Privacy policy

Last updated: August 10, 2026

Stryqo, Inc., a Delaware corporation (“Stryqo,” “we,” “us,” or “our”), is the controller of personal data described in this policy. This policy applies to our website, accounts, competitive-intelligence reports, support, and related services.

Personal data we collect and where it comes from

• Account and contact data, such as your email address and information you send in support messages. If you choose Google sign-in, we may receive the name, email address, and profile image authorized by you.
• Usage and transaction data, such as domains submitted for analysis, report and feature activity, credit or subscription records, and support history.
• Device and network data, such as IP address, browser type, device identifiers, referring pages, timestamps, and security or server logs.
• Connected-service data. If you authorize a Search Console connection, this can include accessible properties and Search Analytics fields such as dates, queries, pages, devices, clicks, impressions, click-through rate, and average position.
• Public and licensed source data about products, businesses, websites, advertisements, backlinks, archives, communities, and market activity. A public report may incidentally include professional information already present in a cited public source.

We collect this information from you, your browser or device, services you choose to connect, payment and authentication providers, and public or licensed data sources. A feature marked unavailable in a local or demonstration build does not transmit the account, contact, analysis, or payment data entered into that feature.

How we use personal data

• Provide accounts, generate and display reports, operate paid features, and respond to requests.
• Authenticate users, maintain security, prevent fraud and abuse, enforce quotas, and diagnose failures.
• Maintain, analyze, and improve service performance and report quality.
• Process transactions, keep financial records, communicate service notices, and comply with legal obligations.
• Establish, exercise, or defend legal claims and enforce our terms.

Public reports

Reports concern products and businesses and may be public and indexed by search engines. We do not publicly identify the account that requested a report. Do not submit private personal data for analysis. If a cited public source contains personal data and you believe our use is unlawful or materially inaccurate, contact us for review.

How we disclose personal data

We disclose personal data only as reasonably necessary to the following categories of recipients: hosting, database, storage, security, authentication, communications, customer-support, payment, professional-adviser, public-data, and artificial-intelligence service providers; connected services you direct us to use; a buyer or successor in a corporate transaction; and courts, regulators, or other parties where disclosure is legally required or necessary to protect rights and safety.

We do not sell personal data for money. We do not use personal data for cross-context behavioral or targeted advertising, and we do not profile users in furtherance of decisions that produce legal or similarly significant effects.

Cookies and similar technologies

We use strictly necessary cookies and local storage for sign-in, security, preferences, and service operation. OAuth state and PKCE cookies may be used briefly to protect connected-service authorization. We do not use third-party advertising cookies. Because we do not currently sell data or use targeted advertising, browser opt-out signals do not change those practices; we will recognize legally required universal opt-out signals if those practices change.

Google data and Limited Use

Search Console access is optional and read-only. We use connected Google data only to provide the private dashboard and analyses you request. We do not place it in public reports, sell it, use it for advertising, or use it to train a general Stryqo model. Google OAuth tokens are not sent to artificial-intelligence providers. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

AI-assisted analysis

We send data to an artificial-intelligence provider only when needed for a feature you request. We minimize the fields to the relevant report summaries, selected aggregate metrics or rows, recent prompt or conversation text, and tool-result summaries. We do not send authentication tokens, full payment details, or internal account identifiers. Provider processing is also subject to the provider's terms and retention practices.

Retention

We retain personal data only for as long as reasonably necessary for the purposes above, including to maintain your account, complete transactions, resolve disputes, prevent abuse, and meet legal, accounting, and security obligations. Retention depends on the data type, sensitivity, risk, and applicable law. After a verified deletion request, we delete or de-identify covered personal data within 30 days where practicable, subject to lawful exceptions and backup cycles. Public reports that do not identify the requesting user may remain.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data. No system is completely secure, and we cannot guarantee absolute security. Contact us promptly if you suspect unauthorized account access.

International processing

We are based in the United States and may process personal data in the United States and other countries where service providers operate. Those locations may have different data-protection laws. Where required, we use lawful transfer safeguards.

Your privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to confirm whether we process your data; access it; correct inaccuracies; delete it; obtain a portable copy; and opt out of sale, targeted advertising, or qualifying profiling. We do not currently conduct the three opt-out activities. We will not discriminate against you for exercising a privacy right.

To submit a request, email [email protected] with the subject “Privacy Request.” We may verify your identity and authority. Where Delaware law applies, we aim to respond within 45 days and may extend once by another 45 days when reasonably necessary, with notice. If we deny your request, you may appeal by replying with the subject “Privacy Appeal.” We will explain our decision and provide the appropriate regulator contact when required.

Children

The service is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact us so we can investigate and delete it as required.

Changes to this policy

We may update this policy as our practices or legal obligations change. The updated date will appear above. We will provide additional notice of material changes where required.

Contact

Stryqo, Inc.
[email protected]