Privacy Policy

Effective Date: November 15, 2025
Last Updated: November 15, 2025
Website: https://www.castora.systems

1. Overview

Castora Systems ("Castora," "we," "our," or "us") is a product of Strata Wireless, LLC, a Delaware limited liability company (Entity No. B20250049387).

This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our products and services, including the Castora Systems platform and related applications.

We are committed to privacy, security, and compliance with applicable data protection laws, including GDPR, CCPA, and other relevant frameworks.

2. Information We Collect

a. Account Information

We collect basic account data such as name, email address, and password. Passwords are salted and hashed before storage — never stored in plaintext.

b. Project and Usage Data

We collect data you submit to the platform (e.g., project descriptions, documentation, and analysis inputs) to generate system and requirements analyses.

c. Technical Data

We collect IP addresses, browser type, and operating system for analytics and security monitoring.

d. Integrations

If you connect a third-party service (e.g., GitHub, Supabase, or OpenAI), we collect identifiers necessary for that integration, subject to the provider's own privacy policy.

3. How We Use Your Data

We use data to:

Operate, maintain, and improve Castora services
Authenticate users and secure access
Provide AI-generated analyses and insights
Communicate updates or respond to support requests
Fulfill legal and regulatory obligations

We never use your data—inputs or outputs—for model training or improvement.

4. Data Security

We implement strong, industry-standard protections:

AES-256 encryption at rest
TLS 1.2+ encryption in transit
Hosting and APIs through Supabase, Netlify, and OpenAI, which maintain SOC 2 Type 2 and ISO 27001/17/18/27701 certifications

Your project data is encrypted and accessible only by authorized users.

5. Sub-Processors

We rely on select service providers ("sub-processors") to operate Castora securely:

Sub-Processor	Function
OpenAI	AI inference and content generation
Supabase	Database and authentication
Netlify	Hosting and delivery
GitHub	Source control and CI/CD infrastructure

We may update this list as our infrastructure evolves; changes will be posted to this page with the revision date.

6. International Data Transfers

We store and process data primarily in the United States.

If you access Castora from outside the U.S., your information may be transferred internationally.

When required, we use Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure adequate protection.

7. Data Retention and Deletion

You may request data deletion or a "zero data retention" configuration at any time.

Upon written request, we will delete your data and provide confirmation.

For legal, security, or operational reasons, we may retain minimal records (e.g., audit logs) as required by law.

8. Children's Privacy

Castora is not directed at children under 13 and does not knowingly collect personal data from them.

If you believe a child's data has been submitted, contact [email protected] for immediate deletion.

9. User Rights (GDPR & CCPA)

Depending on your jurisdiction, you may:

Access or correct your data
Request deletion or restriction of processing
Request data portability
Opt out of data sales (we do not sell data)

To exercise these rights, email [email protected].

If you are in the EU/EEA, you may also contact your local data protection authority.

10. Cookies and Analytics

We use minimal analytics (e.g., Netlify Insights) for site reliability and product improvement.

You can disable cookies in your browser; doing so may limit functionality.

11. Data Breach Notification

In the event of a data breach impacting your information, we will notify you within 72 hours of discovery, consistent with applicable law, and outline mitigation steps.

12. Changes to This Policy

We may update this Privacy Policy periodically.

Material changes will be communicated before they take effect via email or in-app notice.

13. Contact

Strata Wireless, LLC
Product: Castora Systems
Email: [email protected]