Privacy policy

Last updated November 5, 2026

Stratorra is operated by Dorcia Holdings LLC, doing business as Dorcia Automations ("we"). This policy covers our website (stratorra.com), the Stratorra software (company sites at stratorra.app), and the services we connect to on your behalf.

Information from our website

When you request a demo, we collect the details you enter: your name, company, email, phone, role, company type, crew size, the modules you're interested in, and any message. We also record the page you came from, campaign tags in the link you followed, and a one-way hashed version of your IP address to block spam.

Information in the Stratorra software

Companies that use Stratorra ("customers") enter and manage their own business records: their customers and well sites, field tickets, rentals, invoices, employees, training records, safety reports, time entries, inventory, and equipment data. Signatures captured on tickets and agreements are stored with the ticket, along with the device location at signing when the device allows it. If a customer connects equipment trackers, we store the location and engine readings those trackers report.

This information belongs to the customer. We process it only to provide Stratorra to them, keep it separate from every other customer's data, and don't sell it or use it for advertising.

Connected services

Customers can choose to connect other services. We only access them after an authorized person at the customer approves the connection, and only for the purpose described:

  • QuickBooks Online (Intuit). To post invoices and payments into the customer's own QuickBooks company, we read and create customers, products and services, invoices, and payments, and read the chart of accounts to pick an income account. We don't read bank feeds, payroll, or other financial data. Access tokens are stored encrypted on our servers, never in the browser. The customer can disconnect at any time from Settings → Integrations or from their Intuit account, which revokes our access.
  • Equipment trackers (such as Samsara, Geotab, Motive, or equipment makers' telematics). We read unit location, engine hours, speed, and fuel level. API keys are stored on our servers and can't be read back.
  • Facebook and Instagram (Meta). When a customer's owner connects their Facebook Page, we receive access to the Pages they manage and to the Instagram business account linked to the Page they choose. We use it only to publish posts the customer approved in Stratorra, and to read that Page's and Instagram account's own statistics (views, reach, engagement, follower counts) so the customer and their marketing partner can see results. We don't read private messages, friends lists, or anyone's personal profile, and we don't use the data for advertising or share it with anyone other than the customer and the marketing partner they chose.
  • Google Business Profile. When a customer's owner connects their Business Profile, we use Google's Business Profile APIs to publish posts the customer approved, read the profile's reviews and post replies the customer approved, and read the profile's performance numbers (searches, views, calls, website clicks, direction requests). Stratorra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • Stripe processes subscription payments. We don't store full card numbers.

Access tokens for connected services are encrypted on our servers and never sent to a browser. A customer's owner can disconnect Facebook, Instagram, or Google at any time in Marketing → Settings; that deletes the stored tokens and asks Meta or Google to revoke our access. They can also remove Stratorra from their Facebook settings (Business Integrations) or their Google Account (Third-party connections).

Deleting data from connected accounts

To delete the data Stratorra received from Facebook, Instagram, or Google: disconnect the account in Marketing → Settings (or remove Stratorra in your Facebook or Google account settings), then email demos@stratorra.com from the address on the account and ask us to delete the statistics, reviews, and publishing records we stored. We confirm by email and complete the deletion within 30 days. Posts already published stay on your Page or profile until you remove them there.

Who processes it for us

We use Supabase (database and hosting of our servers), Vercel (website hosting), Resend (email), and Stripe (payments). They process data only on our behalf.

Security and retention

Data is encrypted in transit and at rest. Each customer's records are isolated by access rules in the database, and staff access is limited to what's needed to support the customer. We keep customer data while their account is active. When an account closes, the customer can request an export, and we delete their data within 90 days unless the law requires us to keep it. Demo accounts contain sample data and are deleted when the demo ends.

Your choices

To see, correct, export, or delete information we hold about you, email demos@stratorra.com. If your information is in a customer's Stratorra account (for example, as an employee or one of their customers), contact that company and we'll help them respond.

Changes

If we change this policy in a meaningful way, we'll update the date above and tell customers by email before the change takes effect.