Skip to main content

Privacy Policy

Last updated: 23 February 2026

1) Controller

Stratify is operated by:

  • Filip Rozana, Dürergasse 18/3, 1060 Vienna, Austria
  • Michael-Martin Nemeth, Heidenheimer Straße 6/5, 3100 St. Pölten, Austria

Privacy contact: office@stratify.st

2) Scope

This policy applies to:

  • stratify.st (marketing & waitlist)
  • app.stratify.st (editor)
  • api.stratify.st (backend/API)

3) Data processing

We process data for the purposes below.

A) Waitlist & email updates

If you subscribe to our waitlist / email updates, we process:

  • Data: email address; subscription status; timestamp; and (if enabled) newsletter interaction data (see below).
  • Purpose: send launch announcements and product updates you requested; manage subscriptions/unsubscribes; measure the performance of our emails.
  • Legal basis: consent (Art. 6(1)(a) GDPR).

Email tracking (open & click tracking): We use open-tracking and link-tracking for newsletters sent via our email service provider. These emails may include tracking pixels/web beacons and tracked links, which can record whether and when you opened an email and which links you clicked. You can withdraw consent at any time by using the unsubscribe link in each email. You may also reduce open-tracking by disabling automatic image loading in your email client.

B) Feedback

If you submit feedback via the application, we process:

  • Data: feature selections; satisfaction rating and reason; usability ratings; improvement suggestions; timestamps.
  • Purpose: product improvement and quality assurance.
  • Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

C) Server logs & security

To operate and secure the service, our infrastructure processes technical request data:

  • Data (typical categories): IP address; user agent; timestamp; requested URL/path; referrer (if sent by your browser); email addresses for subscription-related operations.
  • Purpose: service operation, security, abuse prevention, troubleshooting.
  • Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

D) Web analytics

We use Umami, a privacy-focused analytics tool, to understand how visitors use our websites. This data is not personally identifiable.

  • Data: page views; referrer URL; browser type; operating system; device type; screen size; country/region (derived from IP address, which is not stored); language; timestamps.
  • Purpose: website improvement and usage statistics.
  • Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Umami does not use cookies and does not track users across websites. Visitors cannot be individually identified.

E) Advertising measurement (Meta Conversions API)

If you consent to advertising measurement, we process the following data via the Meta Conversions API:

  • Data: page interaction events (page views, scroll depth, time on page); Meta click identifier (fbc); browser identifier cookie (fbp); browser user agent; IP address.
  • Purpose: measure the effectiveness of advertising campaigns on Meta platforms; optimize ad delivery.
  • Legal basis: consent (Art. 6(1)(a) GDPR).
  • Cookies: _fbc (stores Meta click ID, 90 days); _fbp (browser identifier, 90 days). Set only after consent.
  • Recipient: Meta Platforms Ireland Ltd.

4) Local storage (trading strategies)

The Stratify editor (app.stratify.st) stores your trading strategies and certain preferences locally in your browser (Local Storage).

  • This data is not transferred to our servers.
  • There is no server-side backup.
  • Clearing your browser storage will delete your saved strategies.

5) Recipients / processors

We use processors to provide the service, including:

  • Render.com (hosting & backend)
  • Zoho Campaigns (zoho.eu) (waitlist subscription management and email sending; provider for zoho.eu accounts: Zoho Corporation B.V., Utrecht, Netherlands)
  • Umami Cloud (umami.is) (privacy-focused web analytics; provider: Umami Software Inc.)
  • Meta Platforms Ireland Ltd (advertising measurement)

6) International transfers & safeguards

Depending on provider, configuration, and your location, personal data (especially technical log data) may be processed outside the EEA.

For Zoho Campaigns via zoho.eu, service data is generally hosted in Zoho's EU data centers; however, access by Zoho group entities or support operations outside the EEA may occur.

Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses (SCCs) and/or other lawful transfer mechanisms offered by our processors (and, where applicable, adequacy frameworks).

Meta Platforms Ireland Ltd may transfer data to Meta Platforms, Inc. in the United States. Meta is certified under the EU-US Data Privacy Framework, which serves as the basis for these transfers.

7) Retention

We retain data only as long as needed for the purposes described:

  • Server logs: up to 90 days.
  • Waitlist / email updates: kept until you unsubscribe/withdraw consent. After you unsubscribe, we delete your subscription data within a reasonable period; we may retain a minimal suppression record to ensure we respect your opt-out.
  • Feedback: up to 24 months, unless deleted earlier.
  • Web analytics: up to 6 months.
  • Advertising measurement cookies: 90 days; event data: retained by Meta per their data policy.

8) Your rights (EEA)

If you are in the EEA (or otherwise covered by the GDPR), you have rights such as:

  • access, rectification, deletion
  • restriction of processing
  • objection (where we rely on legitimate interests)
  • data portability (where applicable)
  • withdraw consent at any time (without affecting earlier processing)

To exercise your rights, contact office@stratify.st.

9) Complaints (EEA)

If you are in the EEA, you can lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).

10) Provision of data

Providing personal data is voluntary. However:

  • If you do not provide your email address, you cannot subscribe to the waitlist / email updates.
  • Feedback is optional; if you do not provide it, we cannot receive and evaluate that feedback.
  • Certain technical data (such as IP address and user agent) is processed automatically when you access the Service and is necessary for service delivery and security.

11) Automated decision-making

We do not use automated decision-making (including profiling) that produces legal or similarly significant effects.

12) Security

We implement appropriate technical and organizational measures to protect personal data. No method of transmission or storage is completely secure.

13) Changes

We may update this Privacy Policy by publishing the updated version on our website.

14) Contact

Privacy contact: office@stratify.st