← Back to Stratify

Privacy Policy

Effective date: 10 March 2026

1. Who We Are

Stratify ("we", "our", "us") operates the Stratify platform — a B2B lead discovery service accessible at stratify.in. We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (India).

For privacy questions or requests, contact us at: privacy@stratify.in

2. Data We Collect About You (Our Users)

When you create a Stratify account, we collect:

  • +Email address — to identify your account and send service communications
  • +Password (hashed) — if you register with email/password
  • +Google account ID — if you sign in with Google OAuth
  • +Usage data — leads used per day/month, jobs run, plan tier
  • +Billing data — subscription status via Dodo Payments (we do not store card numbers)

We do not sell your personal account data to any third party.

3. Lead Profile Data We Process

Stratify discovers professional profiles from publicly available web data indexed by Google Search. We do not scrape LinkedIn directly. The data we process includes: full name, job title, company, location, company website, industry, and public profile URL — all sourced from Google search results.

When you use email or phone enrichment (Pro/Agency plans), we obtain additional contact data from third-party data brokers:

  • +Work email addresses — via Hunter.io (hunter.io/privacy-policy)
  • +Personal emails and phone numbers — via RocketReach (rocketreach.co/privacy)

This data is stored in your account and exported only by you. Stratify does not share enriched profile data with other users or third parties.

Email enrichment is blocked for profiles located in EU/EEA countries in line with GDPR.

4. How We Use Your Data

  • +To provide and operate the Stratify service
  • +To enforce usage limits based on your subscription plan
  • +To process payments via Dodo Payments
  • +To improve search relevance and profile scoring
  • +To send essential service communications (plan changes, security alerts)

We do not use your data for advertising or sell it to third parties.

5. AI Processing

Stratify uses Google Gemini (a large language model) to extract structured information from Google search result titles and snippets. Only publicly indexed text is sent to Gemini — no emails, phone numbers, or account data. Google's API terms prohibit using API inputs for model training.

6. Third-Party Sub-Processors

We share data with the following services to operate Stratify:

  • +Google OAuth — account authentication
  • +Serper.dev — Google Search API for profile discovery
  • +Google Gemini — AI-based profile data extraction
  • +Hunter.io — work email enrichment
  • +RocketReach — phone and personal email enrichment
  • +Dodo Payments — subscription billing (Merchant of Record)
  • +Railway — cloud hosting (servers and database)
  • +Vercel — frontend hosting

7. Your Rights

Under the DPDP Act 2023 and GDPR (for EU residents), you have the right to:

  • +Access — request a copy of the personal data we hold about you
  • +Correction — request correction of inaccurate data
  • +Erasure — request deletion of your account and associated data
  • +Withdraw consent — stop using the service at any time

To exercise any of these rights, email privacy@stratify.in. You can also delete your account directly from your account settings. We will process requests within 30 days.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data and associated search results are permanently deleted within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely.

Profile data discovered during searches is stored in a shared cache and automatically deleted after 60 days of inactivity (i.e. if the profile has not appeared in any search within that period). AI-parsed profile data in our temporary processing cache is automatically deleted after 7 days.

9. Security

Passwords are hashed using bcrypt. Data is transmitted over HTTPS. Access to the database is restricted to authorised services. JWT tokens expire after 24 hours.

10. Children

Stratify is a professional B2B service and is not directed at persons under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy as our services evolve. Material changes will be communicated by email or prominent notice on the platform. Continued use after notice constitutes acceptance.

12. Contact

For any privacy-related questions, requests, or concerns:
Email: privacy@stratify.in