Privacy Policy

Last updated October 25, 2026

This policy explains what Strelva collects, what we do with it, who helps us run Strelva, and how you can see, download or delete your information. It covers strelva.com, the Strelva workspace, and the websites and other Systems Strelva runs for businesses.

What we collect

Account details. Your email address, and your name and photo if you sign in with Google. When you sign up we record when you accepted these terms and which version.
Business content. What you or your agency add to a business: its details, website text and images, Systems, records, requests, approvals and history.
Connected accounts. If you connect Google, we receive what you allow, such as your Google Business Profile, Search Console, Analytics or Calendar data. If you connect Instagram, we receive your account's profile and posts as described under Instagram data below.
Visitors to the Systems you run. When someone books, sends an inquiry or pays through one of your Systems, we store what they submit for you.
Payments. Stripe handles card details. We keep the plan, payment status and Stripe references, never the full card number.
Usage and device data. Pages visited, actions taken, IP address, browser, and error reports, so we can keep Strelva working and secure.
The free check. If you check a website without an account, we read that public website and keep the report.

How we use it

To run Strelva: sign you in, store and show your business, run your Systems, and do the work you ask for.
To prepare changes with AI and wait for your approval before they go live.
To bill paid plans and send receipts.
To send you sign-in links and messages about your account and your business. We don't send cold marketing email.
To keep Strelva secure, prevent abuse, fix bugs and understand which parts get used.
To meet legal obligations.

We don't sell personal information, and we don't use your content to train our own AI models.

AI

When Strelva drafts, reads or answers something for you, the relevant content is sent to an AI model provider, today mainly Google Gemini through Google's API, to produce the result. We may also use a backup provider if the main one fails; it is listed on the subprocessors page when it is in use. Providers process that content to return the answer to us.

Google account data

Strelva's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

What we access. Only what you allow when you connect Google, for the businesses you connect it to:

Google sign-in: your name, email address and photo, to create and sign in to your account.
Google Business Profile: your listing details, reviews and posts, so Strelva can show them, draft review replies and posts, and publish the changes you approve.
Search Console (read-only): the searches your site appears for, its clicks and positions, and whether Google has indexed its pages, so we can report how people find you and suggest fixes.
Google Analytics (read-only): visitor numbers, sessions, top pages and traffic sources for your website, for your reports.
Google Calendar: your list of calendars and when you are busy, so bookings don't clash with your schedule, and the appointments booked through your Systems, which Strelva adds to, moves on or removes from the calendar you choose.

How we use it. Only to provide the features you turned on for that business. Changes to your Business Profile are made only when you approve them, or when you switch on automatic review replies for that business. We don't use Google data for advertising, don't sell it, and don't use it to develop, improve or train AI models. People at Strelva read it only when you ask us to, when it is needed for security, or when the law requires it.

AI. To write a report, a review reply or a suggestion, the relevant Google data is sent to our AI model provider (today Google Gemini through Google's API) to produce that result for you. We send it for nothing else.

Storage and protection. The keys Google gives us to reach your account are encrypted by Strelva before they are saved. Google data we keep, such as reviews and report numbers, is stored with the business and encrypted at rest by our providers.

Sharing. We share Google data only with the providers that help us run the feature, listed on the subprocessors page, with people you have added to that business, and when the law requires it.

Keeping and deleting it. You can disconnect Google at any time from the business, or remove Strelva in your Google account settings. Disconnecting deletes the saved keys straight away and asks Google to cancel our access. Google data already stored with the business stays with it until you ask us to delete it, which we do within 30 days, or until the business is deleted.

Search Fixes. Our free Search Fixes tool at search.strelva.com reads your Search Console data (read-only) when you sign in with Google and builds your report on the spot. We don't store your Search Console data. Your sign-in is kept for up to 30 days in an encrypted cookie in your own browser, and signing out deletes it. Changes you mark as done are saved only in your browser.

Instagram data

If you or your agency connect an Instagram professional account to a business, Instagram (a Meta service) asks you to approve what Strelva can see, and we receive only what you approve.

What we read. The account's profile details and its posts: the media type, the picture or video link, the caption, the date and the link to the post on Instagram. We check for new posts about once a day and list them in that business's activity. We don't read direct messages, followers, or other people's accounts.
What we publish. Strelva posts to the connected account only content that the business or its agency approved for Instagram, and only to the account that was connected. It never posts on its own initiative.
How we store it. The access token Instagram gives us is encrypted and used only for that business. Posts shown in activity are kept as business content.
How we use it. Only to provide the Instagram features you turned on for that business. We don't sell it, use it for advertising, or share it with anyone outside the providers on our subprocessors page.
Revoking access. Disconnect Instagram from the business's connections in the workspace. Strelva then asks Instagram to revoke the token, deletes our copy of it, and stops reading and posting. You can also remove Strelva in your Instagram account settings under apps and websites. Either way, Strelva loses access straight away.
Deleting it. Posts already listed in a business's activity stay with that business until its records are deleted, which we do within 30 days of your ask. To have Instagram data deleted, follow the steps on our data deletion page.

Use of Instagram through Strelva also follows Meta's Platform Terms and Instagram's terms.

Who we share it with

We share information only with the companies that help us run Strelva, listed on our subprocessors page, with people you choose to share a business with (such as co-owners or your agency), and when the law requires it. If Strelva is sold or merged, your information would move with it under this policy.

Cookies

We use cookies that keep you signed in and keep Strelva secure. Strelva uses Vercel Web Analytics on public pages to count visits; it does not use cookies to follow you across other sites, and private workspace pages are left out. We don't use advertising cookies.

How long we keep it

Account details: while your account exists.
Business content, including posts listed from a connected Instagram account: while the business exists in Strelva. Owners can ask for a business's records to be deleted, and we delete them within 30 days of the ask.
Connection tokens for Google and Instagram: until you disconnect, after which we delete our copy.
Free check reports made without an account: about 60 days, unless you save one to a business.
Billing records: as long as tax and accounting law requires.
Security logs and error reports: for a limited time, then deleted by us or the provider.

Deleting your account

You can delete your account in your account settings. Deleting it removes your sign-in and your access to every business straight away. Work you did inside a business stays with that business so its history still makes sense, but it is no longer linked to your name or email. If you are the only owner of a business that still has live Systems or a paid plan, Strelva asks you to download, hand over, or close that business first, so nobody loses a working website by accident. A business you were the only owner of, with nothing live, is queued for deletion and removed within 30 days. We keep a short record that the account was deleted and when, without your email, so we can show deletion requests were handled. The data deletion page lists every way to ask, including by email.

Downloading your information

Owners can download a business's Systems, details and history at any time from the workspace. For anything else we hold about you, email hello@strelva.com.

Your rights

Depending on where you live, you may have the right to see, correct, download or delete your personal information, or to object to how we use it. Email hello@strelva.com and we'll answer within 30 days. If you are a visitor to a business that runs on Strelva, contact that business first; we help it answer you.

Security

Information is encrypted in transit and at rest with our providers. Saved connection secrets are encrypted again by Strelva. Access inside Strelva is limited to the people who need it to run and support the service. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Where it is processed

Strelva is based in the United States, and our providers may process information in the United States and other countries.

Children

Strelva is for businesses and the adults who run them. It is not meant for anyone under 18, and we don't knowingly collect information from children under 13.

Changes

If we change this policy in a way that matters, we update the date above and tell you in the app or by email.

Contact

Questions or requests: hello@strelva.com. Strelva is in Buffalo, New York.