We use cookies

    This site uses necessary technical cookies and profiling cookies to offer you a better experience and show you personalized content. Learn more

    StrateCo - AI Marketing PlatformStrateCo - AI Marketing Platform
    Start free
    Back to home

    Privacy Policy

    Last updated: 15 Gennaio 2026

    1. Introduction

    Agentic Applications S.r.l. ("we", "our" or "Company"), as data controller, is committed to protecting the privacy of StrateCo service users. This Privacy Policy describes how we collect, use, store and protect users' personal data in compliance with Regulation (EU) 2016/679 (GDPR) and applicable Italian legislation.

    2. Data Controller

    The Data Controller is:
    Agentic Applications S.r.l.
    P.IVA e C.F.: 04346821202
    Email: privacy@strateco.ai

    3. Data Collected

    We collect the following categories of personal data:

    • Identification data: name, surname, email address, phone number
    • Usage data: information about how you use our service, pages visited, features used
    • Technical data: IP address, browser type, operating system, log data
    • Payment data: information necessary to process payments (managed through secure third-party providers)

    3bis. Third-party service integrations and user data

    StrateCo integrates with various third-party services via OAuth 2.0 protocol to provide analytics, publishing and management features. The user explicitly authorizes each integration and can revoke it at any time.

    Google Services

    StrateCo may access the following Google services, with user consent:

    • Google Search Console (webmasters.readonly) — data on search queries, impressions, clicks and website positioning
    • Google Ads (adwords) — data on advertising campaigns, spending, performance and conversion metrics
    • Google Analytics (analytics.readonly) — data on traffic, user behavior and website metrics
    • Google Drive (drive.file, drive.readonly) — access to files selected by the user for content analysis

    The use of data received from Google APIs complies with the Google API Services User Data Policy, including Limited Use requirements.

    Meta Services (Facebook, Instagram, Meta Ads)

    StrateCo may access the following Meta services, with user consent:

    • Instagram (instagram_business_basic, instagram_business_content_publish, instagram_business_manage_comments) — automatic publishing of posts, Reels and carousels, comment management, and viewing business profile Insights
    • Facebook Pages (pages_show_list, pages_read_engagement, pages_manage_posts, business_management) — post publishing, engagement reading and business page analytics
    • Meta Ads (ads_read, business_management) — data on advertising campaigns, spending, performance, CPM, CPC and ROAS

    LinkedIn Services

    StrateCo may access the following LinkedIn services, with user consent:

    • LinkedIn Profilo (openid, profile, email, w_member_social_feed) — publishing posts from the user's personal profile
    • LinkedIn Pagina Aziendale (r_organization_social_feed, w_organization_social_feed, rw_organization_admin) — publishing posts and viewing company page analytics

    Use of third-party service data

    Data from the above services is used exclusively to:

    • Display performance reports and dashboards within StrateCo
    • Generate analysis and recommendations through the platform's AI agents
    • Publish content on social platforms on behalf of the user, when expressly requested
    • Synchronize data in the RAG (Retrieval-Augmented Generation) system to provide contextualized responses and analysis

    Sharing, transfer and disclosure of third-party service data

    User data from third-party services may be shared with the following sub-processors, exclusively for the provision of the StrateCo service:

    • OpenAI (OpenAI LP, USA): data may be sent as context to APIs to generate analysis and recommendations. OpenAI operates with a zero-training policy on API data — data is not used to train public models.
    • Anthropic (Anthropic PBC, USA): data may be sent as context to APIs to generate analysis and recommendations. Anthropic operates with zero data retention and zero-training policies on API data.
    • Supabase (Supabase Inc., USA): used as a database for secure storage of synchronized data and encrypted access tokens.

    User data from third-party services is NOT:

    • Sold to third parties
    • Used for own or third-party advertising purposes
    • Shared with parties other than those listed above
    • Used to train artificial intelligence models

    Retention and deletion of third-party service data

    Data synchronized from third-party services is retained for the duration of the contractual relationship. The user can disconnect any integration at any time through project settings, resulting in deletion of synchronized data and revocation of access tokens. The user can also revoke StrateCo's access directly from their account settings on each platform:

    • Google: myaccount.google.com/permissions
    • Meta/Facebook/Instagram: facebook.com/settings?tab=business_tools
    • LinkedIn: linkedin.com/psettings/permitted-services

    3ter. Chrome Extension

    StrateCo offers a Chrome Extension that adds a side panel to the browser. The Extension collects and uses the following data:

    • Authentication token: stored locally in chrome.storage.local to keep the user logged in. Never transmitted to third parties.
    • Active tab URL and title: read to display the current page in the panel and recognize user projects. Not stored or transmitted unless the user explicitly triggers an action.
    • Page text content: extracted from the current page and sent to the StrateCo backend only when the user clicks an action (e.g. Summarize, Analyze). Not collected passively.
    • User preferences: selected project and UI theme saved in chrome.storage.local.

    The Extension does not collect browsing history, form data, or any data from pages the user has not explicitly requested to analyze.

    3quater. Google user data

    When you connect a Google account, StrateCo accesses only the data needed for the feature you use:

    • Google Analytics 4 (scope analytics.readonly): the list of your GA4 properties and aggregated reports (sessions, users, conversions, revenue, events, devices, channels, landing pages, dates) of the property you choose, to generate the funnel and acquisition analysis you request.
    • Google Ads (scope adwords): used by the Google Ads connector as described in the app.

    Access to Google Analytics is read-only: we never create, modify or delete data in your Google accounts. We store the OAuth tokens needed to access your data on your request, and the reports you generate inside your project. We do not sell Google user data, do not share it with third parties except the service providers needed to run StrateCo, and do not use it for advertising. You can disconnect a Google account at any time from Connectors, and revoke access at https://myaccount.google.com/permissions; on request we delete the stored data.

    StrateCo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

    4. Purpose of Processing

    Your personal data is processed for the following purposes:

    • Provision and management of the StrateCo service
    • Creation and management of user accounts
    • Payment processing and invoicing
    • Service-related communications (updates, changes, support)
    • Service improvement and statistical analysis
    • Compliance with legal and contractual obligations
    • Direct marketing (with explicit consent)

    5. Legal Basis

    Data processing is based on:

    • Contract performance: for the provision of the requested service
    • Consent: for marketing activities and promotional communications
    • Legitimate interest: for service improvement and fraud prevention
    • Legal obligation: to comply with tax and regulatory obligations

    6. Data Retention

    Personal data is retained for the time necessary to pursue the purposes for which it was collected and in any case no longer than the terms provided by law. Account data is retained for the duration of the contractual relationship and for the following 10 years as required by tax regulations.

    7. Data Subject Rights

    You have the right to:

    • Access your personal data
    • Request rectification of inaccurate data
    • Request erasure of data ("right to be forgotten")
    • Restrict data processing
    • Object to processing
    • Request data portability
    • Withdraw consent at any time
    • Lodge a complaint with the Italian Data Protection Authority

    To exercise your rights, contact us at: privacy@strateco.ai

    8. Cookies and Tracking Technologies

    Our website uses technical cookies necessary for operation and analytical cookies to improve user experience. For more information about cookies used, please refer to our Cookie Policy.

    9. Data Security

    We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction or disclosure. Data is encrypted during transmission and storage.

    10. Changes to Privacy Policy

    We reserve the right to modify this Privacy Policy at any time. Changes will be published on this page with an indication of the last update date. We encourage you to periodically review this page.

    11. Contact

    For any questions regarding the processing of your personal data, you can contact us:
    Email: privacy@strateco.ai