StrataLegalBack to app →

Privacy Policy

Last updated May 2026.

Strata Neighbourhood AI (the "Service") is operated by Parallel Data Intelligence Limited ("we", "us", "our"). This Privacy Policy describes how we collect, use, and disclose information in connection with the Service. By using the Service you agree to the terms below.

It is important that you read this Privacy Policy together with any other privacy notice or fair-processing policy we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This Privacy Policy supplements those other notices and is not intended to override them.

Controller

Parallel Data Intelligence Limited is the controller of your personal data and is responsible for it under UK GDPR.

Contact: help@stratasoftware.net
Geneva Way, Leeds Road, Hull, HU7 0DG · 01482 974333

You have the right to complain to the Information Commissioner's Office (ICO) at any time (ico.org.uk). We'd appreciate the chance to address your concern first — please contact us before approaching the ICO.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Information we collect

When you use the Service, we collect:

  • Account data you provide — name, email, ICB, password (stored as a bcrypt hash, never in plain text).
  • Workspace data you create or upload — uploaded Excel templates, scheme records and field values, strategic-context documents (PDF / DOCX), AI suggestions and citations, scheme settings.
  • Usage data — pages you visit, AI calls you trigger, login events, and audit-log entries (see below).
  • Technical data — IP address and user-agent captured at sign-in for security and fraud prevention.

We do not collect special-category personal data (race, religion, health, sexual orientation, trade-union membership, biometric or genetic data) or criminal-offence data.

How we use your information

We process the information above to:

  • Provide, maintain, and improve the Service.
  • Authenticate you and protect against unauthorised access (rate-limit brute-force, invalidate sessions on role change, log sign-in attempts).
  • Generate AI suggestions / scheme drafts grounded in your ICB's data (see "AI processing" below).
  • Communicate with you about the Service — invitations, password resets, service notices.
  • Maintain audit trails of significant actions (sign-ins, scheme edits, AI suggestions accepted, role changes) for security and accountability.

We may also share your information with third-party partners or affiliates for marketing and promotional purposes, although we will obtain your consent before sending third-party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us. We do not sell your data.

AI processing

The Service uses Anthropic's Claude AI to draft scheme content, enrich postcodes, summarise uploaded strategy documents, and answer questions about your estate. When you trigger an AI action, we send the relevant grounding context (your active ICB's sites, deprivation data, scheme fields, and / or uploaded documents) to Anthropic for processing.

Anthropic acts as a data processor under our instructions:

  • Calls are made via Anthropic's commercial API, under terms that prohibit training models on customer inputs or outputs.
  • We do not transfer special-category personal data to Anthropic.
  • Each AI call is logged in our audit table with token counts, cost, and the columns drafted — you can audit usage from the admin panel.

How we share your information

We share data only with:

  • Anthropic — for the AI processing described above.
  • Microsoft Azure — our hosting and storage provider (UK datacentres). Your uploaded files and database rows live on Azure Postgres + Azure Blob Storage.
  • Email-delivery providers — to send invitations and password-reset links.
  • Professional advisers (lawyers, accountants, auditors) where strictly required.
  • Authorities— if compelled by law, court order, or to protect our rights, your safety, or others' safety.
  • Successors — third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. If a change happens to our business, the new owners may use your personal data in the same way as set out in this Privacy Policy.

All third parties are contractually required to protect your data and process it only for the purposes we specify. They are not permitted to use your data for their own purposes.

Cookies

The Service uses cookies to give you the best online experience. You can read more about this in our Cookie Policy.

International transfers

We do not transfer your personal data outside the UK, with the sole exception of AI processing by Anthropic described above, which may involve transfer to the United States under appropriate safeguards (UK International Data Transfer Addendum to the EU Standard Contractual Clauses).

Data security

We protect your information with industry-standard measures — TLS in transit, encryption at rest, hashed passwords, scoped database access, and rate-limited authentication. We have procedures in place for any suspected personal-data breach and will notify you and the ICO where legally required.

Data retention

  • Account data — retained while your account is active. Removed within 30 days of deletion.
  • Workspace data (templates, schemes, AI suggestions, uploaded documents) — retained for the licence term. On termination, you may request a backup within 10 working days; data is then deleted.
  • Audit logs — retained for 12 months for security review.
  • AI usage logs — retained for 24 months for billing reconciliation and capacity planning.

Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure of your data (where lawful — some audit data may be retained for legitimate-interest purposes).
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent (for any processing based on consent).

To exercise any of these rights, email help@stratasoftware.net.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee — or refuse to comply — if your request is clearly unfounded, repetitive, or excessive.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you for further information to speed up our response.

We try to respond to all legitimate requests within one month. Occasionally it may take longer if your request is particularly complex or you have made a number of requests — in that case we will keep you informed.

Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be notified by email or in-app banner before they take effect. Continued use after the effective date constitutes acceptance.