1. Scope and operator
This draft applies only to the Str8n news-intelligence application. It does not replace the separate policy for the Str8shift Digital services website.
Str8n is operated by Str8shift Digital. Public account creation remains closed until this notice is reviewed, published at a stable HTTPS address, and matched to the production system.
2. Information the current app handles
—
Account data: email address, account ID, one-time-link session records, a display name initially derived from the email name, optional profile fields, and account creation or update times.
—
Preferences and saves: selected regions and categories, notification settings, saved dossiers, tags, notes, and the Pro AI Lens profile.
—
Billing records when web billing is enabled: Stripe customer and subscription identifiers, product and price identifiers, tier and subscription status, billing event records, and related timestamps. Stripe, not Str8n, handles card details at checkout.
—
AI use: the selected dossier, permitted source packet, AI Lens preferences, a typed or transcribed question, generated analysis, source citations, request time, and whether an eligible cached result was used.
—
Technical data: authentication tokens stored in browser local storage or the device secure store. Production hosting may also create connection, security, and error logs; their exact fields and retention are not yet approved.
3. AI and voice
The current Lens function sends the dossier, permitted source metadata or excerpts, AI profile, and question to Groq for model processing. It does not send the user's email address or payment details in the model prompt.
Cited conversation keeps plaintext questions and answers in temporary app state rather than the Str8n database. A signed continuation token expires after two hours. Non-conversation Lens outputs may be cached with a one-way question hash; see the Data Retention draft for the current limits of that control.
Voice capture starts only after a microphone press and permission request. The operating system or browser recognition service may process audio online. Str8n requests no saved recording, sends no audio file to Str8n, Supabase, or the AI model endpoint, and sends the bounded transcript to Lens only after the user separately presses Ask. Read-aloud text is handed to the device speech service.
4. Newsroom and public-source material
Str8n is designed to acquire or reference reporting, official records, public web metadata, and provider-permitted public social signals. Records may include a source name or public handle, URL, title, supplied excerpt, timestamp, location context, provenance, confidence, correction, and removal state.
Public social posts are treated as attributed observations or claims, not as established facts. Public availability and attribution do not transfer copyright, grant permission to republish full content, or make repeated posts independent confirmation. Publisher and creator rights remain separate from Str8n's provenance record.
5. Why information is used
—
Provide passwordless sign-in, account preferences, saved items, and server-confirmed Free or Pro access.
—
Build source-linked dossiers, locate events, show uncertainty, detect corrections, and prevent removed material from appearing as current evidence.
—
Answer user-directed Lens questions, enforce source citations, prevent prompt injection from source text, rate-limit use, and protect the service.
—
Process and reconcile a web subscription when billing is enabled, and support secure account deletion.
6. Services involved
The current app code contains no advertising SDK or cross-site advertising feature. Production analytics, hosting, email delivery, support, and monitoring services have not been finalized and are not silently included in this draft.
—
Supabase provides authentication, database, storage, and Edge Function infrastructure.
—
Stripe provides hosted checkout, subscription, and billing-management services when web billing is enabled.
—
Groq is the model endpoint configured in the current Lens code. The production provider and model must be rechecked before this draft becomes effective.
—
Device and browser speech services handle recognition and read-aloud features under the user's platform settings. Opening a cited source also sends the user to that publisher's site and policy.
7. Choices, access, correction, and deletion
Str8n is private. Dossiers and newsroom features require a signed-in account with access granted by the owner. Microphone access is optional, and typing remains available. Approved Pro users can change or reset their AI profile controls.
The app contains a recent-authentication, exact-confirmation account-deletion flow designed to remove the sign-in and account-owned records only after billing and storage cleanup succeed. It is not a launch promise until the matching database and Edge Function are deployed and production-tested.
For an applicable request to access, correct, delete, restrict, or object to use of personal data, email contact@str8shift.com. Identity may need to be verified, and lawful exceptions may apply. This draft does not claim that any particular privacy law applies to Str8n before counsel reviews the launch facts.
8. Security and changes
The current design uses passwordless links, short-lived access tokens with rotating refresh sessions, row-level database access rules, server-confirmed entitlements, bounded model inputs, and recent authentication for deletion. No system can promise absolute security.
A final notice must identify the accountable legal person, production domain, contact address if required, launch jurisdictions, age rules, production service providers, log and backup practices, and a versioned effective date. Material changes must be reviewed against the deployed product before publication.