Privacy policy

Data controller

name of the SAS, which operates Strate, is the controller of your data. Contact for any question about your data: contact email address.

Data we collect

• Account: name, email address and password, stored in encrypted form by our authentication provider.
• Subscription and billing: country, currency, payment history and invoices. Card details are processed by Stripe and are not passed on to us.
• Licence and devices: name and identifier of the active device, operating system, sign-in dates.
• Creator Programme: application details (name, email, links, audience) and the creator code linked to subscriptions.
• Support: the content of your exchanges with us.

The site and our servers receive neither your Rithmic or Apex credentials nor your trading data.

Purposes and legal bases

• Providing the service and managing your account, licence and subscription: performance of the contract.
• Invoicing and meeting our accounting and tax obligations: legal obligation.
• Calculating and paying Creator Programme commissions: performance of the contract with the creator.
• Securing the service and preventing fraud, including account sharing: legitimate interest.
• Informing you of significant changes to the service: performance of the contract.

Retention periods

• Account data: during the subscription, then 3 years after the last contact.
• Invoices and accounting records: 10 years, as required by law.
• Device and sign-in data: 12 months.
• Creator applications not accepted: 12 months.

Recipients and providers

• Supabase: authentication and database, hosted in the European Union.
• Stripe: payment and billing.
• Netlify: website hosting.
• Email delivery: provider to be specified

These providers act on our instructions. We do not sell your data.

Transfers outside the European Union

Some providers are based in the United States. These transfers are covered by the EU–U.S. Data Privacy Framework or by the European Commission’s standard contractual clauses.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, and the right to set instructions about your data after your death. To exercise them: contact email address. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

California residents: you have similar rights of access, correction and deletion. We do not sell or share your personal information for advertising purposes.

Cookies and local storage

• Essential cookies: needed for the site to work, such as keeping you signed in and remembering your cookie choices. They do not require consent.
• Audience measurement: visit statistics to improve the site, set only with your consent.
• Marketing: measuring the performance of our advertising campaigns, set only with your consent.

Tools used: list of audience measurement and marketing tools.

You can accept, reject or change your choices at any time with the “Manage cookies” link at the bottom of every page. Your choice is kept for 6 months, after which you are asked again.

Security

We apply appropriate measures: encrypted connections (HTTPS), encrypted passwords, restricted access to data and optional two-step verification.

Changes to this policy

This policy may change. The date of the latest update appears at the top of the page.