Privacy Policy

1. Who We Are and What This Covers

Strivepoint Solutions LLC, operating as StrivePoint Solutions (“StrivePoint,” “we,” “us”), operates the StrivePoint marketing website at strivepointsolutions.com and the StrivePoint client portal, including lead management, campaign and calling tools, document handling, automation, and the Submissions feature. StrivePoint is operated from Florida, United States.

Mailing address: Strivepoint Solutions LLC, 9790 W. Dixie Hwy Suite 1101, Miami, FL 33180, United States.

Privacy contact: management@strivepointsolutions.com · +1 (773) 280-7254. Written requests may be sent to the mailing address below.

StrivePoint provides multi-tenant sales, calling, lead-management, document, automation, and submission software for business customers. Client companies control the merchant and lead information they upload, and StrivePoint generally processes that information as a service provider (processor) on the client’s instructions. Each client is responsible for the legality of its own collection and use of merchant data. StrivePoint separately acts as controller for account, security, billing, and platform administration information.

2. Information We Collect

Account and organization data

Name, business name, business email, telephone number
Account role, login and authentication information, tenant/client membership

Merchant and lead data uploaded by clients

Contact details, business information, funding-request and revenue information
Notes, assignment information, and campaign activity

Submission and document data

Applications, bank statements, processing statements, identification documents, voided checks, and other user-selected attachments
Funder names, recipient and CC addresses, submission subjects and bodies
Delivery status, attempts, and timestamps

Google connection data

Connected Google email address and Google provider account identifier
OAuth authorization status, granted scopes, token expiration
An encrypted token reference used to send on the user’s behalf
Gmail provider message and thread identifiers returned when a message is accepted

Communication and call data, when the client enables those features

Call metadata and status, recordings, transcripts, AI analysis of calls
SMS activity and email-delivery activity

Technical and security data

IP address, device and browser information, login events
Audit logs, error logs, security events, and usage information

3. Google API Services and Gmail Data

When an authorized user connects a Google Workspace or Gmail account, StrivePoint requests the openid, email, and gmail.send permissions. We use these permissions to identify the connected mailbox and to send submission emails that the user prepares, reviews, and explicitly authorizes.

StrivePoint does not use these permissions to read, search, download, modify, or delete messages in the connected Gmail mailbox.

Information received from Google APIs is used only to provide and improve the visible Google-connected features requested by the user. StrivePoint’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is not sold.
It is not used for advertising, retargeting, or cross-context behavioral advertising.
It is not provided to data brokers.
It is not used for unrelated profiling.
It is not used to train general-purpose or generalized AI models.
Data obtained from Google APIs is not used to determine creditworthiness, underwriting results, lending eligibility, approvals, or financing terms.
Employees and contractors are not permitted to access Google user data except when specifically authorized by the user, necessary for security purposes, or required by law.
OAuth credentials are stored as encrypted references and used only to operate the connected sending feature.

Users can disconnect Google access at any time in the portal under Settings → Submissions, and may also revoke access from their Google Account security settings. Disconnecting stops future access immediately; it does not automatically erase submission and audit records already lawfully created.

3A. Google Workspace API Data

StrivePoint accesses Google Workspace data only after the user provides affirmative authorization and only for the Google-connected features the user chooses to use.

We do not sell Google user data or use it for advertising, creditworthiness, lending decisions, or unrelated purposes. We do not use Google Workspace data to train or improve a shared or general-purpose artificial intelligence or machine-learning model.

The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Users may disconnect their Google account through Settings → Submissions. OAuth access is revoked or disabled immediately when the user disconnects Google or revokes authorization. StrivePoint deletes the stored OAuth token reference and unnecessary Google connection metadata within 30 days after disconnection or a verified deletion request. Submission, delivery, security, and audit records already lawfully created — including Google message or thread identifiers — may be retained only under StrivePoint’s normal retention schedule where necessary for security, fraud prevention, dispute resolution, contractual obligations, legal compliance, or transaction reconstruction. Those retained records must not permit renewed access to the Google mailbox and must be deleted or de-identified when no longer required.

3B. Contact Verification and People-Search Enrichment

This section applies only where a client enables contact-verification or enrichment features. When enabled, StrivePoint may process a business or contact name, business name, address, an existing telephone number, a candidate telephone number, a date of birth or age range where the client supplies one, line type, carrier, an indication of whether a number appears active, match or confidence information, and contact information returned by the provider.

The purpose is narrow: verifying contact quality and reducing the chance of reaching the wrong person. Enrichment output is an indicator, not proof. It does not establish identity, ownership of a telephone number, consent, permission to contact, creditworthiness, approval, underwriting eligibility, or funding eligibility, and it must not be treated as any of those things.

Enrichment results are never used to make or influence a lending, underwriting, eligibility, or pricing decision, and information obtained through Google APIs is never used in enrichment or in any such decision.

3C. Artificial Intelligence Processing

Where a client enables the relevant feature, StrivePoint uses AI services for the purposes below. For each, we describe what is sent, what is kept, and the restrictions we rely on.

Voice conversation — the call audio and configured agent variables are processed by our voice provider to conduct the call. Recordings, transcripts, and call metadata are returned to the platform and retained under our retention schedule. Staff may review a call for quality, support, or a complaint.
Transcription and summarization — call audio or transcript text is processed to produce a written transcript and a short summary. Outputs are retained with the call record and may be reviewed by authorized users of the owning client account and by StrivePoint support staff investigating an issue.
Classification — transcript text is processed to label outcomes such as interest level or an explicit do-not-call request. Labels are retained and drive suppression and reporting.
Document extraction — text from documents a client uploads is processed to produce a structured summary for the client’s own review. The summary is retained with the record. These outputs are informational and are not an approval, denial, or underwriting decision by StrivePoint.
Internal assistance — StrivePoint staff use an internal assistant over our own operational data. Its prompts and responses are retained for audit.

We contract with our AI providers on terms intended to prevent use of our submitted data to train their general-purpose models, and we do not permit our providers to use Google user data for training. We do not claim that no provider under any configuration retains data; providers retain limited data for abuse monitoring and support under their own terms. AI output can be wrong, and it is not a substitute for human judgment or professional advice.

4. How We Use Information

Operating and securing the portal and authenticating users
Maintaining tenant isolation between client accounts
Managing leads, campaigns, calls, documents, funders, and submissions
Sending emails that an authorized user explicitly confirms
Providing customer support
Preventing fraud, abuse, duplicate activity, and unauthorized access
Maintaining audit, delivery, and recordkeeping history
Improving platform reliability and user-facing features
Complying with legal obligations and enforcing our agreements

We do not use personal information for advertising or ad targeting.

To funders and their saved CC recipients selected or approved by the client
To assigned representatives within the same client account
To vendors that host, secure, authenticate, transmit, or support the service
To Google when operating the Gmail sending connection
To telephony and automation providers when the client enables those features
When required by law, court order, or valid government process
To investigate security incidents, fraud, or abuse
As part of a corporate transaction, subject to applicable protections

StrivePoint does not sell personal information and does not sell Google user data. We do not share personal information for cross-context behavioral advertising. StrivePoint uses tenant, role, and row-level authorization controls that are designed to prevent unauthorized access to one client’s data by another client. Merchant information is transmitted to a funder only when an authorized client user selects or approves that recipient.

Mobile telephone numbers, mobile opt-in records, and messaging consent records are not sold, rented, or disclosed to third parties for their own unrelated marketing. They are shared only with the providers that transmit the communication and only for that purpose. The presence of a telephone number in the platform is not itself evidence that a lawful basis to contact that number exists; that determination rests with the client that supplied the record.

6. Data Retention and Deletion

We retain information only as long as needed for the purpose it was collected, for the duration of the client relationship, and for security, legal, contractual, and recordkeeping requirements.

Account records — retained while the account is active and for a reasonable period afterward.
Submission batches, delivery and audit records — retained as transaction history so senders and recipients can be reconstructed.
Uploaded documents — kept in private storage and removed when the client deletes them or when the client relationship ends, subject to legal holds.
OAuth connections and tokens — the stored encrypted token reference is deleted or disabled when a mailbox is disconnected or access is revoked.
Call recordings, transcripts, and webhook payloads — subject to automated retention routines that archive or purge older operational records.
Security and audit logs — retained for a limited period for incident investigation.
Backups — routine backups may retain copies for a limited period before being overwritten.

Users may request deletion by writing to management@strivepointsolutions.com. Some records may be retained where legally required, or where needed to prevent fraud, resolve disputes, enforce agreements, or preserve transaction and audit history. Data is deleted or securely destroyed when the applicable retention period expires.

7. Security

Encryption in transit for site, portal, and API traffic
Encrypted references for stored OAuth credentials
Tenant isolation and row-level security in the database
Role-based access controls for portal features
Private (non-public) document storage
Audit logging of sensitive actions
Limited employee access on a need-to-know basis
Server-side sending so credentials are never exposed to the browser
Credential rotation and access revocation
Incident investigation and response procedures

No method of transmission or storage can be guaranteed completely secure. We do not claim any third-party security certification.

8. Your Rights and Requests

You may request access to, correction of, or deletion of your personal information, request account closure, disconnect a Google connection, request a copy of applicable personal information, or ask about your privacy rights by contacting management@strivepointsolutions.com.

We may need to verify your identity before acting on a request, and we may retain information where retention is legally permitted or required. Where a request concerns data a client uploaded, we will refer the request to that client and support them as their service provider. We will honor valid requests as required by applicable law.

9. Cookies and Similar Technologies

We audited what the site and portal actually load. Three categories are in use:

Necessary — the authenticated session store that keeps a portal user signed in and enforces tenant and role authorization.
Functional — interface preferences such as sidebar state.
Analytics — Google Analytics 4 on public marketing pages only, configured with IP anonymization, Google Signals off, and ad personalization off. Analytics is not loaded in the portal, admin, or authentication areas, and page paths are sent without query strings.

As of the date of this policy we load no advertising cookie, no advertising SDK, no marketing pixel, and no session-replay tool. If that changes, this section and our no-sale and no-sharing statements will be updated before the change goes live.

10. Third-Party Links and Services

The website and portal may link to or integrate with third-party services, including Google, telephony providers, automation providers, and cloud hosting and storage providers. Those services operate under their own terms and privacy practices.

11. Age and Intended Users

The website and portal are business tools intended for people aged 18 or older who are acting for a business. They are not directed to children, and we do not knowingly collect information from anyone under 18. If we learn that we hold information from someone under 18, we delete it.

12. International Processing

The service is operated from the United States. If you access it from outside the United States, your information will be processed in the United States.

13. State-Specific Disclosures

Where state privacy laws apply, residents may have rights to access, correct, delete, or obtain a copy of personal information, and to appeal a denied request. StrivePoint does not sell personal information and does not share it for cross-context behavioral advertising, so no opt-out-of-sale mechanism is offered. Requests may be submitted to the privacy contact above.

14. Changes to This Policy

We may update this policy. Material changes will be reflected by a new “Last updated” date at the top of this page.

15. Contact

Strivepoint Solutions LLC (StrivePoint Solutions)
9790 W. Dixie Hwy Suite 1101, Miami, FL 33180, United States
management@strivepointsolutions.com · +1 (773) 280-7254
See also our Terms of Service, Privacy Choices, Security Overview, Responsible Outreach Controls, and Communications Terms.