Privacy policy

Controller and contact

Data controller: EarlyStrata. Business correspondence address: 55 avenue Marceau, 75116 Paris, FRANCE. For data questions or a rights request, use support@earlystrata.com. No appointed data protection officer is claimed.

Identity and workspace

Customer sign-in uses Clerk for Google, Apple, Microsoft and email authentication. EarlyStrata receives a distinct account identifier, verified email and available profile name. These details provide the account workspace and membership checks. Provider passwords are entered with the relevant identity provider. Administrative access remains managed separately through Sites. Customer connection is currently being tested before public registration.

Sites supplies the verified administrative account ID, email and optional name for existing owner records. Customer records use a separate Clerk identity. An email match does not merge customer and administrative accounts. The connection remains in development testing and is not yet verified for public registration.

Bookmarks, selected assets and regions, alert rules, research horizons and delivery choices are saved only when you choose the related controls. A preferred Plus billing period is optional and does not enroll you in marketing or payments. The intended basis is provision of your requested account service or precontractual steps you request, rather than blanket consent to all processing.

Reading activity, feedback and security

Visit dates and signal reading dates and counts are optional. Collection is disabled by default and starts only after the separate history choice in the customer-rights center. That choice can be withdrawn at any time. Existing records are not retrospectively described as consented and can be erased. Bookmarks and requested account functions work separately. Feedback is optional and stores only the signal, rating, note and update date. Do not include sensitive information.

Plus reading can create a pseudonymous account reference for watermarks and short-window request counters against bulk extraction. Counters cover the current minute and hour windows, not an IP or device history in the application database. Security and proportionate content protection are intended legitimate interests, subject to a documented necessity and balancing assessment before wider launch.

Optional profile photo

You can use initials without uploading a photo. Cropping happens in your browser. Only the prepared 512 × 512 JPEG is uploaded to private file storage, with an account-linked object reference and update version in the database. The original file is not sent by the photo editor. Other readers cannot access the photo through its authenticated route.

Replacement and removal request deletion of the previous active image. A failed storage cleanup can require support follow-up. Removing a photo changes EarlyStrata only. No facial recognition or automatic provider-photo import is used by this feature.

Assistant, audio and external links

Assistant questions are sent to the site server to search the existing research archive. The inspected route does not persist the question or send it to an external model API. Access request counters still apply. Answers and questions remain in the current page state until it is cleared or closed.

Audio starts only when you request playback through your device’s speech service. Some browser voices may use an external speech provider. EarlyStrata cannot guarantee that every device voice is processed entirely offline. Source and social buttons are ordinary links or user-initiated sharing, with no embedded social tracking script in the inspected application.

Recipients and international processing

Workspace records and photos use Sites-managed Cloudflare database and file storage. Authorized site administration can access records when necessary for support and security. Administrative identity and hosting involve OpenAI services. Clerk handles customer authentication and processes account and security information. Google, Apple or Microsoft also processes the sign-in you choose. A future payment would involve Stripe and the identity, billing and transaction details necessary for payment. Raw card details are not stored in the EarlyStrata workspace.

The inspected application does not sell reader data or include an advertising or marketing analytics SDK. This is not a claim about every hosting-layer operation. Exact processor entities, locations, subprocessor lists, transfer mechanisms and backup retention must be confirmed against the actual contracts. EU-only storage or an executed transfer agreement is not claimed.

Retention and removal

Visit and reading activity has a 90-day active retention limit. Feedback has a 365-day limit and an optional plan preference a 180-day limit. Unattached order preparations expire after 30 days. These are EarlyStrata operating limits, not statutory retention periods. Expired records are cleaned on authenticated account use. This is not a background deletion schedule. Bookmarks and research settings remain until changed, erased or handled through an inactive-account review.

Erasing the active workspace removes its settings, bookmarks, reading and visit history, feedback, plan preference and active profile photo. A failed photo deletion stays in a tracked cleanup queue. Minimum subscription links remain to manage ongoing billing. Contract proofs, rights requests and legally required financial records are separated from personalization and retained only for their applicable obligation or claims period. Accounting records normally have a 10-year period from the financial year end. Certain electronic consumer contracts also require 10-year archiving. Actual provider logs, backups, inactive-account review and archive deletion controls remain to be finalized. No provider account or backup is claimed deleted by the workspace action.

Public professional statements

Research may identify officials, executives or other relevant experts and attribute public professional statements to them. The source link and statement context support documented economic research. This is separate from reader account data. Correction or data-rights requests concerning an attributed statement can be sent to the same privacy contact. The final controller must document the applicable lawful basis and safeguards for this use.

Your data rights

Contact support@earlystrata.com to request access, rectification, erasure, restriction, portability where applicable, or to object to processing based on legitimate interests. Identify the account and the requested action. A request can be made without sending an identity document by default. Additional identification may be requested only when reasonably needed to protect your data.

The normal GDPR response period is one calendar month, not a fixed 30-day period. A lawful extension for complexity or numerous requests can add up to two months, with reasons communicated within the initial month. Withdrawing optional-history consent does not affect earlier lawful processing. You can complain to the CNIL or another competent supervisory authority.

The customer-rights center provides an authenticated export of application-held data, reversible optional-history choices, scoped active-workspace erasure and tracked requests for access, correction, erasure, restriction, portability or objection. Each request receives a dated downloadable acknowledgment. Responses and actual completion are shown separately. Provider account deletion, statutory archive decisions and complete rights responses can require manual processing. Email is available without creating another account. The service makes no automated credit, employment or financial eligibility decision.