Legal Privacy & Data Protection

Privacy Policy

Learn how StratoCMS collects, uses, stores, and protects information when you visit our website or use our services.

Last Updated: July 11, 2026

At StratoCMS, we respect your privacy and are committed to protecting personal information. This Privacy Policy explains how information is collected, used, stored, and protected when you visit the StratoCMS website, communicate with us, or use our content management and related services.

1. Information We Collect

Information You Provide

We may collect information that you provide directly to us, including:

  • Name and contact details
  • Email address
  • Company or business information
  • Account and subscription information
  • Billing and transaction-related information
  • Support requests and communications
  • Content and media submitted through StratoCMS
  • Information provided when requesting a website, service, or implementation

We do not intentionally collect payment card details directly when payments are processed by an authorised third-party payment provider.

Information Collected Automatically

When you access our website or services, certain technical information may be collected automatically, including:

  • IP address
  • Browser type and version
  • Device and operating system information
  • Referring URLs
  • Pages visited
  • Basic usage and performance information
  • Security and server logs

2. How We Use Information

We may use collected information to:

  • Provide, operate, and maintain StratoCMS services
  • Provision and configure customer websites and services
  • Manage customer accounts and subscriptions
  • Process payments and billing
  • Deliver content management functionality
  • Provide technical and customer support
  • Monitor service reliability and performance
  • Improve StratoCMS features and user experience
  • Detect fraud, abuse, and security threats
  • Send important service and account communications
  • Comply with applicable legal and regulatory obligations

3. Customer Content and Data Processing

Customers may use StratoCMS to create, upload, store, and manage website content, media, product information, form data, and other digital content.

Customers retain responsibility for the content they submit to or manage through StratoCMS.

Where StratoCMS processes personal data on behalf of a customer through a customer website or service, the customer may act as the data controller or data fiduciary and StratoCMS may act as a service provider or data processor, depending on the applicable law and circumstances.

Customers are responsible for ensuring that their collection and use of personal information through their websites complies with applicable privacy and data protection laws.

4. AI-Powered Features

StratoCMS may provide AI-assisted features for layout generation, content creation, content optimisation, workflow assistance, and related functionality.

When an AI-powered feature is requested:

  • Relevant content or instructions may be processed to provide the requested functionality.
  • Customer content is not sold to third parties.
  • We do not authorise third-party AI providers to use customer content for model training where contractual controls or provider settings allow us to prevent such use.
  • AI-generated output may contain errors or inaccuracies.
  • Customers are responsible for reviewing and approving AI-generated output before publication.

The availability and functionality of AI features may change as StratoCMS evolves.

5. Cookies and Similar Technologies

StratoCMS may use cookies and similar technologies for essential website functionality, security, preference management, and analytics.

Where required by applicable law, consent may be requested before non-essential cookies are used.

You may manage cookies through your browser or available cookie preference controls. Disabling certain cookies may affect website functionality.

6. Third-Party Service Providers

StratoCMS relies on selected third-party infrastructure and technology providers to operate and deliver its services.

These providers may assist with:

  • Cloud hosting and website deployment
  • Database and server infrastructure
  • Content and media delivery
  • Domain and DNS management
  • Payment processing
  • Email delivery
  • Analytics and monitoring
  • AI-powered functionality

Third-party providers process information according to their own terms, privacy policies, and applicable contractual arrangements.

We aim to use reputable service providers and limit access to information to what is reasonably required to provide their services.

7. Data Security

We use reasonable technical and organisational measures designed to protect information against unauthorised access, alteration, disclosure, loss, or misuse.

These measures may include:

  • Encryption in transit
  • Access controls
  • Restricted administrative access
  • Secure credential and secret management
  • Infrastructure monitoring
  • Security logging
  • Automated deployment controls

No internet-based service or storage system can guarantee absolute security.

8. Data Retention

We retain personal information for as long as reasonably necessary to:

  • Provide our services
  • Maintain customer accounts
  • Meet contractual obligations
  • Resolve disputes
  • Maintain security and operational records
  • Comply with applicable legal, tax, and regulatory requirements

Retention periods may vary depending on the type of information and the purpose for which it is processed.

Customer content may be deleted or become inaccessible following service termination, subject to applicable contractual, backup, and legal retention requirements.

9. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:

  • Request access to your personal information
  • Request correction of inaccurate information
  • Request deletion of eligible personal information
  • Withdraw consent where processing is based on consent
  • Request restriction of certain processing
  • Object to certain processing
  • Request data portability where applicable
  • Submit a privacy-related grievance or complaint

We may need to verify your identity before processing a privacy request.

To submit a privacy request, contact us at info@stratocms.com.

10. International Data Processing

StratoCMS operates as a remote-first service and may use infrastructure or service providers located in different countries.

As a result, information may be processed or stored outside your country of residence.

Where required by applicable law, we take reasonable steps to use appropriate contractual, organisational, or technical safeguards for international data processing.

11. Children's Privacy

StratoCMS is designed for businesses, professionals, and organisations.

Our services are not intended for children under the age required to independently consent to data processing under applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

12. Legal Requirements

We may disclose information where reasonably necessary to:

  • Comply with applicable law or legal process
  • Respond to lawful requests from public authorities
  • Protect the security and integrity of StratoCMS
  • Investigate fraud or misuse
  • Protect our legal rights or the rights of others

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology, legal obligations, or business practices.

The updated version will be published on this page with a revised "Last Updated" date.

14. Contact Us

For questions, privacy requests, or concerns regarding this Privacy Policy, contact:

StratoCMS

Email: info@stratocms.com
Phone: +91-1135768451
Operations: Remote-first — Worldwide