Privacy Policy

2. Data We Collect

When you use our AI readiness assessment, we collect the following categories of personal data:

• Contact information — name, work email, job title, phone number (optional)
• Company information — company name, industry, size, location, revenue range
• Assessment responses — your answers to all assessment questions
• AI-generated data — readiness scores, company profile, opportunity analysis
• Technical data — browser type, language preference

3. Purpose of Processing

We process your data for the following purposes:

• Report generation — delivering your personalized AI readiness report
• Service communication — sending your report by email
• Platform improvement — understanding usage patterns to improve our service

4. Legal Basis

We process your data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Consent — you explicitly agree to data processing when submitting the assessment (Art. 6(1)(a) GDPR)
• Contract — processing is necessary to deliver the report you requested (Art. 6(1)(b) GDPR)
• Legitimate interest — aggregated analytics to improve our platform (Art. 6(1)(f) GDPR)

5. Service Providers

We use the following categories of service providers to operate our platform. Each provider is bound by a data processing agreement:

• Database hosting — a managed database service hosted in the EU (Frankfurt, Germany)
• Web hosting — a cloud hosting and content delivery provider
• AI analysis — an AI technology provider used to generate your personalized report. Assessment data is sent to this provider for analysis. The provider is US-based; appropriate safeguards (Standard Contractual Clauses) are in place.
• Email delivery — a transactional email service used to send your report link and service communications
• Analytics — a privacy-focused, cookie-free analytics service. No personal data is collected by this service.
• Error monitoring — an error tracking service to maintain platform stability
• Bot protection — a security service to verify form submissions and protect against automated abuse

We do not sell or share your personal data with any third parties for marketing purposes.

6. Data Retention

We retain your personal data for 24 months from the date of creation. After this period, your data is automatically deleted. You may request earlier deletion at any time via our contact form.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your personal data
• Right to rectification — correct inaccurate personal data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to restriction — limit the processing of your data
• Right to object — object to processing based on legitimate interest

To exercise any of these rights, please use our contact form. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority.

8. Cookies

Strados.ai does not use tracking cookies. We use a privacy-focused, cookie-free analytics solution. The only cookies we use are strictly necessary for the website to function (such as language preference). No cookie consent banner is required under GDPR Article 5(3) as we only use essential cookies.

9. International Data Transfers

Some of our service providers operate outside the European Union. These transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of data protection in compliance with GDPR Chapter V.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

11. Contact

If you have questions about this privacy policy or how we handle your data, please use our contact form.

Entity: Bodhi8 Ltd, Nicosia, Cyprus