Privacy Policy

Effective: July 13, 2026

Stratum, Inc. ("Stratum," "we," "us") provides business software for outdoor-construction companies. This policy explains what information we process, why we process it, how we share and protect it, and the choices available to account holders. It applies to stratum.build, app.stratum.build, and the Stratum mobile application.

1. Information We Process

• Account information: email address, authentication identifiers, company memberships, roles, and support communications.
• Company content: branding, customers, leads, estimates, jobs, schedules, photos, documents, supplier orders, financial records, and other information users choose to enter or upload.
• Device and service information: IP address, device/browser information, timestamps, security events, and diagnostic information needed to operate and protect the service.
• Billing information: subscription and transaction identifiers. Payment-card details are processed by Stripe and are not stored by Stratum.
• Integration data: information exchanged with services a company enables, such as accounting, mapping, rendering, or supplier tools.

Contractor companies decide what customer and project information they enter into Stratum. Those companies are responsible for having an appropriate basis to collect and use that information.

2. How We Use Information

We process information to provide and secure the service, authenticate users, isolate company tenants, generate estimates and project outputs, store photos and documents, process subscriptions, provide support, prevent abuse, diagnose failures, and comply with law. We do not sell personal information or use company customer lists for advertising.

3. Service Providers and Disclosures

We use service providers under contract to operate Stratum. Depending on enabled features, these may include:

• Supabase for authentication, database, and file storage;
• Vercel for web hosting and request processing;
• Stripe for subscription billing and payment processing;
• Expo/EAS for mobile build and update infrastructure;
• Google Maps Platform when address or Street View features are used; and
• customer-authorized accounting, supplier, rendering, or other integrations.

We may also disclose information when required by law, to protect users or the service, or as part of a merger, financing, acquisition, or sale, subject to appropriate confidentiality protections.

4. Site Analytics

On our public website we use Vercel Web Analytics to understand aggregate usage — which pages are viewed and which buttons are clicked. It is cookieless, does not use persistent identifiers, and does not track visitors across other sites.

5. Data Location and Security

Stratum is operated from the United States. We use tenant-scoped access controls, role-based permissions, encrypted network connections, private file storage, and limited administrative access. No system can guarantee absolute security; report suspected issues promptly to support@stratum.build.

6. Retention, Export, and Deletion

We retain account and company information while the service is active and as needed to provide support, meet contractual obligations, resolve disputes, prevent fraud, and comply with law. Subscription cancellation is different from account deletion: canceled-company data may be retained for up to 90 days for recovery or export.

Every user can initiate deletion from Account & Privacy in the web or mobile app, or use our public account deletion page. A deletion request is for the entire login and associated personal data, not temporary deactivation. We review and complete requests within 7 days and confirm completion by email.

If the requester owns a company, we may first ask them to transfer ownership, resolve active billing, export data, or confirm deletion of the company and its shared records. Once company deletion is confirmed, active records are removed. Residual copies may persist temporarily in restricted backups until overwritten under provider backup schedules. We may retain limited billing, security, or legal records where required by law.

Users may cancel a pending deletion request in the app. To request an export or ask about retention, contact support@stratum.build.

7. Privacy Choices and Rights

Depending on location, individuals may have rights to access, correct, export, delete, or restrict use of personal information. Account holders can update many details in the service and can submit privacy requests to support@stratum.build. We may verify identity before fulfilling a request.

8. Mobile Permissions

The mobile app requests camera or photo-library access only when a user chooses to capture or attach a job-site image. Files selected for a job are uploaded to the company’s private Stratum storage. The app can open the device share sheet for PDFs; Stratum does not know whether the user ultimately sends an item through another app.

9. Children

Stratum is a business service for adults and is not directed to children under 13. We do not knowingly collect children’s personal information.

10. Changes

We may update this policy as the service changes. Material changes will be identified by a new effective date and, where appropriate, an account notice.

11. Contact

Stratum, Inc. · Phoenix, Arizona, USA
Privacy and customer support: support@stratum.build