Data Processing Agreement

Strat Consulting Limited (trading as Stratbridge) · governs the paid, server-stored Construction add-ons · last updated 16 October 2026

The core Stratbridge platform is zero-egress — your financial, vendor, item and spend data are processed in your browser and never reach our servers. This Agreement applies only to the optional, paid Construction add-ons that deliberately store data on our servers, and it is reviewed and accepted when you add one of them. It forms part of, and is governed by, the Stratbridge Terms of Service.

1. Scope & roles

This Agreement covers three optional add-ons: Claims (evidence storage), Daily Progress Reporting (DPR), and the optional DPR Vision recognition-improvement programme. For Claims and DPR content that you submit, Stratbridge acts as your processor and you are the controller. For the DPR Vision programme, controllership transitions: you are the controller of the on-device photographs, and once a pseudonymised embedding is contributed to improve the product, Stratbridge becomes an independent controller of that embedding. Vision is off by default and enabled only by the Workspace Owner.

2. What is stored on our servers — and what is not

Claims & DPR: the records and photographs you submit (evidence, notices, meter readings, progress reports) are stored so they can be shared, reviewed and retained. DPR Vision: only a numeric fingerprint (embedding) of a face-blurred photo, plus the confirmed label (e.g. "rebar fixing"). The photograph itself is never sent; the embedding cannot be viewed as, or turned back into, an image in the product, and carries no file, project, client, person, date or location. Vision and Claims run on strictly segregated stores and never cross over.

3. Sub-processors

For server-stored add-on data we use the following sub-processors, each under contractual data-protection terms:

Sub-processorPurposeRegion
NeonApplication database (account, workspace, add-on metadata)EU
RenderApplication/API hostingEU/US
Cloudflare R2Evidence object storage (Claims/DPR)EU or US — your choice at purchase
ResendTransactional email (invitations, notifications)—
StripePayments and billing—

4. International transfers

You choose the storage region for add-on data at the point of purchase. Where personal data is transferred across borders, we rely on the appropriate safeguards: the European Commission's Standard Contractual Clauses (Module 2, controller-to-processor) and, for transfers subject to UK law, the UK ICO International Data Transfer Addendum. UK → EU transfers rely on the UK's adequacy finding.

5. Retention & erasure

Claims and DPR content is retained for the duration of your active subscription and deleted (or returned) on termination in line with the Terms. DPR Vision contributions (individual embeddings) are retained for the duration of the Workspace's active subscription plus 30 days, unless withdrawn earlier; withdrawal purges them. Aggregated prototypes (averaged "centroids"), which cannot be reverse-engineered to identify a contributor, are retained as product IP.

6. Security

Data in transit is encrypted (TLS); evidence objects are reached only through short-lived, scoped signed URLs; access is restricted to your workspace; and faces are blurred on-device before any photo is sealed, uploaded, embedded or contributed.

7. Your rights & withdrawal

The Workspace Owner can enable or withdraw the Vision programme at any time, and can request export or deletion of add-on data. Requests and questions: hello@stratconsulting.co.uk.

8. Acceptance

You accept this Agreement when you add a server-stored Construction add-on. Signing up for the free platform does not require acceptance, because no add-on data is stored until you add one.