Privacy Policy

Last updated: 23 March 2026

Strata ("we", "our", "us") operates an AI-powered assistant that helps property agents in Singapore manage buyer and tenant inquiries via WhatsApp.

Information We Collect

• WhatsApp phone number and display name
• Messages exchanged with the assistant
• Property preferences and qualification data you provide (budget, move-in date, etc.)
• Email address (if provided for calendar invites)

How We Use Your Data

• To respond to your property inquiries
• To qualify and match you with suitable properties
• To schedule viewings and send calendar invites
• To improve our service

Data Sharing

Your data is shared only with the property agent you are communicating with. We do not sell your personal data to third parties.

Third-Party AI Service

We use Anthropic's Claude API (a third-party AI service) to process WhatsApp conversation messages and generate responses to property inquiries. The AI receives conversation history and property listing context to provide relevant replies. No Google user data (calendar events, availability, tokens, or account information) is sent to the AI service. Google Calendar and AI processing are entirely separate systems.

Google User Data

When you connect Google Calendar, we access your calendar events and availability solely to schedule property viewings and send calendar invites on your behalf. We request only the scopes required for this functionality: calendar read access and event management. We do not access, store, or share any other Google account data.

Strata's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide the calendar scheduling functionality of our application.
• Google user data is not used for serving advertisements.
• Google user data is not sent to any AI service or machine learning model.
• Google user data is not sold, rented, or shared with third parties.

Data Protection

We implement the following measures to protect your sensitive data:

• All data is encrypted in transit using TLS 1.2+ (HTTPS) for every connection between your browser, our servers, and third-party services.
• Data at rest is encrypted using AES-256 encryption on our database infrastructure (Supabase, hosted on AWS).
• Authentication tokens (WhatsApp, Google Calendar) are stored encrypted and are never exposed to client-side code.
• Access to production systems is restricted to authorised personnel using multi-factor authentication.
• We conduct regular reviews of access permissions and revoke credentials that are no longer needed.

Data Storage & Retention

Your data is stored securely on Supabase (hosted on AWS in cloud infrastructure with SOC 2 Type II compliance). We retain conversation data for up to 12 months after your last interaction. Google Calendar tokens are retained only while your account is active and are deleted upon disconnection or account deletion.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us through our website. Upon request, we will delete all stored data including conversation history, credentials, and any Google user data within 30 days.

Contact

Strata is operated by Uniq Labs Pte Ltd, Singapore. For privacy inquiries, contact us through our website.