Privacy Policy

Last updated: 12 August 2026

This policy explains how Stravax Group LLC handles personal data when you visit stravax.ai, join the Stravax AI early-access list, create an account, or use the Stravax AI marketing workspace.

1. Who controls your data

Stravax Group LLC, licence 2537844.01, Shams Business Center, Sharjah Media City Free Zone, Al Messaned, Sharjah, UAE, is the controller of account, billing, website and direct-marketing data described here. When a business customer uploads personal data for us to process on its instructions, that customer is normally the controller and Stravax acts as its processor.

2. Information we collect

• Early access and inquiries: your email address and anything you send us.
• Account data: name, work email, phone number, company, login and security information, role, consent record and organisation membership.
• Workspace content: website URLs, public pages you ask us to audit, brand documents, prompts, instructions, uploads, generated copy and media, approvals and campaign drafts.
• Billing and usage: plan, currency and interval, credits, wallet balance, transaction and invoice records, and metered activity. Payment-card details are collected by our payment provider and are not stored by Stravax.
• Technical data: IP address, device and browser information, approximate country, page and product activity, referring source, diagnostic logs and security events.

The retired free-audit and discovery-call forms remain available at legacy URLs. If you use them, we also collect the business, website, contact and qualification information shown there.

3. How we use information

• Provide, secure, support and bill for Stravax AI.
• Create requested audits, brand context, copy and media.
• Measure allowances, debit authorised wallet usage and maintain billing records.
• Detect abuse, investigate incidents and protect customers and the platform.
• Respond to inquiries and send service, security and transaction messages.
• Notify early-access subscribers when trials open. Early-access email is not added to the legacy agency nurture sequence.
• Understand product usage, improve reliability and meet legal obligations.

We do not sell personal data. We do not use your workspace content to train public AI models unless we first tell you and obtain any consent required by law.

4. Providers and international transfers

We use providers for hosting and security, payments, transactional email, analytics, customer communication and AI or media generation. These currently include Cloudflare, Stripe, Google, Meta, PostHog, Brevo, Resend, Cal.com, OpenRouter and the model or media provider selected for a requested generation. A provider receives only the information needed for its role.

Some providers process data outside the UAE. Where personal data is transferred internationally, we use contractual, technical and organisational measures appropriate to the destination, provider and data. Connected advertising platforms you authorise process data under their own terms and privacy notices.

5. Retention

• Early-access records: up to 12 months, or until you ask us to delete them.
• Legacy free-audit leads: up to 90 days.
• Account and workspace data: while active and for a reasonable deletion or export period after closure, unless longer retention is needed for security, dispute or legal purposes.
• Billing, tax and transaction records: for the period required by applicable law.
• Security and diagnostic logs: only as long as reasonably needed for security and reliability.

6. Your choices and rights

Subject to applicable law, you may ask for information about our processing, access or a portable copy, correction, deletion, restriction, or object to processing. You may stop direct marketing at any time. We may need to verify your identity and may retain information where the law permits or requires it.

Send requests to [email protected]. You may also complain to the competent UAE data-protection authority or the authority that applies where you live.

7. Security

We use access controls, tenant separation, encryption for protected credentials, audit logs and other safeguards designed for the service. No online system is completely secure, so keep credentials confidential and tell us promptly if you suspect unauthorised access.

8. Children

Stravax AI is a business service and is not directed to anyone under 18.

9. Changes and contact

We may update this policy as the product or law changes. Material changes will be notified through the site, product or account email before they take effect where required.

Privacy questions and requests: [email protected]
Stravax Group LLC, Shams Business Center, Sharjah Media City Free Zone, Al Messaned, Sharjah, UAE.