentiality of Service Data

You retain 100% ownership of your Service Data. Strateva Technologies acts strictly as a Data Processor. We do not access, review, share, distribute, or reference your Service Data except as required to provide the contracted Services or as compelled by law.

06 Mobile App Permissions & On-Device Access

If our mobile applications require access to device hardware (such as Camera, Photos, Contacts, or Geolocation), permission is explicitly requested at runtime. You may grant or revoke these permissions at any time via your OS device settings.

07 Service Data Retention & Automated Deletion Timeline

We retain your Service Data as long as your account remains active. Upon account termination or contract expiration:

08 Facebook & Meta Platform Data Policy & Data Deletion

In accordance with Meta Developer Policies, when you use Facebook Login or interact with our Meta integrations:

• We collect only public profile information and email addresses explicitly authorized by you.
• We do not request or store private messaging data or friend lists unless required for specific social app features.

Facebook Data Deletion Request Instructions

If you wish to remove your Facebook-associated data from Strateva Technologies applications, you may choose either of the following methods:

1. Via Facebook Settings: Go to your Facebook Profile → Settings & Privacy → Settings → Apps and Websites → Locate Strateva Technologies App → Click Remove. Facebook will automatically issue a data deletion callback request to our server.
2. Direct Deletion Request: Send an email to privacy@stratevatechnologies.com with the subject "Facebook Data Deletion Request" along with your Facebook User ID or registered email. We will process and confirm deletion within 30 days.

09 Google Play Store Data Safety Compliance

Our Android applications published on the Google Play Store comply fully with the Google Play Developer Program Policies:

• All data collection and third-party SDK transmissions are declared in our Google Play Data Safety Section.
• We provide an in-app and web-based account and data deletion path for all users.
• Sensitive data (passwords, tokens) is encrypted during transmission using TLS 1.3.

10 Apple App Store Guidelines & App Tracking Transparency

Our iOS/iPadOS applications comply with Apple's App Store Review Guidelines:

• App Tracking Transparency (ATT): We do not track user activity across third-party apps without explicit consent via the native iOS ATT prompt.
• Sign in with Apple: We support Apple's private relay system ("Hide My Email") to preserve your personal email privacy.

11 Third-Party Sub-Processors & SDKs

We work with trusted third-party service providers to deliver specialized functionality:

12 Enterprise Security & Encryption Standards

We maintain strict security safeguards to protect customer data against unauthorized access, loss, or alteration:

• TLS 1.3 Transport Security: All web and API traffic is encrypted in transit using modern cryptographic cipher suites.
• AES-256 Storage Encryption: Databases and file storage backups are encrypted at rest using AES-256.
• Access Controls: Role-Based Access Control (RBAC) and mandatory Multi-Factor Authentication (MFA) for administrative personnel.

13 European Data Subject Rights (GDPR)

If you reside in the EEA or UK, you possess specific data rights under the GDPR:

• Right of Access, Rectification, Erasure ("Right to be Forgotten"), Data Portability, and Restriction of Processing.
• To exercise your rights, contact our Data Protection Officer at dpo@stratevatechnologies.com. Responses are issued within 30 days.

14 California Consumer Privacy Act (CCPA / CPRA)

California residents have rights under the CCPA/CPRA to request disclosure of personal information collected, request deletion, and opt-out of information sharing. We do not sell personal information to third parties.

15 Children's Privacy Protection (COPPA)

Our applications are not directed toward children under 13 years of age. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal data, contact us for immediate deletion.

16 Policy Updates & Contact Information

We may update this Privacy Policy periodically. Material modifications will be announced via website notifications or direct email alerts. Continued use of our Services following an update signifies acceptance of the modified policy.