Legal

STRIDE - PRIVACY POLICY

Effective Date: 13th of February 2026

Last Updated: 16th of February 2026

Stride respects your privacy and processes personal data in accordance with the GDPR, Swedish law, and other applicable laws.

1. Data Controller

Stride is the data controller for account and billing data.

For Customer Data uploaded by organizations, Stride acts as a data processor.

Contact: privacy@strideapp.dev

2. Data We Collect

A. Account Data

Name
Email address
Organization role
Login metadata

B. Billing Data

Processed by Stripe. We do not store full payment details.

C. Usage Data

Log data
Access timestamps
Audit events

D. Analytics Data

We use Google Analytics and Google Consent Mode to measure product usage.
In EEA/UK/CH regions, analytics are off by default until you opt in.
In other regions, analytics may be enabled by default unless you change your preference.
You can change your choice anytime from Cookie preferences in the user menu.

3. Legal Basis for Processing

We process personal data based on:

Performance of contract (Art. 6(1)(b) GDPR)
Legitimate interest (service improvement, security)
Legal obligation (accounting, compliance)

4. How We Use Data

We use data to:

Provide and maintain the Service
Authenticate users
Process payments
Improve functionality
Ensure security

We do not sell personal data.

5. Subprocessors

Stride uses trusted subprocessors to operate the Service. A current list is available at:

/subprocessors

These providers may process personal data as part of delivering infrastructure, payment processing, analytics, and email services.

6. International Transfers

Some subprocessors are located outside the European Economic Area.

Where applicable, data transfers rely on:

Standard Contractual Clauses (SCCs)
Adequacy decisions
Contractual safeguards

7. Data Retention

We retain:

Account data while active
Audit logs as necessary for governance integrity
Billing records as required by law

Organizations control deletion of their own Customer Data.

8. Your Rights (GDPR)

You may:

Request access
Request correction
Request deletion (where applicable)
Object to processing
Lodge a complaint with a supervisory authority