Privacy Policy

1. Data Controller

The data controller is:

SecuFin Moravia s.r.o.
IČO: 05893321
E-mail: info@strateg-ai.com

2. What data we process

As part of providing the Strateg-AI service, we process:

Identification data

• Email address
• Name (optional)

Service usage data

• Plans created and their content
• Document version history
• Conversations with the AI assistant
• Uploaded images and visualizations

Technical data

• IP address
• Browser type and device
• Access time

3. Purpose of processing

We process personal data for the purpose of:

• Providing and managing user accounts
• Delivering service features including AI analyses
• Communicating with users
• Improving the service and developing new features
• Fulfilling legal obligations

4. Legal basis for processing

We process data on the basis of:

• Contract performance – providing the service
• Legitimate interest – service improvement, security
• Consent – marketing communications (if you provide it)
• Legal obligation – accounting and tax purposes

5. Data sharing

We may share your data with:

• Service providers – hosting (Convex), AI services (OpenAI), payment gateways
• Plan collaborators – if you invite someone to collaborate, they will see the shared plan's content

We do not sell your data to third parties or share it for advertising purposes.

6. Retention period

We retain data for the duration of your account. After account deletion, data is removed within 30 days, except data required by law (accounting records – 10 years).

7. Your rights

You have the right to:

• Access – obtain information about your processed data
• Rectification – update inaccurate data
• Erasure – request deletion of your data
• Restriction of processing – temporarily limit processing
• Portability – receive your data in a machine-readable format
• Object – to processing based on legitimate interest

To exercise your rights, contact us at info@strateg-ai.com.

8. Cookies

We use only technically necessary cookies to ensure service functionality (login, preferences). We do not use cookies for tracking or advertising.

9. Security

To protect your data we use encrypted transmission (HTTPS), secure password storage, and regular security audits.

10. Processing the content of your plans

We treat the content of your strategic plans as strictly confidential. We commit to:

• Not accessing plan content without your explicit consent
• Not using content for AI training or any other purpose
• Not sharing content with third parties (except technical providers necessary for operation)
• Deleting all content within 30 days of account cancellation

11. Processing by AI services

For AI features (analyses, recaps, visualizations) we use the OpenAI API. Important information about AI processing:

• Data sent to AI is not used to train models
• OpenAI API has a zero data retention policy — your inputs are not stored
• AI never automatically applies changes — you approve everything

More information can be found in the OpenAI API data usage policies and on our Security & Data Protection.

12. Policy updates

We may update these policies. We will notify you of significant changes by email.

13. Contact and complaints

For questions about personal data protection, contact us at info@strateg-ai.com.

You have the right to lodge a complaint with the supervisory authority – the Czech Office for Personal Data Protection (www.uoou.cz).