Who we are
Strafi is a trading name of Scalepoint Partners Ltd (company number 15622199), a company registered in England and Wales. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. In this policy, "Strafi", "we", "us", and "our" refer to Scalepoint Partners Ltd.
We are the data controller for personal data collected through the Strafi service. You can contact us at info@strafi.co.
What Strafi does
Strafi is a financial intelligence service delivered via WhatsApp. It reads your accounting data from FreeAgent or Xero on a read-only basis, and optionally your payment data from Stripe, and surfaces financial insight in plain English. Strafi never writes to, modifies, or posts anything to your connected accounts.
Strafi is observational only. We read your data to explain it back to you. We do not use it for any other purpose.
What data we collect
We collect and process the following data:
- WhatsApp number — to identify you and deliver responses via Twilio's WhatsApp API.
- FreeAgent OAuth tokens — access and refresh tokens that allow Strafi to read your FreeAgent data on your behalf. These are stored securely in our database.
- Financial data from connected sources — bank balances, VAT returns, corporation tax, invoices, bills, and profit and loss data from FreeAgent or Xero; and payment, subscription, and revenue data from Stripe if connected. This data is fetched when you send a command and used to generate your briefing or answer. A record of each financial snapshot and the intelligence output it produced is retained in our database to build your longitudinal financial profile and improve the accuracy of the service over time (see "How we use your data" below).
- Conversation context — questions generated during a session are stored temporarily so you can reply with a number (1, 2, or 3) to retrieve an answer. This context is overwritten on each new session.
We also collect the following personal information you provide directly:
- Your name — used to personalise your briefings and messages.
- Your email address — used to send your dashboard link and occasional product updates, if you consent to this.
- Your role and business description — used to calibrate Strafi's output to your context.
- Your financial literacy score — used to adjust the language and depth of your briefings.
- Signal history — a log of every financial signal run, including which signals fired and their severity. This accumulates over time and forms the basis of your financial profile within Strafi.
- Stated goals — if you provide a financial goal at onboarding (for example, a revenue target or hiring intention), this is stored and used to contextualise your briefings.
How we use your data
Your data is used solely to provide the Strafi service — generating financial briefings, questions, and answers in response to your WhatsApp commands. Specifically:
- Your WhatsApp number is used to route messages to you via Twilio.
- Your FreeAgent tokens are used to fetch your financial data on demand.
- Your financial data is passed to Anthropic's Claude API to generate plain English narration. It is not stored by Anthropic beyond the duration of the API call, subject to Anthropic's own data processing terms.
- Your financial data is used to generate voice notes via ElevenLabs' text-to-speech API. It is not stored by ElevenLabs beyond the duration of the API call.
We retain a record of each financial analysis Strafi performs for you — the observation fields used and the intelligence output produced. This builds a longitudinal profile of your business's financial patterns over time, allowing future briefings to reference your own historical behaviour and context rather than reasoning from your current snapshot alone. This data is specific to you and used solely to improve the intelligence Strafi delivers to you. It is never shared with third parties or used for any purpose beyond personalising your service. You may request deletion of this data at any time.
We do not sell, share, rent, or use your data for advertising or marketing purposes. Your mobile phone number and WhatsApp number will never be shared with third parties for their marketing purposes.
By providing your WhatsApp number and opting in to receive messages from Strafi, you consent to receive WhatsApp messages including financial briefings, signal alerts, and account notifications. Message frequency varies based on your usage and the financial signals detected on your account. Message and data rates may apply. Reply STOP to unsubscribe at any time. Reply HELP for support or contact info@strafi.co.
Legal basis for processing
We process your data on the basis of your consent, given when you request early access and connect your FreeAgent account, and on the basis of legitimate interests in providing the service you have requested.
Data storage and security
Your data is stored in a PostgreSQL database hosted on Railway's infrastructure, located in the EU West region (Amsterdam, Netherlands).
We take reasonable technical measures to protect your data, including encrypted connections, token-based authentication with FreeAgent, and restricted API key access. OAuth tokens are stored in encrypted form.
Third-party processors
Strafi uses the following third-party services to operate:
- Twilio — WhatsApp message delivery. Your WhatsApp number is shared with Twilio to route messages.
- Anthropic — AI narration. Your financial data is passed to Anthropic's API to generate responses.
- ElevenLabs — Voice note generation. Briefing text is passed to ElevenLabs to produce audio.
- Railway — Infrastructure and database hosting.
- Resend — Email delivery. Your email address and name are passed to Resend to send your dashboard link and product updates.
- FreeAgent — source of your accounting data via OAuth, if connected.
- Xero — source of your accounting data via OAuth, if connected.
- Stripe — source of your payment and revenue data via OAuth, if connected. Your Stripe account data is accessed read-only and is not used for payment processing within Strafi.
Each of these processors has their own privacy policy and data processing terms.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw consent at any time
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, contact us at info@strafi.co. We will respond within 30 days.
Data retention
We retain your WhatsApp number and OAuth tokens for as long as you use the service. Conversation context (the last several exchanges) is retained to support follow-up questions and cleared periodically. Financial signal history and analysis records are retained for as long as you use the service, as they form the basis of your longitudinal financial profile. If you request account deletion, all data associated with you will be removed within 30 days.
Not financial advice
Strafi provides financial information and commentary for informational purposes only. Nothing Strafi produces constitutes financial advice, tax advice, or professional guidance of any kind. Always consult a qualified professional before making financial decisions.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via WhatsApp to active users. The date at the top of this page reflects the most recent update.
Contact
Scalepoint Partners Ltd · info@strafi.co