Privacy Policy | Stratum Scale

1. Who We Are

Stratum Scale LLC (“Stratum Scale,” “we,” “our,” or “us”) is a Minnesota limited liability company operating from Woodbury, Minnesota, United States. We build lead-response, follow-up, and business automation systems for owner-led service businesses.

This website is intended for business users. If you contact us on behalf of a company, we treat the submission as a business inquiry unless the context clearly says otherwise.

Entity notice. Stratum Scale LLC was organized under Minnesota law in August 2026. It is the successor to the unincorporated business previously operating under the Stratum Scale name, and it has assumed responsibility for information collected under that name before that date. This policy applies to that information as well.

2. Information We Collect

We collect only information that is reasonably useful for operating the website, responding to inquiries, demonstrating the service, delivering contracted work, and protecting our systems. This can include:

Business contact details — name, work email, company, phone number, and role.
Lead-flow and operational context — industry, intake sources, missed-handoff issues, message details, and requested service information.
Communications — form submissions, emails, call notes, meeting notes, and support or sales follow-up.
Demo and evaluation information — fictional or user-provided workflow examples used to show how a lead-response system would operate.
Client engagement records — where you become a client, information necessary to scope, deliver, invoice, and support the work described in a signed Statement of Work.
Billing and transaction records — company billing contact, billing address, invoice history, and payment status. Payment card and bank account details are handled by our payment providers and are not stored by us.
Technical and security data — IP address, browser type, device data, timestamps, referral path, page interactions, fraud signals, and server logs.
Consent and preference records — form consent, unsubscribe requests, privacy requests, and communication preferences.

Do not send Social Security numbers, government IDs, banking details, payment-card data, health information, passwords, private customer records, or other sensitive regulated data through public website forms.

3. How We Use Information

Respond to business inquiries, audit requests, demo requests, and support communications.
Evaluate fit, prepare proposals, scope implementation work, and maintain business contact history.
Deliver, support, and invoice work performed under a signed Master Services Agreement and Statement of Work.
Operate lead intake, acknowledgment, internal notification, CRM, and follow-up workflows.
Use service providers and automation tools, including AI-assisted tools, to draft, route, analyze, or summarize business communications and workflow examples.
Secure, debug, monitor, and improve the website, forms, infrastructure, and lead-response systems.
Detect spam, fraud, abuse, unauthorized access, or policy violations.
Comply with legal obligations, preserve evidence, enforce agreements, and resolve disputes.

We do not treat an automated acknowledgment as proof that a human has reviewed a lead. Any client-facing business decision should be reviewed by an authorized human unless a separate signed agreement says otherwise.

AI processing. Where we use AI-assisted tools, we do so under provider terms that do not permit your information to be used to train third-party foundation models. We do not sell your information to AI providers and do not use client data to build products for other clients.

4. Cookies, Tracking, and Advertising

We may use necessary cookies, browser storage, and server logs for form operation, anti-spam controls, security, performance, and basic site functionality.

As of the Last Updated date, this site does not run cross-context behavioral advertising, does not sell personal information, and does not knowingly share personal information for targeted advertising. Because we do not engage in these practices, there is presently nothing to opt out of. We honor recognized universal opt-out preference signals, including Global Privacy Control, should that change.

If we materially change tracking, advertising, or sale/sharing practices, we will update this policy before relying on the new practice where required by law.

5. When We Share Information

We share information only as needed for legitimate business, security, legal, or service-delivery purposes, including with:

Website hosting, database, infrastructure, analytics, security, email, CRM, and communications providers.
Automation and AI service providers that process information on our instructions to support demos, summaries, routing, drafting, or workflow analysis.
Payment processors, banking providers, and invoicing platforms for billing and collection.
Professional advisors, including legal, accounting, insurance, security, and business advisors.
Government, law-enforcement, regulatory, or court authorities when required or appropriate under applicable law.
Successor entities in a merger, acquisition, financing, asset sale, reorganization, bankruptcy, or similar business transaction.

We require service providers to handle information only for authorized purposes and to use reasonable safeguards appropriate to the information they process. We do not sell personal information.

6. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, including responding to inquiries, maintaining business records, administering contracts, complying with law, resolving disputes, preserving security logs, and enforcing rights.

As general guidance, and subject to legal and backup-retention requirements:

Unconverted inquiries and demo requests — retained up to 24 months from last contact.
Client engagement records, contracts, and invoices — retained at least 7 years after the engagement ends, for tax and legal-record purposes.
Security and server logs — retained up to 12 months.

When information is no longer reasonably needed, we delete it, de-identify it, aggregate it, or restrict it according to operational, legal, and backup-retention requirements. Backup copies may persist for a limited period after deletion from active systems.

7. Security

We use administrative, technical, and organizational safeguards designed to reduce the risk of unauthorized access, disclosure, alteration, loss, or misuse. These safeguards may include access controls, input validation, logging, least-privilege handling, protected configuration, and provider security controls.

No website, database, transmission method, or provider can be guaranteed perfectly secure. You are responsible for not submitting sensitive data through public channels.

8. Minnesota and U.S. Privacy Rights

The Minnesota Consumer Data Privacy Act, Minn. Stat. §§ 325M.10–325M.21 (“MCDPA”), took effect July 31, 2025. It applies to entities that conduct business in Minnesota or target Minnesota residents and that, in a calendar year, either process the personal data of 100,000 or more consumers, or process the personal data of 25,000 or more consumers while deriving more than 25 percent of gross revenue from the sale of personal data.

Two things are relevant to us:

The MCDPA defines “consumer” to exclude individuals acting in a commercial or employment context. Most information we collect is business-contact information and therefore falls outside that definition.
The MCDPA exempts small businesses as defined by the U.S. Small Business Administration (13 C.F.R. Part 121). Stratum Scale LLC currently qualifies as a small business and does not meet the processing thresholds above.

Regardless of that exemption, we commit to the following:

We will not sell sensitive data, and we would not do so without prior consent in any event, consistent with Minn. Stat. § 325M.17, which applies to small businesses notwithstanding the general exemption.
Where the MCDPA or another applicable privacy law gives you rights over personal information we control, we will honor them. Those rights may include the right to confirm processing, access data, correct inaccuracies, delete data, obtain a portable copy, opt out of targeted advertising, opt out of the sale of personal data, opt out of certain profiling, request an explanation of a profiling decision where applicable, and request a list of specific third parties to which data was disclosed where required.
Even where a specific privacy law does not formally apply, we will make reasonable efforts to respond to clear, verifiable requests about information we can identify.

We review our status under the MCDPA and comparable state laws annually, and will update this policy if our obligations change.

9. How to Make a Privacy Request

Email contact@stratumscale.com with the subject line “Privacy Request.” Include your name, email address, company, the right you want to exercise, and enough context for us to find the relevant records.

We may ask for additional information to verify identity, authority, residency, or the request scope.
We aim to respond within 45 days of receipt and may use an allowed extension when reasonably necessary.
If we deny a request, you may appeal by replying with the subject line “Privacy Appeal.” We will respond to an appeal within 45 days and will explain the basis for our decision.
We do not disclose sensitive identifiers, passwords, security answers, or trade secrets in response to access requests.
We do not charge for a first request in any 12-month period. We may charge a reasonable fee for manifestly unfounded, excessive, or repetitive requests.

10. Data Breach Notice

If a security incident triggers notice obligations under Minn. Stat. § 325E.61 or another applicable breach-notification law, we will provide legally required notices without unreasonable delay, subject to lawful investigation, remediation, scope-determination, and law-enforcement delay exceptions.

Where we act as a service provider to a client, we will notify that client promptly on becoming aware of a security incident affecting their data, so the client can meet its own notification obligations.

11. Email, Calls, and Opt Outs

If you submit a form, email us, or request a demo, you consent to business communications about your request by email, phone, or similar channels. You can opt out of non-essential marketing messages by using available unsubscribe instructions or emailing contact@stratumscale.com.

Transactional, security, legal, billing, and service-related messages may still be sent when appropriate.

12. Children and International Use

This site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it.

This site is operated from the United States. If you use it from outside the United States, you understand that information may be processed in the United States. We do not currently market to, or intentionally target, individuals in the European Economic Area or the United Kingdom.

13. Changes and Contact

We may update this Privacy Policy from time to time. Changes become effective when posted with a revised Last Updated date unless a later effective date is stated. Material changes will be identified in the policy.

Stratum Scale LLC
Woodbury, Minnesota, United States
contact@stratumscale.com