Privacy Policy

Sraat.com ("Sraat", "we", "us") is the data controller for the personal data processed through this website and the SRAAT Daily Card service. You can contact us at info@sraat.com.

• Account data — name, email address, password hash, language preference.
• Delivery data — the email address and (optional) WhatsApp number to which we send your Daily Card.
• Brand data (paid plan) — logo, colours, fonts and links you upload.
• Billing data — processed and stored by our payment provider Paddle. We receive subscription status, last-four card digits and country, but never your full card number.
• Usage & technical data — IP address, browser/device type, pages visited, error logs.
• Support correspondence — messages you send us via email or the contact form.

• To deliver the Daily Card and operate the service;
• To process payments and manage your subscription (via Paddle);
• To respond to support requests and improve the service;
• To send essential service emails (receipts, security alerts, policy changes);
• To detect, prevent and address fraud, abuse and security incidents;
• To comply with legal obligations.

• Contract — to provide the service you signed up for.
• Legitimate interests — to keep the service secure, prevent abuse and improve our product.
• Consent — for optional marketing emails (you can withdraw at any time).
• Legal obligation — to keep accounting and tax records.

We share personal data only with the processors needed to run the service:

• Paddle.com Market Limited — payment processing & merchant of record.
• Email delivery providers — to send Daily Cards and transactional emails.
• WhatsApp / messaging providers — where you have enabled WhatsApp delivery.
• Cloud hosting & database providers — to host the service and store your data securely.
• Analytics & error monitoring — privacy-respecting tools to keep the service reliable.

We do not sell your personal data, and we do not share it for third-party advertising.

Some of our processors are located outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision.

We keep your account and delivery data for as long as you have an active subscription and for a reasonable period after cancellation so you can reactivate. Billing records are kept for at least 6 years to comply with UK tax law. Support correspondence is kept for up to 3 years.

Under UK and EU data protection law you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Have your data erased (where applicable);
• Restrict or object to processing;
• Receive a portable copy of your data;
• Withdraw consent at any time for processing based on consent;
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority.

To exercise any of these rights, email info@sraat.com. We respond within one month.

We use a small number of strictly necessary cookies and local-storage entries to keep you signed in, remember your language and theme preferences, and protect against cross-site request forgery. We do not use third-party advertising or cross-site tracking cookies.

Our service is not directed at children under 13 (or under 16 in jurisdictions that require it). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We use industry-standard safeguards including TLS encryption in transit, encrypted databases at rest, password hashing, role-based access control and regular backups. No system is perfectly secure; please use a strong, unique password and contact us immediately if you suspect your account has been compromised.

We may update this policy from time to time. We will update the "Last updated" date above and, for material changes, notify active subscribers by email.

For any privacy question or to exercise your rights, email info@sraat.com or use our contact page.