Privacy Notice

Anquin is the operator responsible for the personal information described in this notice. This notice covers our website, study workspace, support communications, and paid subscriptions. It does not cover third-party sites you choose to visit.

Questions and privacy requests may be sent to support@strawfy.com.

Information you provide

• Account and profile information, such as your name, email address, and sign-in details.
• Study content you choose to upload or create, including notes, PDFs, scans, photographs, audio recordings, questions, answers, and generated study materials.
• Support messages and feedback.
• Billing contact details and subscription selections. Stripe processes full payment-card details; Strawfy receives limited transaction, subscription, and payment-status information.

Information created through use

• Workspace activity, feature interactions, quiz responses, and settings needed to provide and improve the service.
• Device, browser, approximate region, timestamps, referring page, and diagnostic information.
• Aggregated page-view and performance information through Vercel Web Analytics and Speed Insights.

• Provide, personalize, maintain, and troubleshoot the study service.
• Process your requests and generate notes, explanations, or practice from the material you provide.
• Manage accounts, subscriptions, payments, cancellations, and refunds.
• Respond to support, privacy, accessibility, copyright, and security reports.
• Protect the service, prevent fraud and abuse, and enforce our terms.
• Measure aggregate website use and performance.
• Meet legal, accounting, and regulatory obligations.

Where laws such as the GDPR or UK GDPR apply, we rely on:

• Contract to provide the service, account, requested AI output, and subscription.
• Legitimate interests to secure, operate, debug, and understand the service, balanced against your rights.
• Consent where required, including for optional cookies or marketing. You may withdraw consent at any time.
• Legal obligation for tax, accounting, fraud prevention, and valid legal requests.

When you request an AI feature, the content needed to complete that request may be processed by infrastructure and AI service providers acting for us. Do not upload sensitive personal information unless it is necessary for your study request.

AI output may be incorrect, incomplete, or similar to output generated for others. Our AI Policy explains these features and their limits.

We may disclose information to service providers that host the website, process requested AI features, provide security and support, or process payments. Current public-site analytics are provided by Vercel. Paid checkout will be processed by Stripe.

We may also disclose information when required by law, to protect rights and safety, during a corporate transaction, or when you direct us to do so. We do not sell personal information or share it for cross-context behavioral advertising.

When paid plans are enabled, checkout and recurring billing will be handled by Stripe. Stripe independently processes card details, billing identifiers, device information, and fraud signals under Stripe’s Privacy Policy. Strawfy does not receive your full card number or security code.

We receive the information needed to confirm payment, manage your plan, identify disputes, and issue eligible refunds.

Vercel Web Analytics provides aggregated page-view information without third-party cookies or cross-site identifiers. Speed Insights measures technical performance. Our current public site does not use advertising cookies.

If we add optional cookies or similar storage, we will update the Cookie Policy and request consent where required before using them.

We retain information only for as long as needed for the purpose collected, including while an account is active, for a reasonable period after a request, or as required for legal, tax, security, and dispute-resolution obligations. Retention depends on the type of information, its sensitivity, legal requirements, and whether it can be safely deleted or anonymized.

Deletion from active systems may be followed by removal from backups on their normal protection cycle. Some transaction records may be retained where law requires.

Depending on where you live, you may ask to access, correct, delete, restrict, object to, or receive a portable copy of personal information. You may withdraw consent and may appeal a denied request where local law provides that right. California residents may request the categories, sources, purposes, and recipients of personal information and receive equal service for exercising their rights.

Send requests to support@strawfy.com. We may verify your identity and authority before acting. You may use an authorized agent where permitted. You may also complain to your local data-protection authority.

Strawfy and its providers may process information in countries other than your own. Where required, we will use an approved transfer mechanism and appropriate contractual or organizational safeguards. Mandatory rights in your home jurisdiction continue to apply.

Strawfy is not directed to children under 13, and they may not create an account or submit personal information. If we learn that we collected personal information from a child under 13, we will take steps to delete it.

Users between 13 and the age of legal majority may use the service only with permission from a parent or legal guardian. A parent or guardian may contact support@strawfy.com about a young person’s information.

We use administrative, technical, and organizational measures appropriate to the nature of the information. No online system is completely secure, so please use a strong, unique password and avoid unnecessary sensitive content.

We may update this notice as the service or law changes. We will change the date above and provide additional notice when a material change requires it.