Privacy Policy

1. Introduction

STRATIFLUX COMPANY LIMITED ("Stratiflux", "Company", "we", "our", "us") operates stratiflux.com, the Academy portals, in-browser labs, and paid tools on this site (collectively, the "Service"). StratiSell is a separate product with its own notice at stratisell.com/privacy.

This policy is governed by the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive (GAID) 2025. The General Data Protection Regulation (GDPR) also applies where we process personal data of EU/EEA residents.

Data controller: STRATIFLUX COMPANY LIMITED (RC 8282887), Plot 182, 44 Crescent, CITEC Villas, Victoria Court, Gwarinpa Estate, Abuja, FCT, Nigeria.

Data Protection Officer: Emmanuel Adeleke. [email protected]

Supervisory authority (Nigeria): Nigeria Data Protection Commission (NDPC), ndpc.gov.ng.

2. Information We Collect

Depending on how you use the Service, we may collect the following categories:

• Account and identity data: Name and email address when you register for a portal or tool account.
• AI chat and Lab Copilot data: Prompts, replies, and sandbox command/exit-code context needed to coach or answer you.
• Payment data: For paid tools, the payment provider collects card details. We receive payment status, amount, and a provider reference, not your full card number.
• Newsletter: Email address if you subscribe.
• Event RSVP data: Name, email, phone, and dietary notes you submit for events.
• Usage and technical data: IP address, browser or device characteristics, timestamps, and standard server logs.

3. Lawful Basis (NDPA and, where applicable, GDPR)

We process personal data on the following bases:

• Contract: Creating and managing your account, delivering labs, portals, and paid tools you request.
• Consent: Newsletter sends, optional analytics cookies, and AI chat you choose to use.
• Legitimate interests: Security, fraud prevention, and keeping the Service reliable, balanced against your rights.
• Legal obligation: Tax, accounting, and regulator requests under Nigerian law.

Where we rely on consent, you may withdraw it at any time without affecting processing that already happened. Withdrawal does not delete records we must keep for tax or dispute purposes.

4. How We Use Your Information

We use personal data to:

• Provide, operate, and maintain the Service and your account.
• Process AI chat and Lab Copilot requests. OpenAI generates replies through Stratiflux's API account. We do not use those chats to train a public Stratiflux model.
• Take payment for paid tools through Paystack (NGN) or Flutterwave (USD/EUR) where those tools are enabled.
• Send transactional messages and, where you subscribed, newsletter emails.
• Manage event registrations.
• Monitor security, enforce our terms, and comply with legal obligations.

We do not sell your personal data. We share data only as described here or when required by law.

5. Third-Party Processors

We use service providers who process personal data on our instructions:

• OpenAI (United States): AI chat and Lab Copilot inference.
• Postmark (United States): transactional and newsletter email.
• PostHog (European Union / configured region): product analytics only after you choose Accept all on the cookie banner.
• Paystack (Nigeria) and Flutterwave (Nigeria / Global): paid-tool checkout.
• Cloudflare (global edge): CDN, TLS, and bot protection.
• Oracle Cloud Infrastructure and Google Cloud Platform: hosting in the regions we configure.

We may also disclose information if required by law, regulation, or to protect the rights, safety, or property of Stratiflux, our users, or others.

6. International Data Transfers

Some processors (OpenAI, Postmark, OCI, Cloudflare) handle data outside Nigeria, including the United States. Under NDPA Part VIII we document a transfer ground for each route and review it with a qualified adviser. A foreign contractual clause is not an NDPC approval. For EU/EEA data we also use Standard Contractual Clauses where required.

7. Data Retention

We retain personal data only as long as necessary for the purposes described:

• Account data: While your account is active. After a verified deletion request we delete eligible account data within thirty (30) days unless a longer period is required by law.
• AI chat history: Ninety (90) days, then purged unless a legal hold applies.
• Newsletter: Until you unsubscribe or we end the list.
• Payment records: At least seven (7) years where Nigerian tax and accounting rules require it.

To request deletion or other rights, email [email protected].

8. Your Rights and SNAG

Under the NDPA 2023 and, where applicable, the GDPR, you may request access, correction, erasure, restriction, portability, objection, withdrawal of consent, and human review of a solely automated decision that materially affects you. You may lodge a complaint with the NDPC or your local authority.

Email [email protected] with the subject "Data Privacy Complaint" for the Standard Notice to Address Grievance (SNAG) path. We acknowledge within 7 business days and respond substantively within 30 days of a verifiable request.

9. Cookies

Essential cookies keep you signed in (for example the portal session cookie). Analytics cookies (PostHog) load only if you choose Accept all. Necessary only leaves analytics off. We do not currently load advertising pixels on this site. You can change your choice by clearing site data for stratiflux.com, which shows the banner again.

10. Security of Your Information

We implement appropriate technical and organizational measures designed to protect personal data, including encryption in transit where appropriate. No method of transmission or storage is completely secure.

11. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal information from children. If you believe we have, contact [email protected] and we will delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the Last Updated date above. Material changes may be communicated through the Service or by email where required by law.

13. Contact Us

For questions about this policy or to exercise your rights:

Email: [email protected]