Security & trust
Your data stays yours, and stays separated.
Tenant isolation by design — not purchased certification badges.
Tenant isolation at the database
Workspace data is separated with row-level security policies.
Secure account architecture
Elevated DB access never ships to the browser; membership verified via httpOnly sessions.
Human approval for consequential work
Publishing, spend, and outreach can pause for explicit approval.
Activity evidence & audit trail
Operational progress and audit intake produce inspectable workspace records.
Operational controls
You control what Stratxcel can access
Connected accounts use scoped permissions you grant.
You can request data deletion
Deletion requests are handled through documented legal routes.
Nothing publishes without your rules
Social Autopilot stays inside your autonomy and approval settings.
Payments run through Razorpay
Card and UPI details are handled by Razorpay — not stored in app code.
You own your business data
You remain the legal owner of your domain and business records.
Data handling
No formal retention schedule or sub-processor list published yet. No SOC 2, ISO 27001, HIPAA, or PCI claims unless formally obtained.