This policy explains the platform-level privacy model for Strada Suite customer websites and merchant operations.
Strada may process tenant account information, website configuration, product and documentation records, customer order details, support contact details, audit events, and technical logs needed to operate the platform.
Merchants control the customer information submitted through their customer websites. Strada processes that information to provide checkout, order management, invoicing support, verification, and customer communication features.
Strada does not collect or store card numbers in the manual invoice workflow. If a merchant configures a third-party payment provider, that provider handles payment data under its own terms and privacy practices. Strada may process provider identifiers, connection status, checkout references, payment status, dispute signals, webhook metadata, and audit records needed to operate the software, route workflows, collect platform fees, prevent abuse, or support lawful requests.
Data is used to operate customer websites, authenticate users, maintain tenant isolation, process orders, support compliance workflows, monitor abuse, improve product reliability, and meet legal obligations.
Strada uses tenant-scoped access controls, audit logs, and role-based access patterns. Data is retained as needed for platform operation, dispute handling, compliance records, and legal requirements.
When a merchant enables reviews, Strada may process the customer's verified account and order eligibility, rating, review text, selected public identity, consent and policy version, content flags, moderation status and reason, and audit events. Public review pages show only the rating, review content, safe display identity, publication date, and verified-customer status. Customer and order identifiers, email addresses, moderation notes, and private account details are not published.
Merchants are responsible for providing their own customer-facing privacy notices where required and for using customer data lawfully. Merchants must not represent that Strada is the seller, merchant of record, medical provider, laboratory, pharmacy, payment processor, or legal compliance owner for the merchant's storefront activity.
Strada may review, retain, and disclose relevant operational records when needed to investigate misuse, enforce platform rules, support payment-provider risk review, respond to disputes or chargebacks, comply with law, protect customers, or protect Strada, Stripe, connected providers, infrastructure providers, and the public.