Security in Strawberry

• Strawberry's AI companions automate complex workflows, extract data, and boost productivity - but they only act upon your instructions and on information that they have about you.
• Companions will ask for input or approval when they're missing important information or for completing important tasks.
• Even when you link apps (integration with Gmail for example), Strawberry prevents unauthorized harmful actions and requires your confirmation for protected and permanent actions (unless you check “Allow all”).
• A note on HR and recruitment: Strawberry (for example our companion Recruiter Ryan) can support you in general professional activities relating to HR and recruitment like sourcing candidates, drafting job descriptions, preparing interviews and more, but we prohibit our users to use Strawberry for “high-risk” areas such as recruitment decision-making, biometric identification (as defined under the EU AI Act).

• Accuracy is our top priority. However, since our companions operate autonomously, occasional errors may occur. You will also interact with AI partners through our services, and as noted in their terms, their outputs shouldn't always be relied on for factual accuracy.
• To increase the level of accuracy, companions will keep you in the loop of what's happening and you have full control and ability to stop or take over anytime. You'll also be able to see the activity history of every action the AI companions make.

Our storing of your data

• We will store your information as stated in our Privacy Policy (for example name, email, IP address). Our data infrastructure is hosted securely in the United States and the EU. You can access, amend, restrict, or erase your personal data at any time as stated in the policy.
• Your important information will not end up on our servers. When you use Strawberry, your chats, passwords, history and cookies are stored locally on your device with no automatic data sharing. The only exemption is that we partner with cloud services, e.g. CloudFlare. Larger chats and anything you upload (like files or pictures) will be sent to our CloudFlare storage where they will be stored but only for seven days (thereafter they’re deleted).

Our sharing of your data

• Are you wondering whether we sell your data, or share it for marketing purposes? Of course not! Your data is only shared e.g. if we have to under law, or in order to carry out the best services that we can to you.
• This could for example be information that you share in the chat and information gathered by our companions throughout its research - which we may share with AI partners to give you better results. AI partners have their own privacy policies, and we encourage you to review them, but please note that we have chosen our partners carefully to ensure high quality results and security. Also please note that these partners are prohibited from sharing and using your data for training purposes.
• In any event - before the data is shared - we encrypt it. All user data is protected with commercial-grade encryption both in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent). International data transfers, where applicable, utilize Standard Contractual Clauses pursuant to GDPR Article 46.

Smart History

Smart History makes it easy to find pages you've visited using natural language. Just search for something like “the article about cats I read this week” and we'll find it for you. This feature is disabled by default and can be enabled in settings. Here's how it works: your browsing activity is sent to an AI partner that analyzes it and creates searchable summaries. These summaries are then stored locally on your device so you can search them anytime.

• Strawberry is designed with strong privacy and security in mind, but please remember that no system is 100% secure. We're continually testing and updating Strawberry to stay ahead of digital risks, including prompt injection attacks and other new threats (for example - all inputs to AI partners are sanitized and validated to minimize prompt injection and related exploits).
• We follow the rules for trustworthy, safe technology. We design our products to meet key global standards, including US and EU's rules on protection of privacy, the use of AI and provision of digital services (e.g. the EU AI Act, GDPR and DSA). To show our commitment to world-class security - we’re also working toward recognized security certifications like ISO 27001 and SOC 2. We also have a team of security experts who are dedicated to keeping your information safe.