> legal

Privacy policy

Last updated 7 November 2026

Stride Innovations is the controller of personal data processed through Caiflo. This policy explains what we collect and why, under UK GDPR.

What we collect

Account details: name, company, email, password (stored only as a secure hash), account type and two-factor settings.
Your content: models, assumptions, idea checks, comments, and spreadsheets you upload for X-ray (deleted once read).
Sharing records: who you shared a model with, when it was opened, and comments.
Usage and security logs: sign-in events, usage counts for drafts and research (for fair use and cost control), and error logs.

Why we use it

To provide the service you signed up for (contract).
To keep accounts secure, prevent abuse and control costs (legitimate interests).
To send account emails: confirmation, password reset, share invitations and comment notifications. We do not send marketing email without your consent.

Who processes it

Caiflo runs on Microsoft Azure in the UK (UK South): hosting, database, data-processing services and email delivery. Microsoft acts as our processor. Your content is never used to train third-party models. We do not sell personal data.

Cookies

We use only essential cookies: to keep you signed in, protect forms against forgery, and remember investor access to a shared model. We do not use advertising or analytics cookies.

How long we keep it

We keep your account and content while your account is open. When you delete your account, we delete your personal data and content, except records we must keep for security, accounting or legal reasons.

Your rights

You can ask to access, correct, export or delete your data, or object to how we use it. You can download your account data and delete your account from the account page. You can also complain to the Information Commissioner's Office (ico.org.uk).