Strata Vantage, Inc. (“Strata Vantage,” “we,” “us”) builds investor-reporting and intelligence software for oil & gas fund managers and owners. This policy describes how we handle information on stratavantage.com(the “Site”), including our marketing and lead-intake forms and our free document check tool, where you can upload a document (such as a check stub, JIB, division order, AFE, or 1099) and get a plain-English report.
If you are an authenticated customer of the Strata Vantage platform at app.stratavantage.com, a separate customer agreement and data-processing terms govern how we handle data inside that platform; this policy does not displace those terms.
1. What we collect
Information you give us through forms
When you submit our demo-request, contact, or early-access forms, we collect what you fill in: typically your name, work email, fund or firm name (for fund managers), role, an approximate fund size or well count if you choose to share it, and any message you write. If you check “what you want help with” options, we record those too. We use this information to reply to you, prepare for a conversation, and improve what we build.
Documents you upload to the document check tool
If you use the document check tool, we collect the file you upload and the context you provide about it (operator, state, county, and the document type). These documents can contain sensitive information, including your financial details and, depending on the document, information about other people(for example, an operator’s name or tax identification number, or co-owners listed on a joint billing statement). You should only upload a document you have the right to share. Before we send any text we extract from a document to our AI provider, we redact full Social Security and taxpayer identification numbers to their last four digits. If you provide an email address to save your report, we collect that email and create an account for you.
Information collected automatically
When you browse the Site, we record events that let us understand funnel health and improve the site. For each event we may store:
- the page you viewed, the previous page (referrer), and any UTM parameters in the URL;
- a one-way hash of your IP address and a one-way hash of your browser’s user-agent (we do not retain the raw values);
- random anonymous identifiers we generate in your browser’s local storage so we can stitch together page views from the same visitor and session (see “Cookies and storage” below).
What we do not collect
We do not use third-party analytics, advertising pixels, or behavioral-tracking networks on this Site (no Google Analytics, no Meta pixel, no Mixpanel, no Segment). Every event lands in our own database. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not knowingly collect information from children under 13, and the Site is intended for adult business users.
2. How we use information
We use the information we collect to:
- respond to demo, contact, and early-access requests;
- read and analyze a document you upload and generate your report, and (if you save it) keep it on your account;
- email a Strata Vantage team member when a new lead comes in, and email you a sign-in link or a “your report is ready” notice when you ask us to;
- understand which pages, sources, and messages convert visitors into conversations, and improve the Site accordingly;
- detect and limit abuse, spam, and automated traffic (we rate-limit submissions by hashed IP);
- meet legal, accounting, and tax obligations where applicable.
3. Automated processing and our AI provider
To read an uploaded document, we send its contents to our AI provider, Anthropic, PBC (the maker of Claude), which extracts the facts and returns a structured result to us. Anthropic processes the document on our behalf as a service provider and, under its commercial terms, does not use content sent through its API to train its models. As noted above, we redact full tax identification numbers to their last four digits before sending extracted text.
The report is generated automatically. It is general information, not legal, tax, or investment advice, and the automated analysis does not make decisions that produce legal or similarly significant effects about you. You can always reach a person at the contact address below.
4. Who we share information with
We share information only with a small set of service providers (“sub-processors”) that help us run the Site. They process information on our behalf under their own privacy and security commitments:
- Vercel, Inc.: web hosting and edge delivery. Processes requests to the Site, including IP and user-agent, to serve pages.
- Supabase, Inc.: our managed PostgreSQL database, authentication, and file storage, where form submissions, funnel events, uploaded documents, and accounts are stored.
- Anthropic, PBC: AI document analysis, as described in Section 3.
- Resend, Inc.: transactional email delivery (lead alerts to us, and sign-in or report-ready emails to you).
- Upstash, Inc.: a managed key-value store used for rate-limiting (it sees only hashed identifiers, never document contents).
We may also disclose information when required by law, to enforce our terms, to protect rights, property, or safety, or in connection with a merger, acquisition, or sale of all or part of our business, in which case we will tell users via the Site or by email before their information becomes subject to a different policy.
5. Cookies and storage
We use a small number of strictly-necessary cookies and browser-storage items. We do not use third-party tracking or advertising cookies.
sv_intake_token: a secure, signed, HttpOnly cookie that holds your anonymous document-check session so you can return to your report. Strictly necessary for that feature.- your sign-in session cookies (set by Supabase Auth) if you create or log into an account. Strictly necessary.
sv_vid(persistent visitor ID, local storage),sv_sid(per-session ID, session storage), andsv_utm(the campaign parameters from the first URL you arrived on): random identifiers we use to understand traffic. They do not, on their own, identify you.
You can clear cookies and storage from your browser at any time, and your browser may offer an option to block site storage altogether.
6. How long we keep information
Uploaded documents and reports. If you do not save a report to an account, the report link stops working after 30 days and the unsaved document is purged on a recurring retention schedule. If you save a report to an account, we keep it until you delete it or close your account.
Form submissions are kept for as long as we have a legitimate business interest in the inquiry, typically through the life of the sales conversation and our subsequent relationship, then archived per our records-retention practice. Funnel events (page views, CTA clicks, form starts) are kept for as long as they are useful for understanding traffic and conversion, and aggregated as they age. Security audit logs are kept for a limited period and then purged.
You can ask us to delete information about you at any time. See Section 8.
7. Security
We use industry-standard safeguards: encrypted connections to and between our services (TLS), encrypted storage at our hosting and database providers, row-level data isolation so one account cannot read another’s, salted one-way hashing of IP and user-agent values, redaction of full tax identification numbers before AI processing, access controls limited to people and systems who need it, and append-only audit logging. No system is perfectly secure; if a breach affects your information, we will notify you and any regulators as required by applicable law.
8. Your rights and choices
Subject to applicable law, you can ask us to:
- tell you what information we hold about you;
- correct information that is wrong;
- delete information we hold about you, including an uploaded document;
- stop emailing you;
- export a copy of information you provided in a portable format.
Use our data request form or email hello@stratavantage.com with your request. We may need to verify your identity before acting, so that we never disclose or delete data at the request of someone other than you. We will respond within the period required by applicable law (generally within 45 days), and you may appeal a decision by replying to our response.
If you are in California
California residents may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA, including the right to know what personal information we have collected, to delete it, to correct it, to limit the use of sensitive personal information, and not to be discriminated against for exercising those rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise a right, use the form or address above.
If you are in another U.S. state with a privacy law
Residents of states with comprehensive privacy laws (for example Texas, Virginia, Colorado, and Connecticut) may have rights to access, correct, delete, and obtain a portable copy of their personal data, to opt out of targeted advertising and sale (which we do not do), and to appeal a denied request. Use the form or address above to exercise these rights.
If you are in the EEA, the United Kingdom, or Switzerland
Where the EU/UK GDPR or Swiss data-protection law applies, we process your personal information on the legal basis of (a) our legitimate interests in responding to your inquiry and running our business, (b) your consent where we ask for it (for example, when you upload a document), or (c) compliance with a legal obligation. You may have rights including access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data-protection authority.
9. International transfers
Strata Vantage is based in the United States and our service providers are primarily in the United States. If you access the Site from outside the U.S., information we collect will be transferred to and processed in the U.S., where data-protection laws may differ from those in your country.
10. Third-party links
The Site may link to third-party sites (for example, articles or regulatory sources cited in our content). We are not responsible for the privacy practices of those sites; review their policies before sharing information.
11. Changes to this policy
We may update this policy from time to time. When we do, we will update the “Effective” date at the top of this page. If the change is material, we will give reasonable notice, for example a banner on the Site or an email to people who have an active inquiry or account with us.
12. Contact us
Questions, requests, or concerns about this policy or about how we handle your information:
Strata Vantage, Inc.
Email: hello@stratavantage.com
See also our Terms of Use.