Privacy Policy
Last updated: 1 November 2026
AT AI Solutions Private Limited, trading as Strategi ("we"), decides how the personal data described here is used. Registered address: 20 Shanthappa Lane, Silver Jubilee Park Road, Nagartapete, Bengaluru, Karnataka 560002, India. Contact: hello@strategi.is.
What we collect
| Data | When | Why |
|---|---|---|
| Name, work email, phone, company, website, your message, and the comparison page you came from, if any | You contact us or try Strategi free | To reply, run the check and see which pages bring enquiries |
| Billing name, email, phone, billing address, company and tax details | You buy a plan | To take payment, invoice you and keep tax records |
| Access and logins you give us, your business facts, data from your analytics and search tools | You are a client | To deliver and report on the service |
| Your Google account name, email address and profile picture (Sign in with Google), and read-only Search Console and Google Analytics data (Connect with Google) | You use the client portal at portal.strategi.is | To sign you in and to deliver and report on the service. See Google user data below |
| Pages viewed, device, browser, approximate location (cookies and similar tools: Google Analytics, Microsoft Clarity) | You visit strategi.is and press Accept | To understand and improve the site |
| Pages viewed and actions such as a booking, matched to your accounts on advertising platforms (Google Ads, LinkedIn, Meta, X, Reddit) | You visit strategi.is and press Accept | To measure our ads and show them to people who have visited |
| The company you work for and, for some visitors in the United States, your name, job title, work email and professional profile (website visitor identification by RB2B) | You visit strategi.is and press Accept | To recognise businesses interested in Strategi and contact them about our services |
| The company your network belongs to, worked out from your IP address, and the pages viewed in that visit (company identification by Snitcher, without cookies) | You visit strategi.is | To see which businesses are interested in Strategi (our legitimate interest) |
| The same, linked across your visits by a cookie (Snitcher) | You visit strategi.is and press Accept | To recognise a business when it comes back |
| Pages viewed, time on each page, how far you scroll, your network's IP address and approximate location (our own visit log, run on Cloudflare) | You visit strategi.is | To see which businesses are interested in Strategi and how our pages are used (our legitimate interest) |
Card details are entered on Razorpay's checkout and handled by Razorpay. We never see or store your full card number.
Legal bases
We use your data to perform our contract with you, to meet legal obligations (such as tax records), with your consent (for example, marketing emails and non-essential cookies), and for our legitimate interest in running and improving our business. Where we rely on consent, you can withdraw it at any time through Cookie settings at the foot of any page or by emailing hello@strategi.is; this does not affect what we did before.
Who we share it with
We share personal data only with providers who help us run the business, under contracts that protect it:
- Razorpay (payments)
- Our website hosting and email providers
- Google (Analytics, Search Console) and Microsoft (Clarity, Bing Webmaster Tools)
- Advertising platforms: Google Ads, LinkedIn, Meta, X and Reddit (only after you press Accept)
- RB2B and its identity partner LiveIntent (website visitor identification, only after you press Accept)
- Snitcher (company identification; without cookies unless you press Accept)
- Cloudflare and Turso (our own visit log and the database that stores it)
- Tools we use to deliver your plan, such as AI answer tracking
Data we receive from Google APIs is shared only as set out in Google user data below.
We do not sell personal data. We disclose data if the law requires it.
Google user data
This section covers the Strategi client portal at portal.strategi.is. There you can sign in with Google, and you can connect your Google Search Console and Google Analytics with one click ("Connect with Google"). It applies on top of the rest of this policy.
What we access
- Sign in with Google: your name, email address and profile picture, to create your portal account and sign you in.
- Connect with Google: the email address of the Google account you connect, so you and our team can see which account is connected.
- Search Console, read-only: the list of Search Console properties your Google account can open, used only to find the one for your website (we do not keep the list). For that property only: the searches people made, the pages Google showed, and the clicks, impressions and average position for each.
- Google Analytics, read-only: the list of Analytics accounts, properties and web data streams your Google account can open, used only to find the property for your website (we do not keep the list). For that property only: a report per landing page of sessions, engaged sessions, engagement rate and key events.
Our access is read-only. We cannot change, add or delete anything in your Google account, Search Console or Analytics. We do not access your Gmail, Drive, contacts or any other Google data.
How we use it
We use Google user data only to provide the Strategi service you signed up for: to show your search and website results in your portal and reports, to choose which pages to improve and which topics to write about, and to measure whether our work is helping your website. We read only the Search Console property and the Analytics property that match your website.
We do not use Google user data for advertising, we do not sell it, we do not use it to build profiles of people, and we do not use it to develop, improve or train generalised AI or machine learning models.
The Strategi team working on your account views this data to plan, deliver and report on your work. You agree to this when you connect. Beyond that, people at Strategi view it only with your permission, when needed for security, to comply with the law, or once it has been aggregated and anonymised for our internal operations.
Who we share it with
We transfer Google user data only to the providers that help us deliver your service, and only for that purpose:
- Supabase, our database, where your reports and the encrypted permission are stored
- Vercel, which hosts the client portal
- Anthropic (Claude), the AI we use to analyse your results and draft content and questions for you. Your search terms and page figures can be part of what we send it.
- Our AI answer tracking providers (Bright Data and Cloro), which receive the questions we write for you, some based on your search terms, to check how AI assistants answer them
We do not allow these providers to use your Google data for their own purposes or to train their AI models. Some of this work runs on computers operated by Strategi staff. We do not share Google user data with anyone else, except where the law requires it or, with your prior consent, as part of a merger, acquisition or sale of our business.
How we store and protect it
The permission Google gives us (a refresh token) is encrypted with AES-256-GCM before it is stored, using a key kept outside the database. No portal account, including yours, can read it back. The reports we pull are stored in our database, where only our systems and the Strategi team can read them; your portal shows you your own company's data only. All data is encrypted in transit.
How long we keep it, and how to remove it
- The permission token: until you remove our access, connect a different account (which replaces it), or your service ends. It is deleted within 30 days of the end of the service.
- Search Console and Analytics reports: we keep the latest reports and delete older ones as new ones arrive. Everything is deleted within 30 days of the end of the service or of your request.
You can remove our access at any time in your Google account at myaccount.google.com/connections: choose Strategi, then delete the connection. From then on we cannot read anything new. To have us delete the Google data we already hold, email hello@strategi.is and we will delete it within 30 days.
Limited Use
Strategi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
International transfers
We are based in India, and some providers process data in other countries, including the United States. For personal data from the EU or UK, we use safeguards such as standard contractual clauses where required.
How long we keep it
- Client and billing records: as long as Indian tax and company law requires (generally 8 years).
- Inquiries from people who did not become clients: up to 2 years.
- Logins and access you gave us: removed within 30 days of the end of the service.
- Google user data from the client portal: as set out in Google user data above.
- IP addresses in our visit log: up to 30 days. If your browser sends a Global Privacy Control signal, we log the visit without your IP address.
Outside the United States we identify businesses only, never individual people.
When data is no longer needed, we delete it.
Security
We use access controls, encryption in transit and limited staff access. If a breach affects your personal data, we will tell you and the relevant authorities as the law requires.
Your rights
You can ask us to:
- tell you what personal data we hold about you and how we use it
- correct or complete it
- delete it
- give you a copy in a usable format
- stop or limit using it, or object to its use
- withdraw consent
- (in India) nominate someone to exercise your rights if you die or cannot act
Email hello@strategi.is. We reply within 30 days. If you are not satisfied, you can complain to our grievance officer (below), and then to the authority where you live: in India, the Data Protection Board of India; in the EU or UK, your data protection authority (in the UK, the ICO).
Cookies
We use essential cookies to run the site and analytics cookies to improve it. You can block or delete cookies in your browser settings.
Snitcher runs on every visit. Before you choose, and if you choose Essential only, it uses only a session identifier that is deleted when you close the tab; choosing Essential only also stores a record of that choice in your browser. If you press Accept, it uses a cookie to recognise your business when you return.
Children
Our services are for businesses and are not directed at anyone under 18.
Grievance officer
Adnan Baig, Director Email: hello@strategi.is. AT AI Solutions Private Limited, 20 Shanthappa Lane, Silver Jubilee Park Road, Nagartapete, Bengaluru, Karnataka 560002, India. We acknowledge every complaint within 24 hours, resolve most within 3 working days and resolve every complaint within 15 days.
Changes
We may update this policy and will show the new date at the top. For significant changes, we will tell clients by email.