Effective date: August 22, 2026 Version: 1.5 Company: Stratum Infrastructure Inc. Contact: dallas@stratuminfra.ai
This Notice explains how Stratum handles information from visits to its public website and from business inquiries, checkout, contracting, account administration, support, training, security, and the pre-activation pilot relationship. It does not authorize production Customer Data processing. Before a separately signed Production Activation Schedule becomes effective, a customer must not submit UST reports, Facility files, photographs, templates, owner/operator records, release records, or other production Customer Data.
1. Information we collect before Production Activation
We may collect:
- business identity and relationship information, including legal entity name, business address, role/title, business email, phone, authorized contacts, purchase-order reference, selected plan, and software-use location;
- Stripe transaction information, including Checkout Session, Customer, Payment Link, Price, Subscription, invoice, mandate, payment status, tax calculation, billing address, last four digits/payment-method type, fraud signals, consent, cancellation, refund, return, and dispute records; Stratum does not receive full card or bank credentials;
- DocuSign and contract information, including signer identity, title, business email, envelope status, timestamps, signatures, and certificate/audit records;
- account, support, training, feedback, and security records, including scheduled sessions, attendance, support communications, authorized user administration, authentication/security events, device/browser information, IP address, and diagnostic logs; and
- information a customer or its representatives voluntarily provide during pilot planning.
2. Sources
We receive information from the customer and its authorized users or representatives; from Stripe, DocuSign, and service providers; from business registries and public regulatory sources; and from our own account, security, support, and transaction systems.
3. Purposes
We use the information to:
- establish and administer the business relationship;
- process payment, recurring billing, tax, cancellation, refund, return, dispute, and accounting records;
- deliver and evidence electronic Terms and contracts;
- prevent duplicate or unauthorized subscriptions, fraud, abuse, and security incidents;
- communicate about payment, signature, onboarding, training, support, security, legal notices, and renewals;
- prepare an isolated synthetic-data demo where approved;
- comply with law, tax, audit, recordkeeping, and dispute obligations; and
- evaluate feedback and improve non-model product operations using information that does not reveal Customer Data or confidential content.
4. Customer Data, derived information, and AI
Customer Data remains governed by the signed Pilot Agreement, DPA, and Production Activation Schedule. Before activation, Stratum will not knowingly accept production Customer Data.
Under the ordinary service license, Stratum does not use Customer Data, Customer Personal Data, raw reports, photographs, signatures, precise Facility identifiers/addresses, incident records, source documents, or pseudonymous/tokenized derivatives to train a general, shared, or cross-customer AI or machine-learning model.
A later optional Qualified Deidentified Data program requires a separate affirmative signed election and documented source authority, deidentification, provenance, security, retention, and no-reidentification controls. No third-party AI provider may receive Customer Data or customer-derived training material under this Notice.
5. Disclosure
We may disclose applicable information to:
- Stripe for payment, subscriptions, billing, tax calculation, fraud prevention, and receipts;
- DocuSign for electronic contracting;
- hosting, email, support, security, analytics, professional, accounting, and legal providers only as needed for the approved purpose and subject to appropriate restrictions;
- government authorities, regulators, courts, or other parties when required by law or reasonably necessary to protect rights, safety, security, or prevent fraud; and
- a successor in a merger, financing, reorganization, sale, or similar transaction, subject to applicable confidentiality and law.
We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. We do not disclose Customer Data to Facility owners/operators, regulators, or other recipients merely because payment occurred.
6. Retention
We retain checkout, assent, mandate, contract, invoice, tax, fraud-prevention, cancellation, refund, return, dispute, and relationship records for the active relationship and thereafter for the period reasonably necessary for accounting, tax, legal, security, and dispute purposes.
Production Customer Data retention, export, deletion, backup age-out, and legal-hold treatment are governed by the signed DPA and Production Activation Schedule. We retain legal-hold material only while the hold applies and only to the extent necessary. We do not promise a deletion or backup period that has not been operationally verified in the applicable activation record.
7. Security
We use administrative, technical, and physical safeguards appropriate to the nature of the information and the stage of the pilot. No system is completely secure. Production Customer Data remains prohibited until the parties document the actual hosting, subprocessors, access controls, tenant isolation, encryption paths, backup/restore, logging, incident route, export, deletion, legal hold, and backup age-out controls in a signed Production Activation Schedule.
If we discover a security incident affecting protected customer information, we will investigate, contain, and notify the customer without undue delay and as required by the signed DPA and applicable law.
8. Cookies and browser storage
Stripe and DocuSign use their own cookies and similar technologies under their notices. Stratum may use essential session/security cookies and local browser storage needed for authentication, security, preferences, and limited demo functionality. Production offline storage or caching remains disabled until the applicable security and activation controls pass.
Stratum does not use its public website to track individuals over time and across nonaffiliated websites for targeted advertising, and it does not permit third-party advertising trackers on that site. Stratum therefore does not respond differently to browser “Do Not Track” signals. Where applicable law requires recognition of an opt-out preference signal, Stratum will treat it as an opt-out request; as stated above, Stratum does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. Stripe and DocuSign independently collect information when a person visits their pages under their own notices.
9. Choices and requests
Business contacts may request access, correction, deletion, portability, or information about Stratum’s handling of their information by emailing dallas@stratuminfra.ai. We may verify identity and authority, route Customer Data requests to the applicable customer or upstream controller, apply lawful exceptions, and respond within the period required by applicable law.
The customer may cancel subscription renewal as described in the Checkout Subscription Terms. Marketing communications, if any, include an unsubscribe method; transaction, security, contract, and service messages may continue when necessary.
10. Children
The service is business-to-business and is not directed to children or minors. Customers must not submit information about a person under 18 unless authorized, necessary for an approved business purpose, and expressly permitted by the signed activation documents. Stratum may quarantine or delete unauthorized material and will not use it for analytics, product improvement, or model training.
11. Changes
We may update this Notice prospectively. For a material change, we will post a prominent notice on the public website or provide direct notice to affected business contacts, as appropriate and when required, before or when the change takes effect. A later privacy-policy change will not retroactively authorize general/shared-model training or expand rights in previously collected Customer Data without a new affirmative agreement.
12. Contact
Stratum Infrastructure Inc. dallas@stratuminfra.ai