Privacy Policy

This Privacy Policy applies to information we collect when you visit our website; when you create or use a Stronos account; when you connect third-party platforms or business assets to the Services; when you communicate with us; when you use messaging, inbox, engagement, moderation, AI-assisted, automation, voice, SMS, web chat, or related features; and when information is provided to us through connected third-party platforms in order to operate the Services.

This Privacy Policy does not govern the privacy practices of third-party platforms, providers, or services that you connect to or use with Stronos.

For your Stronos account, billing, and workspace configuration data, Peak Stream Horizon is typically the controller.

For messages, comments, SMS, web chat, voice transcripts, and other personal data about your end customers that we process because you connected your business assets or enabled features, you (the business customer) are typically the controller, and Stronos processes that data on your instructions to provide the Services.

You are responsible for ensuring that you have the rights, permissions, notices, and lawful basis required to connect and use your third-party business assets and to process your end customers' data with the Services.

We may collect the following categories of information.

A. Account and Profile Information

When you create or use a Stronos account, we may collect information such as your name; email address; login credentials or authentication-related identifiers; company or workspace information; billing or subscription details; and other information you provide in your account or workspace settings.

Your Stronos account and workspace are associated with an internal account identifier and related company/workspace records used to operate the platform.

B. Connected Platform Information

When you connect supported third-party platforms, such as social media Pages or business accounts, we may collect and process connected account or Page IDs; linked business account IDs; usernames or profile-related identifiers; access tokens or other authorization data; permissions granted to the Services; and platform connection status and related metadata.

We store connected third-party platform asset identifiers and tokens in company/workspace records so the system can attribute activity to the correct business and send replies through the authorized connection.

C. Messages, Comments, and Engagement Data

When the Services are connected to supported platforms, we may receive and process customer engagement activity associated with the assets you authorize, including direct messages and message thread data; comments and replies; sender or participant identifiers; timestamps; message or comment content; media-related identifiers; and moderation-related actions or statuses.

Connected third-party platforms may send webhook events to our servers for authorized activity. We store related conversation and comment data in our systems so the engagement UI can display them and so you can reply or moderate through the Services.

D. SMS, Web Chat, Voice, and Forms

Depending on features you enable, we may process SMS message content and phone numbers; SMS opt-in submissions (such as name, phone number, consent timestamp, and source); web chat conversations and contact form submissions; voice call metadata, transcripts, or summaries; and restaurant or order-related customer details if you use those features.

E. Business and Compliance Information

For telephony / A2P or similar compliance features, we may process business registration details such as legal business name, address, tax or registration identifiers, and authorized representative contact information.

F. Calendar and Integration Data

If you connect Google Calendar, Outlook, Calendly, or similar services, we may store OAuth tokens and process calendar event data needed to provide scheduling features.

G. AI, Automation, and Workflow Data

If you use AI-assisted or automation features, we may process prompts, instructions, and workflow settings; message batches or merged message content; conversation metadata; moderation signals or results; generated replies or suggestions; and bot enable/disable settings and related workspace preferences.

Incoming messages may be batched, sent to an AI provider to generate replies or moderation decisions, and sent back through the connected platform when you enable those features.

H. Usage, Device, and Analytics Information

We may automatically collect technical and usage information, such as IP address; browser type; device type; operating system; pages viewed; actions taken in the Services; timestamps and session information; and diagnostic, performance, or error-related information.

With your consent (see Cookies and Google Analytics below), we also collect analytics data via Google Analytics 4.

I. Communications and Support Information

If you contact us, we may collect information contained in your communications, such as your name, email, phone number, and the content of your request.

We may use information we collect to provide, operate, maintain, and improve the Services; create and manage user accounts, workspaces, and subscriptions; authenticate users and maintain access control; connect and maintain authorized third-party platform integrations; receive, display, organize, and manage messages, comments, SMS, web chat, voice, and engagement activity; send replies, moderation actions, or other outputs through connected third-party accounts you authorize; support inbox, dashboard, engagement, workflow, and automation features; provide AI-assisted features, such as suggested or automated replies and moderation support; process payments and manage subscriptions; troubleshoot issues, monitor performance, and improve reliability and security; analyze aggregated website and product usage (when analytics consent is granted); communicate with users about the Services, updates, billing, support, or account matters; enforce our Terms and other policies; and comply with legal obligations and protect our rights.

If and to the extent applicable law requires a legal basis for processing personal information, we may rely on one or more of the following: performance of a contract; legitimate interests in operating, securing, and improving the Services; compliance with legal obligations; and consent, where required by law (including analytics cookies).

When you authorize Stronos to connect to supported third-party platforms, we may receive platform-provided events and related data for the connected assets you authorize. For example, messages and comments from connected third-party assets are received server-side through webhooks, associated with the correct company/workspace, stored for display in the engagement interface, and used to send replies or moderation actions through the authorized connection.

We process that information only as needed to provide the Services, including displaying it in your workspace, supporting automations and AI-assisted features you enable, and sending actions or responses through the business assets you connect and authorize.

We store Stronos account and workspace data with trusted cloud infrastructure and service providers that support account authentication and sign-in; databases for workspace records, messages, comments, settings, and related operational data; and file storage for uploaded media and other workspace files.

The application is hosted by our hosting providers. Data may be processed and stored in the United States and other jurisdictions where we or our service providers operate.

We use reasonable administrative, technical, and organizational measures designed to protect information, including encrypted transit (HTTPS) and access controls. No method of transmission or storage is completely secure.

We do not sell personal information in exchange for money.

We may disclose information to service providers and vendors that help us operate the Services, including cloud authentication, database, and file storage providers; Google Analytics 4 for website and product analytics (only when you consent to analytics cookies); application hosting and delivery providers; third-party payment processors for subscriptions and billing; third-party messaging and social platforms you authorize for connected messaging, comments, and related APIs; AI providers for assisted replies, summaries, and related processing; third-party telephony and SMS providers for phone numbers and related compliance tooling; third-party voice providers for voice agents, call audio, and transcripts/summaries; email delivery providers for transactional and support communications; and calendar providers you connect (such as Google, Microsoft, or Calendly).

We may also disclose information to connected third-party platforms as necessary to provide requested functionality; in connection with a merger, acquisition, financing, asset sale, reorganization, or similar transaction; and when reasonably necessary to comply with law, enforce our policies, prevent fraud or abuse, or protect rights and safety.

If you use AI-assisted features, information from your connected workspace, messages, comments, and settings may be processed by our third-party AI providers to generate suggested or automated outputs.

You understand and agree that AI-generated outputs may not always be accurate, complete, or appropriate; automated tools may act based on the rules, prompts, and settings configured in your workspace; you are responsible for reviewing and supervising your use of these features; and you remain responsible for communications and moderation actions sent through your connected accounts.

We configure our AI provider accounts so that API content is not used to train their general models where the provider makes that option available. We do not sell your message content for advertising.

We use cookies and similar technologies (including browser localStorage and sessionStorage) to operate essential features such as authentication sessions and security; remember preferences; and measure website and product usage when you consent.

A. Essential technologies

Essential cookies and storage are required for sign-in, security, and core functionality. These do not require analytics consent.

B. Google Analytics 4 (GA4)

With your consent, we use Google Analytics 4 to understand how visitors use our website and Services. GA4 may collect pages viewed, events, device and browser information, approximate location derived from IP address, referral information, and identifiers stored in cookies or similar technologies.

Google may process this information under its own terms. Learn more at https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.

We load GA4 with Google Consent Mode. Analytics storage is denied by default until you Accept analytics in our cookie banner. You can change your choice later via Cookie settings in the website footer.

You may also control cookies through your browser settings. Disabling certain cookies may affect functionality.

C. California "sharing"

We do not sell personal information for money. Use of Google Analytics may be considered "sharing" for cross-context behavioral advertising under California law depending on configuration. You can opt out of analytics cookies via our cookie banner or Cookie settings, or email info@stronosai.com with subject line Do Not Sell or Share Request.

We retain information for as long as reasonably necessary to provide the Services, maintain accounts, support operations, comply with law, resolve disputes, enforce agreements, and protect our rights.

Examples (subject to change based on legal and operational needs): account and workspace data for the life of the account, then deleted or de-identified upon verified full wipe except as retained below; messages, comments, SMS, web chat, and voice summaries while the account is active and deleted as part of a verified full wipe; third-party platform access tokens until disconnect, token expiry/rotation, or deletion; billing and tax records as required by law (often several years); security and server logs for a limited operational period; and Google Analytics data according to the retention setting configured in our GA4 property.

After a full wipe, residual copies may remain in encrypted backups for a limited rotation period before they are overwritten.

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Depending on your location and applicable law, you may have rights regarding your personal information, including the right to access certain information we hold about you (a "request for information" / right to know); request correction of inaccurate information; request deletion of certain information; object to or restrict certain processing; opt out of sale or sharing where applicable; and request portability where applicable.

How to submit a request for information or correction: Email info@stronosai.com. Use one of these subject lines: Privacy Access Request, Privacy Correction Request, or Privacy Portability Request. Include your full name, the email on your Stronos account, your company/workspace name if applicable, and a clear description of what you are requesting.

We may need to verify your identity (and authority to act for a company) before processing requests. We aim to respond within 45 days, or sooner where required by law. If more time is needed, we will let you know.

If you are an end customer of a business that uses Stronos, please contact that business first. They typically control your data; we process it on their behalf and will assist them or redirect you as appropriate.

You may also update certain account information in your account settings.

You may request deletion of your Stronos account data. When we process a verified deletion, we perform a full wipe of your Stronos workspace data in our systems, which includes deleting or removing, as applicable: your Stronos login / authentication credentials; your company/workspace data (including messages, comments, SMS/web chat records, voice summaries, agents, knowledge bases, workflows, and settings); uploaded files and media associated with your workspace; third-party connection tokens and related connection records; related configuration we store for your workspace (such as web chat pages and calendar connections); and other Stronos-stored personal information associated with that account that we are not legally required to retain.

How to request deletion: In-app, sign in, open Profile, and use Delete my account (this triggers the full wipe); or email info@stronosai.com with subject line Data Deletion Request and include your name, account email, and workspace name; or follow https://www.stronosai.com/data-deletion; or if you remove the Stronos app through a connected third-party platform and that platform sends us a data deletion callback, we will full-wipe the mapped Stronos workspace when we can associate that third-party user with your account.

What we may retain after a wipe: billing, tax, or legal compliance records; information needed for fraud prevention, security, dispute resolution, or legal holds; backup copies until rotated; and aggregated or de-identified information that cannot reasonably identify you.

Deleting Stronos data does not automatically delete data held by third-party services. You may also need to revoke permissions in those products.

We aim to complete verified deletion requests within 45 days, or sooner where required by law.

Your information may be processed and stored in the United States or other jurisdictions where we or our service providers operate.

By using the Services, you understand that your information may be transferred to and processed in jurisdictions that may have different data protection laws than those in your own jurisdiction. Where required, we rely on appropriate transfer mechanisms with our providers.

The Services are intended for business users who are at least 18 years old. The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will take reasonable steps to delete it.

If you are a California resident, you may have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of sale or sharing of personal information, and to non-discrimination for exercising your rights.

Categories of personal information we may collect include identifiers (such as name, email, IP address, account IDs), commercial information (such as subscription details), internet or electronic activity (such as site interactions and analytics events when consented), approximate geolocation (via IP), professional or business information, and, in limited compliance contexts, sensitive business identifiers you provide (such as tax or registration numbers).

We collect this information from you, your devices, connected platforms you authorize, and our service providers.

To exercise California rights, email info@stronosai.com with an appropriate subject line (for example Privacy Access Request, Data Deletion Request, or Do Not Sell or Share Request).

The Services may contain links to or integrations with third-party websites, platforms, or services. We are not responsible for the privacy, security, or data handling practices of those third parties. Your use of those services is subject to their own terms and privacy policies.

We may update this Privacy Policy from time to time. If we do, we will post the updated version and revise the "Last Updated" date above. Your continued use of the Services after the updated Privacy Policy becomes effective constitutes your acceptance of the revised version.

If you have questions about this Privacy Policy, want to request access to your information, or want to request deletion, contact us at:

Peak Stream Horizon, LLC

doing business as Stronos

701 Heathergate Dr

Pittsburgh, PA 15238

412-713-0976

info@stronosai.com

https://www.stronosai.com