data retention · Privacy Policy
stratify policy finding
“ Stratify follows strict data minimization and retention standards across all integrations: We request only the minimal data necessary to perform campaign management and analytics. Integration tokens and credentials (e.g., OAuth tokens from LinkedIn, Google, HubSpot, Salesforce) are encrypted at rest using AES-256 and stored exclusively in AWS Secrets Manager. Tokens are never stored in our application database (Supabase) and are automatically refreshed or rotated as required. Temporary campaign data and social activity metrics retrieved from advertising platforms are cached only as needed to complete requests and are deleted or refreshed within 24–48 hours in accordance with API data storage requirements. Redis is used only for ephemeral caching and queuing — it does not store PII or any persistent records. Campaign-level metrics (e.g., CTR, spend, cost per lead) may be retained in aggregated form for up to 90 days, configurable per tenant. Logs and analytics data are scrubbed of PII and retained for no more than 30 days. Data is never exported, redistributed, or combined with unrelated datasets to build profiles, leads, or audience segments.”
- Document
- Privacy Policy
- Captured
- 2026-08-11
- Location
- § 3 (Data Handling and Storage Practices)
- Snapshot SHA-256
- ec9df8d4b90a2b1613bc8dbfa774c9b35ffea2e2a11532d24c5f4ccb3f0c2d01
Informational only, not legal advice. Terms change; verify the source and capture date.