Privacy Policy

This policy explains what data Anchor CRM (operated by Stratalace) collects, how it is used, and the choices you have. It covers both your account data and the customer records your organization stores in the platform.

Account data: your name, email address, and authentication details when you sign up or are invited to an organization.

Customer data: the contacts, companies, deals, notes, invoices, and related records your organization creates in the CRM. This data belongs to your organization — we process it only to provide the service.

Usage data: standard technical logs (IP address, browser, pages visited) used for security monitoring, debugging, and improving the product.

We use your data to operate and secure the service: authenticating you, scoping data to your organization, sending transactional email (invites, notifications you enable), and diagnosing problems.

We do not sell your data, and we do not use the customer records you store in Anchor CRM for advertising or to train models.

All CRM records are scoped to your organization, enforced at the query layer and through role-based access control. API access requires scoped keys that you can revoke at any time.

Data is encrypted in transit. Access to production systems is restricted, and security headers and rate limiting protect the application surface.

Records you delete in the app are soft-deleted and recoverable for a limited window, then permanently removed. When an organization is deleted, its data is purged from active systems.

You can export your data or request full deletion by contacting support.

We use cookies for authentication sessions and remembering preferences such as your active organization and theme. We do not use third-party advertising cookies.

We may update this policy from time to time. Material changes will be communicated to account owners before they take effect.

Privacy questions or data requests can be sent to support@stratalace.com.