Privacy Policy

INSTRAT360 is the platform brand of INSTRAT Technology ApS, a company registered in Denmark. We provide strategy operating systems and capability apps for enterprise organisations. This policy explains how we handle personal data collected through our website, platform, and related services.

We collect information you provide directly, such as name, email, and organisation when you request a demo, sign up for early access, or contact us. We also collect technical data including IP address, browser type, and usage patterns to improve our services. For platform users, we process data as defined in your service agreement.

We use your information to provide and improve our services, communicate about updates and opportunities, ensure platform security, and fulfill legal obligations. We do not sell personal data to third parties. For enterprise customers, data processing scope and purposes are governed by your specific service agreement.

We process personal data based on: (a) your consent where provided, (b) performance of a contract or service agreement, (c) our legitimate interests in operating and improving our services, and (d) compliance with legal obligations. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We may share data with trusted service providers who assist in operating our platform, such as hosting providers and analytics services. All processors are bound by data processing agreements and are required to handle data in accordance with GDPR. We do not share personal data with third parties for their own marketing purposes.

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. Contact and inquiry data is typically retained for up to 3 years after last interaction. Enterprise customer data retention is governed by your service agreement.

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, regular security assessments, and staff training. Our platform is hosted on enterprise-grade infrastructure in AWS EU regions.

Under GDPR, you have rights to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You also have the right to lodge a complaint with a supervisory authority. To exercise any of these rights, contact ale@instrat360.com.

Customer workspace data is not used to train external AI models. AI features within INSTRAT360 operate on your data only to provide the service as described, with human approval required for critical outputs. This commitment is fundamental to our platform design.

Enterprise customers may have a Data Processing Agreement (DPA) in place that governs the handling of customer data within the platform. Where a DPA exists, its terms take precedence over this general policy for the scope of data covered by that agreement.