How we handle the data you share with us

1. Who we are

Strategy OS is operated by NOVENTRA SYSTEMS S.R.L., a company registered in Romania. For all privacy-related inquiries, contact support@getinsideredge.com.

2. What data we collect

• Intake data: name, email, optional social profile URL, and the strategy-specific information you provide (strategy name, summary, asset class, data availability, intended audit question), submitted via /audit or the legacy /apply form.
• Account data: email and a hashed password for authenticated panel access at panel.getinsideredge.com.
• Billing data: processed by Stripe. We do not store full card numbers. We retain billing customer identifiers, subscription state, and invoice references.
• Operational data: any backtest, paper, or live trade data you explicitly upload or transmit to the audit intake endpoints, plus the metadata your account generates inside the panel (strategies, runs, decisions, audit events).
• Technical data: server access logs, IP address, user agent, and request timestamps for security and abuse prevention. Cloudflare Turnstile is used on application forms to deter automated submissions.

3. Why we collect it

• To process your application, evaluate fit with the current cohort, and provide the research products you signed up for.
• To send transactional email (verification links, billing receipts, weekly research output if you are subscribed).
• To detect abuse, debug errors, and maintain the integrity of the platform.
• To meet legal, tax, and accounting obligations applicable to NOVENTRA SYSTEMS S.R.L. as a Romanian-registered entity.

4. Who we share it with

We share data only with processors required to operate the service:

• Stripe— payment processing and subscription billing.
• Resend— transactional email delivery.
• Cloudflare— Turnstile bot prevention on forms.
• Vercel— hosting for the public website.
• Anthropic— the AI Console feature routes operator queries to Anthropic models. Trader-identifying free-text content you submit through the AI Console is sent to Anthropic under their commercial terms. You can avoid this by not using the AI Console.

We do not sell personal data, and we do not share it with third parties for advertising.

5. How long we keep it

• Application data: 24 months from submission, unless the application is approved (in which case it is retained for the duration of the account plus 24 months).
• Account, billing, and operational data: retained for the duration of the account plus 24 months for accounting and audit purposes, or longer where required by law.
• Server logs: typically rotated within 90 days, retained longer only for security investigations.

6. Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with a supervisory authority (in Romania, ANSPDCP). To exercise any of these rights, email support@getinsideredge.com from the address associated with your account or application. We respond within 30 days.

7. Cookies and tracking

The public site uses only the cookies strictly necessary to operate (e.g., Cloudflare Turnstile session). The authenticated panel uses an HTTP-only session cookie for login. We do not run third-party advertising trackers.

8. Changes to this policy

We will update this page when the practices described change. The “Last updated” date at the top reflects the latest revision. Material changes will be communicated by email to active subscribers at least 14 days before they take effect.