StrikeZone Growth Inc. Privacy Policy

Effective Date: February 23, 2026

Last Updated: February 23, 2026

StrikeZone Growth Inc. (“StrikeZone,” “we,” “our,” or “us”) provides a software-as-a-service (SaaS) platform (the “Services”) that enables business users to connect, access, retrieve, analyze, and store marketing automation and CRM datasets from third-party platforms such as HubSpot, Salesforce, and Zoho (collectively, “Connected Platforms”).

This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our websites or use our Services. It also describes rights available under applicable privacy laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as amended by the CPRA.

By using the Services and authorizing access to Connected Platforms, you agree to this Privacy Policy.

1. Scope

This Privacy Policy applies to:

• Visitors to our websites (including sz24.io and sz24.ai) (the “Websites”)
• Users of our SaaS platform (including administrators and authorized users)
• Customers who connect Connected Platforms to the Services
• Individuals whose personal data may be included in CRM/marketing datasets processed through the Services (e.g., leads, contacts), where applicable

Important note (B2B context): When our business customers upload or connect CRM/marketing datasets to the Services (“Customer Data”), the customer typically acts as the data controller (GDPR) and StrikeZone acts as a data processor. If you are an individual whose data is included in a customer’s CRM, your privacy requests may need to be directed to that customer first (see Section 8).

2. Information We Collect

We collect information in three main ways: (a) information you provide, (b) information collected automatically when you use our Websites/Services, and (c) information we receive from Connected Platforms at your direction.

2.1 Account and Profile Information

• Name, business email address, company name
• Role/title and business contact details
• Account credentials and authentication data (e.g., SSO metadata where applicable)

2.2 Connected Platform and Integration Data

When you connect HubSpot, Salesforce, Zoho, or other Connected Platforms, we may collect and process:

• Authorization data (e.g., OAuth tokens and integration configuration details)
• API connection status, scopes/permissions granted, and sync settings
• Metadata about connected objects and fields (e.g., mappings)

2.3 Marketing & CRM Data (Customer Data)

Depending on what you connect and sync, Customer Data may include:

• Contact/lead records (e.g., names, emails, company associations, deal stages)
• Campaign and engagement metrics (e.g., opens, clicks, conversions)
• Sales activity logs and related CRM events (e.g., lifecycle stages, tasks, notes)
• Workflow/automation metadata and engagement analytics

2.4 Technical, Usage, and Device Data

• IP address, device/browser type, operating system
• Log files, performance metrics, error reports
• Session activity and feature usage analytics

2.5 Cookies and Similar Technologies

We use cookies and similar technologies to support essential site functionality, maintain sessions, remember preferences, and understand product performance (see Section 11).

3. How We Use Information

We use information for the following purposes:

1. Service Delivery
   Provide the Services, including data ingestion, synchronization, storage, dashboards, analytics, reporting, and platform functionality you request.
2. Account Management and Security
   Create and manage accounts, authenticate users, secure access, and prevent fraud/abuse.
3. Customer Support
   Respond to inquiries, troubleshoot issues, and provide technical assistance.
4. Product Improvement and Performance
   Monitor performance, improve features, develop new functionality, and optimize usability and reliability.
5. Compliance and Legal Obligations
   Meet applicable legal, regulatory, and contractual obligations, and enforce our terms.

We do not sell personal data. We do not use Customer Data for targeted advertising or profiling for advertising purposes.

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on the following legal bases under GDPR/UK GDPR where applicable:

• Consent (Article 6(1)(a)) – when you authorize integrations or choose to provide information voluntarily
• Contract (Article 6(1)(b)) – when processing is necessary to provide the Services
• Legal Obligation (Article 6(1)(c)) – to comply with legal requirements
• Legitimate Interests (Article 6(1)(f)) – for security, fraud prevention, internal analytics, and product improvement, provided these interests are not overridden by your rights

Where we process Customer Data on behalf of a business customer, we do so under that customer’s instructions and our applicable data processing terms.

5. How We Share Information

We do not sell personal data. We may share information in the following circumstances:

5.1 Service Providers (Subprocessors)

We use vetted third-party service providers for functions such as hosting, infrastructure, monitoring, analytics (non-advertising), customer support tooling, and security. These providers are authorized to process information only as necessary to provide services to us and are bound by confidentiality and data protection obligations.

5.2 Legal and Safety

We may disclose information if required to do so by law, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect rights, safety, and security (including investigating suspected fraud or abuse).

5.3 Business Transfers

If StrikeZone is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of assets, information may be transferred as part of that transaction, subject to appropriate safeguards and notices where required.

5.4 With Your Instructions

We share information when you instruct us to—such as syncing data to or from a Connected Platform you authorize.

6. International Data Transfers

StrikeZone is a U.S. company. If you access the Services from the EEA/UK/Switzerland, your information may be transferred to and processed in the United States or other jurisdictions.

When required, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms.

7. Data Retention

We retain information only as long as reasonably necessary to:

• Provide and maintain the Services
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain security and operational integrity

Customer Data: If you disconnect an integration or close an account, we will delete or de-identify Customer Data in accordance with our agreements and applicable law, subject to limited retention for legal, security, and backup purposes.

8. Your Privacy Rights

8.1 California (CCPA/CPRA)

If you are a California resident (as defined by law), you may have the right to:

• Know what personal information we collect, use, disclose, and share
• Access the personal information we hold about you
• Delete personal information (subject to legal exceptions)
• Correct inaccurate personal information
• Opt out of sale or sharing of personal information (StrikeZone does not sell personal information and does not share it for cross-context behavioral advertising.)
• Limit the use/disclosure of sensitive personal information (where applicable)
• Non-discrimination for exercising your rights
• Use an authorized agent to submit requests on your behalf

How to submit a request: Email us at privacy@sz24.ai with the subject line “California Privacy Request” or contact us via Section 14.

We will verify your request using information appropriate to the nature of the request.

8.2 European Union / GDPR

If you are in the EEA (and similarly under UK/Swiss regimes where applicable), you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

How to exercise rights: Email privacy@sz24.ai with the subject line “GDPR Request.” We typically respond within 30 days, subject to lawful extensions.

8.3 Requests Involving Customer Data (B2B)

If your personal data is included in a StrikeZone customer’s CRM/marketing datasets, the customer may be the controller. In that case, we may direct you to contact the customer first, and we will support the customer in fulfilling requests as required by applicable law and our contractual obligations.

9. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption in transit (e.g., TLS)
• Encryption at rest (where appropriate)
• Role-based access controls and least-privilege principles
• Security monitoring and logging
• Vendor risk management and contractual safeguards with service providers

No method of transmission or storage is 100% secure, but we work to maintain safeguards appropriate to the risk and nature of the data.

10. Children’s Privacy

The Websites and Services are not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us at privacy@sz24.ai.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain sessions and enable core functionality
• Remember preferences
• Understand performance and improve usability

You can control cookies through your browser settings and (where available) our cookie preferences mechanism. Disabling certain cookies may affect site or Service functionality.

12. Third-Party Links and Connected Platforms

Our Websites or Services may link to third-party websites or services. This Privacy Policy does not apply to third parties, including HubSpot, Salesforce, or Zoho. Please review their privacy policies separately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will revise the “Last Updated” date above and, where required, provide additional notice (e.g., email or in-app notice).

14. Contact Information

Privacy Contact: privacy@sz24.ai
Support Contact: support@sz24.ai
Phone (USA): +1 707 243 3030
Phone (Poland): +48 500 521 884

To exercise privacy rights, please email privacy@sz24.ai and include enough information for us to understand and process your request.

By using the Services and connecting Connected Platforms, you acknowledge that you have read and understood this Privacy Policy.

You have not enough Humanizer words left. Upgrade your Surfer plan.