Privacy Policy

1Who we are

Strybai (the app at app.strybai.com, this website and the public knowledge catalogs it hosts) is provided by:

ABSS Analytics
Ch. de Louvain 1220, 1200 Brussels, Belgium
Enterprise / VAT number: BE0804.852.055
privacy@strybai.com

Questions about privacy, or requests about your data: write to privacy@strybai.com.

2Our two roles

• Controller for data about our own customers and visitors: your Strybai account, billing, support conversations, this website and its contact form.
• Processor for what our customers put into their workspaces: their accounts, contacts, emails, deals, projects and knowledge. The customer (the company that owns the workspace) decides what goes in and why, and we process it only to provide Strybai, under our Terms. If you are a contact of one of our customers, they are your first point of contact; we help them answer your request.

3What we collect

If you use Strybai

• Account: name, email address, profile photo if you add one, workspaces you belong to and your role, sign-in and two-factor settings.
• Workspace content (on behalf of your company): accounts, contacts and their business details, activities and notes, emails received through your inbound address, outreach sent from Strybai and its delivery status, deals, Build plans and tasks, time entries, knowledge entries and uploaded files.
• Usage and technical data: pages used, IP address, browser and device, error reports (the page, the browser and the error message, never form contents or passwords), and a log of AI requests made by your workspace (what feature, when, how much) to manage AI allowances.

If you receive outreach sent with Strybai

The sending company’s workspace holds your business email address and the messages sent to you. Every outreach email carries a one-click unsubscribe link; when you use it, the sender stops emailing you and your address is kept only on their suppression list, so it isn’t emailed again. If the sender has switched it on, we record whether an email was opened or a link clicked.

If you visit this website or a public knowledge catalog

• Visit statistics on strybai.com, counted with Vercel Web Analytics: no cookies, nothing stored on your device, no tracking across sites.
• The contact form and beta waitlist: what you type (name, email, company, message), stored in our own Strybai workspace to reply to you.
• Questions you ask a catalog’s “Ask” box are answered by AI from that catalog’s published entries; we keep basic technical data to prevent abuse.

4Why we use it, and on what basis

We don’t sell personal data, we don’t show ads, and we don’t use workspace content to train AI models.

5AI features

Strybai’s AI features use Google’s Gemini API. When you use one, the text it needs (for example an email to summarise, or an account’s profile to draft outreach) is sent to Google to produce the answer. Under the API terms we use, Google doesn’t use these requests to train its models. Some research features (like finding prospects) use Google Search to look up public company information. AI output can be wrong: review it before you rely on it.

6Connected calendars (Google and Microsoft)

Each teammate can connect their own Google or Microsoft 365 calendar. Strybai asks for read-only calendar access only, never email.

• What we read: events from roughly the last and next 30 days, to find meetings with your accounts.
• What we keep: for meetings with your accounts, the title, time and attendees, added to that account’s timeline in your workspace. We don’t store event descriptions, notes or attachments, and we don’t keep events that don’t involve one of your accounts.
• What we never do: create, change or delete calendar events; read your email; share calendar data with anyone outside your workspace; use it for advertising; or use it to train AI models.
• Tokens that let Strybai read your calendar are stored encrypted (AES-256-GCM) and only our servers can use them.
• Disconnecting (Settings → Integrations) deletes the stored tokens straight away and, for Google, revokes them. You can also remove Strybai from your Google Account (Security → Third-party access) or at myapps.microsoft.com.

Strybai’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7Who processes data for us

We use a small number of providers, each under a data processing agreement and only for what’s described here:

• Supabase — database, sign-in and file storage. Hosted in the EU (Ireland).
• Vercel — hosting of the app and website; app servers run in the EU (Dublin). Also the cookieless visit statistics on strybai.com.
• Google — the Gemini API for AI features (see section 5), and Google Calendar when you connect it.
• Microsoft — Microsoft 365 calendar, when you connect it.
• Resend — sending outreach and account emails, and receiving email at your workspace’s inbound address.

Integrations you choose to connect (such as GitHub, Jira, Slack, Microsoft Teams, LinkedIn, Clockify, Toggl or your own webhooks) receive or send only what that integration needs, under their own terms. When you publish a knowledge catalog, we notify search engines of its public page addresses (IndexNow) so they appear in search faster.

Some providers are based outside the EU or may access data from there. Where that happens, transfers are covered by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses.

8How long we keep it

• Accounts and workspace content: as long as the account or workspace is active. When a workspace is deleted, its content is deleted, apart from backups, which roll over within 30 days.
• Outreach suppression lists (people who unsubscribed or bounced): as long as the workspace exists, so they’re never emailed again.
• Error reports and security logs: up to 90 days.
• Webhook delivery logs: 30 days.
• Contact form and waitlist messages: up to 24 months after our last exchange, unless you become a customer.
• Invoices, once paid plans start: as long as Belgian accounting law requires (currently 10 years).

9Your rights

Under the GDPR you can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

Write to privacy@strybai.com; we reply within a month. If your data is in a customer’s workspace, we’ll pass your request to that customer and help them answer it. You can also complain to the Belgian Data Protection Authority (dataprotectionauthority.be) or the authority where you live.

10Security

Data is hosted in the EU and encrypted in transit (HTTPS). Workspaces are isolated from each other in the database, connection tokens and integration secrets are encrypted, access by our team is limited to what support needs, and two-factor sign-in is available. No system is perfectly secure; if a breach affects your data, we’ll inform you and the authorities as the GDPR requires.

11Cookies and local storage

The app uses only what it needs to work: a sign-in cookie that keeps you logged in, and your browser’s local storage for preferences such as the screen you last used. This website and the public catalogs set no tracking or advertising cookies, so there’s nothing to accept.

12Children

Strybai is a business service and isn’t meant for anyone under 16.

13Changes to this policy

When we change this policy, we update the date at the top. If a change matters for how we use your data, we’ll tell account holders by email or in the app before it applies.

14Contact

ABSS Analytics
Ch. de Louvain 1220, 1200 Brussels, Belgium
Enterprise / VAT number: BE0804.852.055
privacy@strybai.com