Strayl Cloud Logo

PRIVACY POLICY

Effective date: 17 October 2025

Contact: alemzhan@strayl.dev

About Strayl Cloud

Strayl Cloud is a Memory-as-a-Service platform for AI developers. We provide persistent memory storage, hybrid search capabilities, and secure data management for AI agents. This policy explains what information we collect, why we process it, how long we keep it, and your choices.

Information We Collect

Account & Authentication

  • Supabase Auth stores your email, password (hashed), OAuth identifiers, session tokens, and metadata.
  • When you request account deletion we cascade-delete every linked table and then remove the Supabase Auth user.

Memory Data & AI Agent Information

  • Memory entries, embeddings, metadata, and search indices are stored to provide persistent memory for your AI agents.
  • API usage logs, request/response data, and performance metrics are collected to optimize service delivery.
  • Agent configurations, memory schemas, and access patterns are stored to improve search accuracy and relevance.

Usage Metrics & Analytics

  • API call counts, response times, error rates, and bandwidth usage are logged for service optimization.
  • Search queries, retrieval patterns, and memory access frequencies are tracked to improve hybrid search algorithms.
  • Billing metrics including storage usage, API calls, and compute costs are recorded for accurate billing.

Subscriptions & Payments

  • Payment information, subscription tiers, usage limits, and billing history are stored for account management.
  • We do not process card data directly; billing is handled by secure payment processors. We keep transaction records and status.

Security & Access Logs

  • Authentication attempts, API access logs, and security events are monitored for abuse prevention.
  • IP addresses, user agents, and request metadata are logged for security analysis and rate limiting.

How We Use Information

  • Authenticate you, maintain sessions, and provide secure access to your memory data.
  • Store, index, and retrieve memory entries using hybrid search (exact matching and semantic retrieval).
  • Generate embeddings, process search queries, and optimize memory retrieval performance.
  • Monitor usage patterns to enforce subscription limits and prevent abuse.
  • Improve service reliability, performance, and search accuracy through analytics.
  • Provide customer support and troubleshoot technical issues.

Data Retention & Deletion

  • You can delete individual memory entries at any time through our API or dashboard.
  • Account deletion triggers a cascade that removes all memory data, usage metrics, and authentication records.
  • Usage logs and billing records are retained as long as needed for accounting, abuse prevention, and regulatory obligations.
  • Backup data may be retained for up to 30 days after deletion for disaster recovery purposes.

Third Parties & International Transfers

We share data with service providers solely to deliver the features you request:

  • Supabase (database, authentication, storage, serverless functions).
  • OpenAI (embeddings generation and semantic search).
  • Payment processors (subscription billing and transaction processing).
  • Cloud infrastructure providers (hosting, CDN, and data processing).
  • Analytics services (usage monitoring and performance optimization).

These providers may process data in jurisdictions outside your home country. By using Strayl Cloud you consent to those transfers.

Security

  • All data transmission uses TLS encryption; API calls are protected with JWT tokens.
  • Memory data is encrypted at rest using industry-standard encryption algorithms.
  • Access controls and rate limiting prevent unauthorized access and abuse.
  • We monitor usage patterns for security threats and reserve the right to suspend accounts that violate our terms.

Your Rights & Choices

  • Access and export: contact us to request a copy of your stored memory data and account information.
  • Correction: update your profile information or memory entries through our API or dashboard.
  • Deletion: delete individual memory entries or your entire account; we remove all associated data promptly.
  • Opt-out: you may disable specific features or cancel your subscription at any time.

Children

Strayl Cloud is not directed to children under 13. If we learn that we collected personal data from a child, we will delete it promptly.

Changes

We may update this policy to reflect new features or legal requirements. We will change the effective date above and, where appropriate, notify you via email or through our service.

Contact

Questions or requests? Email alemzhan@strayl.dev.

© 2025 Strayl. All rights reserved.