Strategy Privacy Policy

Strategy ("we", "us", and "our" for purposes of this Privacy Policy) knows privacy matters. This Privacy Policy describes the types of Personal Information we may collect, how we may use and share that information, our lawful basis for processing it, what rights you have in relation to your Personal Information, and how we protect it. This Privacy Policy applies to processing undertaken where we are the organization that determines why and how your Personal Information is processed and is otherwise required under applicable law to provide notice.

"Personal Information" is any information that relates to you and which, alone or in combination with other information, could reasonably be used to identify you. It does not include data where the identity has been removed. We may make changes to this Privacy Policy from time to time, and we will indicate at the top of the policy when it was most recently updated.

Our Services and Intelligent Features

In addition to the Strategy Offerings available through our websites and services, Strategy provides intelligent features, including Strategy AI, Auto, and Auto Expert applications, as part of services hosted by Strategy. If enabled by the user or our customer, these features may recommend and/or provide targeted content regarding our products and services.

These tools may use artificial intelligence, machine learning, or other technology to process questions or queries. Strategy's intelligent features exclusively rely on data from within the Strategy Offerings. Strategy does not use user inputs, chat history, or other communications to train Strategy's or third-party artificial intelligence models, and Strategy intelligent features do not store or retain conversation histories past the active user session.

How We Collect Information

You may choose to submit Personal Information and other information to us by purchasing or interacting with the Strategy Offerings. This can include creating and managing an account, requesting technical support, requesting information, communicating by email, telephone, or online chat, uploading information through the Strategy Offerings, subscribing to newsletters, registering for training or events, purchasing products and services, submitting job applications, or participating in surveys.

Depending on the service and your interaction with us, we may collect basic personal details, contact details, professional details, usernames, URLs, payment details, photographs, and other information you choose to provide. Some information is necessary for us to provide particular offerings or to grant access to certain sites or services.

When you access or use Strategy Offerings, we may also collect information about your device and your use of the services, including browser information, product purchases, device type, crash data, unique identifiers, IP address, usage patterns, cookies, and video images or audio recordings where you have interacted with us on platforms such as Zoom or Teams.

We may also collect information from other sources, including publicly available sources, analytics providers, employer web sites, professional social networks, administrators, other users of Strategy Offerings, and data customers upload to Strategy cloud services.

Cookies, Location Information, and Video/Audio

You can set your browser to refuse all or some browser cookies, or to alert you when web sites set or access cookies. If you disable or refuse cookies, please note that some parts of the web site may become inaccessible or not function properly.

To provide certain offerings, Strategy may request permission to access location information from your device. Some functions may not work if you choose not to allow access. General usage information such as time zone may also be derived from use of the applications or web sites.

Strategy may use video conferencing services such as Microsoft Teams or Zoom to interact with you, answer queries, or provide technical support. Strategy may record meetings and process some or all recorded data, including personal data, for provision of services, quality control, training, and improvement of services. Depending on your jurisdiction, Strategy may rely on legitimate interests or, where required, obtain explicit consent.

Lawful Bases for Processing

Strategy processes Personal Information only where a lawful basis exists. Depending on the applicable law and the context, these lawful bases may include:

• Consent: for example, where local law requires consent for direct marketing or recordings.
• Contractual necessity: to provide services, perform contractual obligations, process payments, or manage accounts.
• Legal or regulatory obligation: including responding to subpoenas, honoring data subject rights, financial reporting, or crime prevention.
• Vital interests or public interest: where necessary to protect individuals or perform tasks carried out in the public interest.
• Legitimate interests: including improving services, keeping systems secure, tailoring communications, supporting product development, and measuring campaign effectiveness.

Where Strategy relies on legitimate interests, Strategy considers whether the processing is necessary for the stated purpose and whether those interests are overridden by the rights and interests of the data subject.

For California Residents and Residents of Certain Other U.S. States

The Personal Information Strategy may collect includes information that falls within categories recognized by California law and similar U.S. state laws. Strategy does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising.

How We Use the Information We Collect

Strategy may use information collected from you to:

• Provide products and services, bill or invoice you, complete corporate transactions, and manage your account.
• Validate identity, provide technical support, answer inquiries, and facilitate access to third-party services and resources.
• Send personalized marketing messages where permitted by law and with consent where required.
• Serve relevant advertising and provide notice of product releases, events, promotions, and trainings.
• Analyze how you use Strategy products or services and suggest or provide improvements.
• Process payments and purchases, keep track of activities, and operate, evaluate, and improve the business.
• Detect and prevent fraud and other unauthorized activity and enforce terms of use.
• Comply with applicable legal requirements, relevant industry standards, and internal policies.

Marketing, Profiling, and Sharing

Where you submit your details on the Strategy web site or at an event, webinar, or meeting, Strategy may use the Personal Information provided to send further information about products and services, subject to consent where required. Strategy may use third-party business databases such as ZoomInfo or Lusha to keep contact databases up to date and accurate and may build a business profile based on purchase history, product use, and responses to communications in order to better assess business needs.

Strategy may disclose information about you to third-party service providers, other Strategy group companies, resellers, system integrators, co-sellers, referral partners, technology partners, professional advisors, and government agencies. Strategy also reserves the right to transfer information in connection with a sale or transfer of all or a portion of its business or assets.

Transfers of Personal Information Abroad

Strategy takes appropriate steps to protect Personal Information regardless of where it is stored, including entering into contracts with third parties and implementing safeguards where information is transferred across borders. These safeguards may include standard contractual clauses or other approved mechanisms, depending on the applicable law.

Strategy's U.S.-based entities may participate in recognized privacy frameworks and dispute resolution mechanisms where applicable. Strategy also may rely on permitted exceptions under relevant data protection law where necessary to perform a contract, serve important public interests, or address legal claims.

How We Protect and Retain Personal Information

Strategy maintains administrative, technical, and physical safeguards designed to protect the Personal Information you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. Strategy also has procedures to address suspected breaches and, where legally required, to notify affected individuals and regulators.

Strategy does not retain Personal Information longer than necessary. Retention periods are based on the relationship with you, legal and regulatory obligations, expectations of regulators, internal audit needs, and the need to exercise or defend legal rights. Strategy reviews retention periods on a regular basis and retains only what is reasonably necessary.

Links, Children, and Your Rights

Strategy Offerings may contain links to third-party web sites, including payment sites. Strategy is not responsible for the content, practices, or privacy statements of such third-party sites. Strategy Services and Offerings are not directed to, and Strategy does not knowingly collect Personal Information from, individuals under the age of eighteen.

Depending on your jurisdiction, you may have rights that include withdrawing consent, requesting confirmation of processing, accessing Personal Information, correcting or updating data, restricting or objecting to processing, asking for deletion, blocking or anonymization, requesting portability, and challenging certain automated decision making. Strategy does not sell or share Personal Information for cross-context behavioral advertising.

Strategy will not discriminate against you for exercising privacy rights. Strategy may require identity verification before responding to requests and may also require proof of authority from an authorized agent.

How to Contact Us and Changes to This Policy

If you have comments or inquiries about this Privacy Policy, if you would like to update information Strategy holds about you, or if you would like to exercise your rights, you may contact Strategy by submitting a data privacy inquiry, by email at [email protected], or by regular mail to:

If you are located in the E.U., you may also write to MicroStrategy Limited t/a Strategy, Chiswick Park, Building 4, 3rd Floor, 566 Chiswick High Road, Chiswick, London, W4 5YE, United Kingdom, Attn: Legal Department.

If you are located in Brazil, the local entity responsible for handling personal data in Brazil is MicroStrategy Brasil Ltda., Rua Irmã Gabriela, nº 51, sala 413, Cidade Monções - São Paulo/SP - 04571-130, CNPJ/ME nº 02.869.307/0001-59.

Strategy may change this Policy from time to time by updating this page in order to reflect changes in the law and/or Strategy privacy practices. The date at the top of this Privacy Policy will be updated accordingly.