Privacy Policy

Stratagem Drive · Last updated: March 16, 2026

This Privacy Policy describes how Stratagem Drive ("we," "our," or "the application") collects, uses, stores, and protects information about users of our platform at stratagemdrive.com. By using Stratagem Drive, you agree to the practices described in this policy.

1. Who We Are

Stratagem Drive is a comprehensive task management and collaboration platform designed for organizational members. It facilitates internal workflows, member directory management, resource sharing, data analysis, course management, internship tracking, and contact management.

2. Information We Collect

Account and Identity Information

When you register or are added to the platform, we collect your email address, full name, and role within the organization. Member profiles may additionally include grade level, academic majors and minors, team assignments, titles, phone number, LinkedIn URL, social media handles, personal website URLs, skills, past employers, languages spoken, career interests, and resume URL.

Google Calendar Data

When you choose to connect your Google Calendar, we request permission to access your calendar events. We use this access solely to synchronize your Stratagem Drive workflow tasks with your personal Google Calendar — creating, updating, and deleting calendar events that correspond to tasks you manage on the platform. We store your Google OAuth access token, refresh token, token expiry date, and your connected Google account email in order to maintain this connection. We do not access, read, or store any calendar events or data beyond what is required to perform task synchronization.

Workflow and Task Data

We store information you create within the platform, including task titles, descriptions, deadlines, priorities, assigned members, comments, attachments, and recurrence rules.

Usage and Analytics Data

We collect logs of resource access (which sources were viewed or clicked) and audit logs of administrative actions for internal accountability. These logs include your email address and a timestamp of the action.

Contact and Invitation Data

If you invite someone to the platform, we store their email address along with your name and email as the inviter. External contacts you add (alumni, advisors, guest speakers) may include names, emails, phone numbers, and LinkedIn URLs.

3. How We Use Your Information

  • Authentication and access control: Your email and role are used to verify your identity and determine what content and features you can access.
  • Google Calendar synchronization: Your OAuth tokens are used exclusively to create, update, and delete calendar events in your personal Google Calendar on your behalf, based on your task activity in Stratagem Drive.
  • Collaboration: Your name and email are displayed in task assignments, comments, and member directories to facilitate teamwork.
  • Notifications: Your email address may be used to send task reminders and platform notifications.
  • Internal analytics: Aggregated usage data helps us understand how the platform is being used and improve its functionality.
  • Administrative accountability: Audit logs record administrative actions to maintain organizational transparency.

4. Google API Services

Stratagem Drive's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we only request the calendar.events scope, which limits our access to creating, editing, and deleting calendar events. We do not use your Google data for advertising, do not sell or transfer your Google data to third parties, and do not use your Google data for any purpose other than task synchronization within Stratagem Drive.

You may revoke Stratagem Drive's access to your Google Calendar at any time by visiting your Google Account permissions page and removing Stratagem Drive, or by disconnecting from within the application.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We do not share your data with third parties except in the following limited circumstances:

  • Platform infrastructure: Stratagem Drive is built on Base44, which provides hosting, authentication, and database services. Your data is stored within Base44's infrastructure. Base44's own privacy and security practices govern data at the infrastructure level.
  • Google: When you connect Google Calendar, your authorization tokens are exchanged with Google's OAuth servers as part of the standard OAuth 2.0 flow.
  • Legal requirements: We may disclose your information if required to do so by law or in response to a valid legal process.

6. Data Security

We take the security of your data seriously. Stratagem Drive implements the following measures:

  • OAuth 2.0 for Google Calendar authorization — we never handle your Google account password directly.
  • Row-level security (RLS) rules that restrict data access based on your authenticated identity, so users can only access their own records.
  • Role-based access control (RBAC) distinguishing admin, member, alumni, and advisor permissions.
  • Sensitive credentials (such as Google OAuth Client ID and Secret) are stored as encrypted environment variables, not in application code.
  • Audit logging of all administrative actions for accountability.

While we implement these protections, no system is completely immune to security risks. We encourage you to use a strong password for your Google account and to review your connected applications periodically.

7. Data Retention

We retain your personal data for as long as you are an active member of the organization using Stratagem Drive. If you leave the organization or request account deletion, we will remove your personally identifiable information from the platform within a reasonable time. Google OAuth tokens are deleted upon disconnecting your calendar integration or upon account removal.

8. Your Rights and Choices

  • Access: You may request a copy of the personal data we hold about you.
  • Correction: You may update your profile information directly within the application.
  • Deletion: You may request deletion of your account and associated personal data by contacting us.
  • Google Calendar disconnection: You may disconnect your Google Calendar integration at any time from within the application or via your Google Account settings.

9. Children's Privacy

Stratagem Drive is intended for use by college-aged members of an academic organization. We do not knowingly collect personal information from anyone under the age of 13. If you believe a minor has provided us with personal information, please contact us so we can remove it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please contact us at:

stratagemdrive.com@gmail.com
stratagemdrive.com