Stratus Privacy Policy

Effective: October 16, 2022

At Stratus, LLC ("Stratus," "Stratus Service", "we," "us" or "our"), values our users ("account", "you" or "your") first means privacy and upholds strict data protection standards in order to keep sensitive data and communications safe, private, and secure.

This Privacy Notice describes and governs what information we gather from you, how we use that information, and what we do to protect it. By using the Stratus Service and accepting the Terms of Service (TOS), you expressly consent to the information handling practices described in this Policy. If you do not want information about you to be used in the manner set forth in this Privacy Notice, please do not use the Stratus Service. This Privacy Notice is expressly incorporated into our Terms of Use. Your use of the Stratus Service and any personal information you provide through the Stratus Service are subject to this Privacy Notice and the Terms of Use at all times.

Stratus is committed to maintaining the privacy and security of any of your personal information on the website, through your connected applications, and with information supplied or received in any other manner. We pledge that:

• When you connect your email account to Stratus, only the minimum amount of personal information required to fulfill our obligation to our customers will be accessed.
• Our servers only store information related to emails you've sent or received via Stratus.
• You own your data and it will be kept private according to this policy.
• Employees of Stratus are trained on data protection and no one at Stratus will read, access or delete your emails without your prior and explicit consent.

If you or your organization acts as a Data Controller under 'General Data Protection Regulation (EU) 2016/679' you will need to sign or consent to an additional Data Processing Agreement ("DPA") with Stratus in order to process data in our Services. You may request a signed copy here in addition to accepting the the DPA explicitly through the Stratus application when creating your account or confirming your acceptance when logging in and making the appropriate selection to proceed.

• If you are a Stratus user, you can access, change or delete your personal information at any time by logging into your account or submitting a request to dpo@stratus.io
• If you are a Citizen of the EU, you can access, edit, object from processing and delete your personal information at any time

Changes and Updates

We may periodically revise this Privacy Notice. Please revisit this page to stay current with any changes. The most recent version of this Policy will always be available on the Stratus Service. The effective date of any changes will be posted at the top of this page. For changes to this Privacy Notice that may be materially less restrictive on our use or disclosure of personal information you have provided to us, we will attempt to obtain your consent before implementing the change. Your continued use of the Stratus Service constitutes your agreement to this Privacy Notice and any future revisions. Notifications may be provided by email or our in-app notifications.

Access to Your Personal Information

If you register as a member of Stratus, you may update, correct, or delete your profile information and preferences at any time by e-mailing us dpo@stratus.io.

If your personal information changes, or if you no longer desire our Service, you may update or delete it by making the change in your account settings. In some cases we may retain copies of your information as required by law, to protect our rights or if it is not technically reasonably feasible to remove the information. At any time withdraw any consent that you have provided to us to process your information, or exercise any of the following rights by contacting us at dpo@stratus.io.

To protect your privacy and security, we take reasonable steps to verify your identity before granting you account access or making corrections to your information. You are responsible for maintaining the secrecy of your unique password and account information at all times.

• Right of Access - the right to be informed of and request access to the personal data we process about you;
• Right to Rectification - the right to request that we amend or update your personal data where it is inaccurate or incomplete;
• Right to Erasure - the right to request that we delete your personal data;
• Right to Restrict - the right to request that we temporarily or permanently stop processing all or some of your personal data;
• Right to Object - the right, at any time, to object to us processing your personal data on grounds relating to your particular situation; the right to object to your personal data being processed for direct marketing purposes;
• Right to Data Portability - the right to request a copy of your personal data in electronic format and the right to transmit that personal data for use in another party’s service; and
• Right not to be subject to Automated Decision-making
• Right to Non-Discrimination – You have a right not to receive discriminatory treatment for exercising your privacy rights as identified in this section of the privacy notice as conferred by the CCPA.

Information Stratus Collects

Stratus processes our customer's information as directed by our customer and securely stores this data. You have the right to access, edit, correct and delete your information. You have the right to withdraw consent for using your information and notifying a supervisory authority. We do not control the content of the emails or other communications created in Stratus nor do we control the collection methods or management of this data. We only use this data for the purpose of fulfilling our obligation to you or communicating with you and Stratus's partners regarding the Services.

We do not sell your Personal Information to any third party.

Stratus may collect two types of data about users: (1) information that you or others voluntarily submit to us (described below under "User-Supplied Information") and (2) technical data automatically collected from all visitors to the Stratus Service (described below under "Automatically Collected Data"). We may transfer Personal Information to companies that help us provide our Services. Transfers to subsequent third parties are covered by the Data Processing Agreements with our customers.

Stratus does not collect 'Sensitive Information' including personal financial account information, Social Security numbers, passport numbers, driver's license numbers or similar personal identifiers, racial or ethnic origin, physical or mental health condition or information, or other employment, financial or health information. We do, however, process billing information and credit or debit card numbers for customers who have a paid plan with our service. This data is stored in a PCI-compliant 3rd party payment provider.

User-Supplied Information:

In using the Stratus Service, for example when you register with us, or if you send us an email, you will provide Stratus with data generally called "personally identifiable" information. If you choose to provide such information, you are giving Stratus permission to use and store that information consistent with this policy. Additionally, please know that when you register or sign in to the Stratus Service, you are not anonymous to us. Credentials that you (our clients) use to connect your Email Account to Stratus are encrypted and pseudonymised when stored in the database and we use https or SSL where possible to keep your data safe.

Mobile device information:

We may store your phone number, as well as information regarding your mobile device, including your mobile phone number, device type and operating system and information in your mobile phone's address book or in other applications as permitted by the functionality of such mobile device.

Profile Information:

To register for the Stratus Service, you will need to provide your email address and may be asked to authenticate and grant access to websites using open authentication methods. By doing so, you understand and authorize us to use all the information exposed to us pursuant to this Privacy Notice, including but not limited to your status updates, name, email address and information regarding your connections on social profiles like Linkedin, Google, Facebook or publicly available information acquired from a service provider. Stratus will limit the collection of information to what is necessary for us to provide the service and support for each user account.

Data Supplementation:

We may receive information about you or contacts in your address book from other third party sources, including publicly available of third parties from whom we have purchased data. This helps to enhance, update, combine, de-duplicate, and analyze our records to provide a more valuable service to you. The data you provide to us will only be used for the specific reason you designated.

Location:

You may allow the Stratus mobile application to have access to your location to provide helpful information and services based on where you are located (i.e., by allowing your mobile device to send us your location).

Automatically Collected Data:

The Stratus Service operating on a website automatically logs non-personally identifiable information such as Internet Protocol address ("IP Address"), a unique user ID, the content and pages that you access on the Stratus Service and the dates and times that you visit the Stratus Service. In addition, if you come to the Stratus Service via a link from another site, we may also track the source of that link. To utilize the service, you may grant us permission to import your contacts and email history by giving access to third party systems like your email account or social media account. We may import, update, create or modify versions of your email history, calendar, social media accounts, call logs, sms, and address book.

Google User Data:

If you connect and confirm permissions to a Gmail/Google Apps account to Stratus, we will securely access information from your account. This information may include access your inbox folder which is necessary for the core functionality of our Services work as intended.

We may store your authentication token and account email address. If you choose to disconnect your Gmail account or choose to close your Stratus account, any information from Google stored on our servers will be deleted permanently.

Cookies, Web Beacons, and Navigational Data

Like many other websites, the Stratus Service may send one or more cookies – small text files containing a string of alphanumeric characters – to your computer. Stratus may use cookies to track user traffic patterns as described above. Stratus may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to the Stratus Service. Persistent cookies can be removed. You can refuse cookies by turning them off in your browser, however, some features on the Stratus Service may not function properly if your cookies are disabled. Please review your web browser "Help" file to modify your cookie settings. We may also use information about how you use and navigate the Stratus application to help provide support and improve the Service.

Web beacons (also called "gifs"), are electronic images Stratus may use in emails to help us to deliver cookies, count visits, track opens and downloads. You can disable use of web beacons for your Stratus campaigns in the Campaign and Account Settings.

Information we Obtain from Other Sources

We may collect information about you from other sources, including from partners, and from commercially available sources (such as data aggregators and public databases). The following are examples of information we may collect from other sources: Data including but not limited to email address, phone number, and social profile links.

In general, the types and amount of personally identifiable information we collect vary depending on the activity. Stratus endeavors to limit the collection of personally identifiable information to information we believe is minimally necessary to achieve our stated collection purposes.

The Way Stratus Uses Information

Stratus uses personally identifiable information to establish and enhance our relationship with you. Stratus may use the information that you provide, or that we collect, to operate, maintain, enhance, and deliver the various features and services found on the Stratus Service; as well as to track user-generated content and users to comply as a service provider with the DMCA and other applicable laws.

Stratus uses all of the information that we collect from users to understand and analyze the usage trends and preferences of our users, to improve the way the Stratus Service works and looks, and to create new features and functionality.Further, Stratus may use automatically collected data to: (a) remember your information so that you will not have to re-enter it during your visit or the next time you visit Stratus; (b) monitor your participation in various sections of the Stratus Service; (c) customize our service to you, including by providing you with recommendations and (c) monitor aggregate site usage metrics such as total number of visitors and pages viewed.

We may use your e-mail address for administrative communications such as notifying you of major Stratus Service updates, for customer service purposes, and to send privacy or security-related notices.

How Stratus May Disclose Information

Stratus does not share your personally identifiable information with other organizations for their marketing or promotional uses without your prior consent.

We may share your personally identifiable information with companies that provide services to us, including outside vendors, contractors, or agents who help us manage our business activities. Such entities only use your personal information in accordance with this Privacy Notice and for no other purpose than to provide us with necessary services.

Stratus may disclose personally identifiable information if required to do so by law or under the good faith belief that such action is necessary to comply with state and federal laws (including, without limitation, U.S. copyright or trademark laws) or respond to a court order, subpoena, judicial or other governmental requirement or warrant in a manner required by the requesting entity.

Stratus also reserves the right to disclose personally identifiable information that we believe, in good faith, is appropriate or necessary to take precautions against liability; enforce our Terms of Use; protect Stratus from fraudulent, abusive, or unlawful uses; to initiate, render, bill and collect for amounts owed to Stratus; to investigate and defend ourselves against third-party claims or allegations; to assist government enforcement agencies; to protect the security or integrity of the Stratus Service; or to protect the rights, property, or personal safety of Stratus, our Users, or others.

In the event that Stratus is acquired by, merged with, or our assets are transferred to, another entity, such entity may be able to use your personal information under the terms of this Privacy Notice.

In the event that Stratus is acquired by, merged with, or our assets are transferred to, another entity, such entity may be able to use your personal information under the terms of this Privacy Notice.

Access to Your Personal Information

If you register as a member of Stratus, you may update, correct, or delete your profile information and preferences at any time by e-mailing us dpo@stratus.io. To protect your privacy and security, we take reasonable steps to verify your identity before granting you account access or making corrections to your information. You are responsible for maintaining the secrecy of your unique password and account information at all times.

Children

Stratus does not knowingly collect or retain personally identifiable information about persons under 13 years of age. Any person who provides their personal information to Stratus through this website represents that they are 13 years of age or older. If Stratus learns that personally identifiable information of persons under the age of 13 years has been collected on the Stratus Service without verifiable parental consent, then Stratus will take the appropriate steps to delete this information.

If you are a parent or guardian and discover that your child under the age of 13 has obtained a Stratus Service account, then you may alert Stratus at dpo@stratus.io and request that Stratus delete that child's personal information from its systems.

Data Security

Stratus uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your personal information. However, no data transmissions over the Internet can be guaranteed to be 100% secure. We cannot, therefore, ensure or warrant the security of any information you transmit to Stratus, and you do so at your own risk. Please know that although we make our best efforts to keep your information secure, this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.

If Stratus learns of a security systems breach, then we may attempt to notify you electronically so that you can take appropriate protective steps. By using this website or providing personal information to us you agree that we can communicate with you electronically regarding security, privacy and administrative issues relating to your use of this website. Stratus may post a notice on the Stratus Service if a security breach occurs. Depending on where you live, you may have a legal right to receive notice of a security breach in writing. To receive a free written notice of a security breach, or to opt out of receiving electronic notice you should notify us at dpo@stratus.io.

Data Retention

Our intention is to retain your information for as long as we consider it potentially useful in contacting you about the Service or as needed to comply with our legal obligations, resolve disputes, and enforce our agreements and rights, or if it is not technically reasonably feasible to remove it. If you wish to cancel your account or request that we no longer use your information to provide you Services, you may delete your account.

If you provide information to our customers as part of their use of the Stratus Service, our customers may decide how long to retain the personal information they collect from you. We will provide the customer with access to all information if the customer terminates their agreement with the Service. After termination, we may delete all customer information, including your Personal Information, from the Stratus Service within a 60 day period of time.

International Transfer of Information

Except as expressly provided otherwise, this document addresses only the use and disclosure of information that the Stratus Service collects from you or that you disclose to us. If you disclose your information to others besides Stratus different rules may apply to their use or disclosure of the information you disclose to them. Stratus does not control the privacy policies of third parties, and you are subject to the privacy policies of those third parties where applicable. We encourage you to ask questions before you disclose your personal information to others.

Third Parties

Except as expressly provided otherwise, this document addresses only the use and disclosure of information that the Stratus Service collects from you or that you disclose to us. If you disclose your information to others besides Stratus different rules may apply to their use or disclosure of the information you disclose to them. Stratus does not control the privacy policies of third parties, and you are subject to the privacy policies of those third parties where applicable. We encourage you to ask questions before you disclose your personal information to others.

Google API Integration Information

Stratus's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Contact

Please contact Stratus with any questions or comments about this Privacy Notice, your personal information, our third-party disclosure practices, or your consent choices by e-mail at dpo@stratus.io.