Information we collect

• Account data: name, email, phone, business name, billing details when you sign up for Straton.
• Usage data: pages viewed, features used, device and browser type, IP address, via analytics tools including Google Analytics 4.
• Form submissions: any information you voluntarily provide through contact forms, demos, or lead capture forms.
• Customer data inside Straton: contacts, messages, call recordings, and other records you or your users create in the CRM. We process this on your behalf as a service provider.

How we use information

• To provide, maintain, and improve the Straton CRM platform.
• To respond to inquiries, provide customer support, and send transactional messages.
• To send marketing communications — only with your consent, and you can opt out at any time.
• To comply with legal obligations and enforce our Terms of Service.

Sharing

We do not sell your personal information. We share it only with:

• Service providers who help us operate (hosting, analytics, email delivery, payment processing, telephony/SMS via Twilio).
• Legal authorities when required by law or to protect rights, property, or safety.
• A successor entity in the event of a merger, acquisition, or sale of assets.

Your rights

• Access, correct, or delete your personal information.
• Opt out of marketing communications (reply STOP to SMS, use the unsubscribe link in email).
• Request a copy of the data we hold about you.
• California (CCPA/CPRA), EU (GDPR), and other jurisdictions: additional rights including data portability and the right to object to processing.

To exercise any of these rights, email privacy@sbhelpgroup.com.

Cookies

We use cookies for site functionality, analytics, and marketing. You can control cookies through your browser settings.

Data retention

We retain account data for as long as your account is active, plus a reasonable period to comply with legal obligations. You can request deletion at any time.

Security

We use industry-standard safeguards including encryption in transit and at rest, access controls, and regular security reviews. Report concerns to security@sbhelpgroup.com.

Session replay (TCPA evidence capture)

If our customer enables Compliance Pro or Compliance Max, the Straton consent script will record a privacy-scrubbed video reconstruction of the moment a visitor submits a form — exclusively as evidence that the visitor saw and accepted the disclosure. This feature is off by default, opt-in per tenant, and opt-in per form.

• What is recorded: DOM mutations, mouse position, scroll, and form-field interactions on the page that contains the consent form. We capture only the consent moment — not the visitor's broader browsing session.
• What is masked client-side before recording: Password fields, telephone fields, credit card numbers, Social Security numbers, and any field marked data-private. Scrubbing happens in the visitor's browser before transmission.
• Visitor disclosure: When recording is active, a small banner appears on the page telling the visitor that their interaction with the consent form is being recorded for compliance.
• Retention: Recordings auto-delete after 30 / 60 / 90 / 180 / 365 days, depending on the tenant configuration. Tenants under active legal hold are exempt from auto-delete.
• Storage and integrity: Recordings are stored encrypted at rest and (where the operator key is present) signed with Ed25519 to detect tampering.
• EU/EEA visitors: Recording of EU/EEA visitors is blocked unless the customer explicitly opts in. We recommend customers consult counsel before enabling EU capture.
• Wiretap-law states: Customers operating in two-party-consent states (e.g. CA, FL, IL, MA, MD, PA, WA) are responsible for keeping the visitor disclosure banner enabled.
• Right to deletion: Visitors may request deletion of any recording made of their session at privacy@sbhelpgroup.com. Deletion is processed within 30 days unless legal hold applies.

See our Session Replay Disclosure for a plain-English explanation written for visitors.

Children

Straton is not directed at children under 16. We do not knowingly collect information from children.

Changes

We may update this policy. Material changes will be posted here with a revised "Last updated" date.

Contact

Questions? Email privacy@sbhelpgroup.com or call (833) 699-7051.