Privacy Policy

1. Introduction

EnRoute Growth Platform ("EGP," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you access or use our websites, platforms, applications, products, and services (collectively, the "Services").

This Privacy Policy applies to all EGP products and services, including EGP MapBoost, EGP PRBoost, EGP AIBoost, EGP RepBoost, EGP VoiceBoost, EGP AutoBoost, EGP ContentBoost, EGP ComplianceGuard, EGP LegalBoost, EGP CRM, and EGP ORCA.

By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, phone number, postal address, company name, job title
• Payment Information: Credit or debit card details, billing address, transaction history
• Profile Data: User preferences, settings, communication choices, profile photos
• Communication Data: Messages sent through the Services, support inquiries, feedback, survey responses
• Client Business Data: Business information you provide for service delivery, including business name, address, website URL, industry, customer records, marketing materials

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, time spent on pages, navigation paths, search queries
• Device Information: Browser type and version, operating system, device type, screen resolution, device identifiers
• Network Information: IP address, internet service provider, approximate geographic location
• Cookie and Tracking Data: Cookies, web beacons, pixels, and similar tracking technologies (see Section 10)

2.3 Information from Third-Party Sources

• Partner Data: Information received from business partners, data providers, and integrated platforms
• Public Data: Publicly available information from business directories, social media profiles, and government records
• Referral Data: Information provided by other users who refer you to our Services

2.4 AI-Related Data Collection

When you use our AI-powered Services, we may collect:

• Input Data: Text, files, images, and other content you submit to AI-powered features
• AI Interaction Data: Your interactions with AI systems, including queries, selections, and feedback
• Voice Data: Audio recordings when using EGP VoiceBoost or other voice-enabled services (with your explicit consent)

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

Legal Basis	Processing Activity
Contract Performance (Art. 6(1)(b))	Providing Services, processing payments, account management
Legitimate Interests (Art. 6(1)(f))	Service improvement, fraud prevention, analytics, security
Consent (Art. 6(1)(a))	Marketing communications, cookies, voice recording, AI data processing
Legal Obligation (Art. 6(1)(c))	Tax compliance, regulatory requirements, legal proceedings

You may withdraw consent at any time by contacting us or using the opt-out mechanisms described in this Policy.

4. How We Use Your Information

4.1 Service Delivery

• Processing transactions and managing your account
• Providing, maintaining, and improving the Services
• Delivering AI-powered features, including content generation, search optimization, and analytics
• Fulfilling your requests and responding to inquiries

4.2 Communication

• Sending administrative notices, service updates, and security alerts
• Responding to customer support requests
• Sending marketing communications (with your consent or as permitted by law)

4.3 Improvement and Analytics

• Analyzing usage patterns to improve the Services
• Conducting research and development
• Testing new features and functionality
• Generating aggregated, anonymized insights

4.4 Security and Compliance

• Detecting, preventing, and responding to fraud, abuse, and security threats
• Enforcing our Terms of Service and other agreements
• Complying with applicable laws, regulations, and legal processes
• Responding to lawful government requests

4.5 AI Service Delivery

• Processing input data through AI models to generate outputs
• Improving the accuracy and quality of AI-powered features
• Monitoring AI systems for bias, errors, and compliance

5. How We Share Your Information

5.1 Service Providers

We share information with trusted third-party service providers who assist in operating the Services, including payment processors, cloud hosting providers, analytics services, customer support tools, and email delivery services. All service providers are bound by contractual obligations to protect your data.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, your information may be transferred as part of the transaction. We will notify you of any such transfer.

5.3 Legal Requirements

We may disclose information when required by law, regulation, legal process, or government request, or when disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5.5 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you.

6. Data Retention

Data Category	Retention Period	Basis
Account Information	Duration of account plus 2 years	Contract, legal obligation
Payment Records	7 years	Tax and financial reporting requirements
Usage and Analytics Data	3 years	Legitimate interests
Marketing Consent Records	Duration of consent plus 3 years	Legal obligation
Support Communications	3 years after resolution	Legitimate interests
AI Interaction Data	1 year	Service improvement
Voice Recordings	90 days	Consent-based processing

7. Your Privacy Rights

7.1 Rights for All Users

Regardless of your location, you may:

• Access your personal information held by EGP
• Correct inaccurate or incomplete personal information
• Delete your account and associated personal information
• Opt out of marketing communications at any time
• Request information about how your data is used

7.2 GDPR Rights (EEA, UK, Switzerland Residents)

Under the GDPR, you have the following additional rights:

• Right of Access (Art. 15): Obtain a copy of your personal data and information about its processing
• Right to Rectification (Art. 16): Correct inaccurate personal data
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing (Art. 18): Limit how we process your data
• Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format (JSON or CSV)
• Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing
• Right Not to Be Subject to Automated Decision-Making (Art. 22): Request human review of automated decisions that significantly affect you
• Right to Withdraw Consent: Withdraw previously given consent at any time

Response Time: We will respond to all GDPR requests within 30 days of receipt.

Data Protection Contact: privacy@enroutegrowthplatform.com

7.3 CCPA/CPRA Rights (California Residents)

Under the California Consumer Privacy Act and California Privacy Rights Act, California residents have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you in the preceding 12 months
• Right to Delete: Request deletion of personal information we have collected
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: Direct us not to sell or share your personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: Limit the use of sensitive personal information to purposes necessary for the Services
• Right to Non-Discrimination: Receive equal service and pricing regardless of exercising your privacy rights

Categories of Personal Information Collected (Preceding 12 Months):

• Identifiers (name, email, phone, IP address)
• Commercial information (purchase history, subscription records)
• Internet or electronic network activity (usage data, browsing history on our Services)
• Geolocation data (approximate location from IP address)
• Professional or employment information (job title, company name)
• Inferences drawn from the above categories

Sale of Personal Information: EGP does not sell personal information as defined under the CCPA/CPRA.

Response Time: We will respond to all CCPA/CPRA requests within 45 days of receipt.

7.4 VCDPA Rights (Virginia Residents)

Under the Virginia Consumer Data Protection Act, Virginia residents have the following rights:

• Right to Access: Confirm whether we are processing your data and access it
• Right to Correct: Correct inaccurate personal data
• Right to Delete: Delete personal data we hold about you
• Right to Data Portability: Obtain your data in a portable format
• Right to Opt-Out: Opt out of targeted advertising, sale of personal data, and profiling

Response Time: We will respond to all VCDPA requests within 45 days of receipt.

Appeal Process: If we deny your request, you may appeal by contacting privacy@enroutegrowthplatform.com. We will respond to your appeal within 60 days.

8. Data Security

We implement appropriate technical and organizational measures to protect personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Access controls and authentication requirements
• Regular security assessments and vulnerability testing
• Employee security awareness training
• Incident response and breach notification procedures
• Secure data backup and disaster recovery

Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your personal information.

9. International Data Transfers

EGP is headquartered in the United States. If you are located outside the United States, your personal information may be transferred to, stored in, and processed in the United States or other countries.

For transfers of personal data from the EEA, UK, or Switzerland to the United States, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and supplementary measures as appropriate.

10. Cookies and Tracking Technologies

10.1 Types of Cookies

Cookie Type	Purpose	Duration
Strictly Necessary	Essential for site functionality, security, and authentication	Session or persistent
Performance/Analytics	Measure site usage, improve performance	Up to 2 years
Functional	Remember preferences, settings, and choices	Up to 1 year
Marketing/Targeting	Deliver relevant advertising, measure campaign effectiveness	Up to 2 years

10.2 Cookie Management

You can manage cookie preferences through your browser settings, our cookie consent banner (displayed on first visit), or our Privacy Center at www.enroutegrowthplatform.io/privacy-center.

10.3 Do Not Track

EGP honors Do Not Track (DNT) browser signals where technically feasible.

11. Children's Privacy

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

12. Automated Decision-Making and Profiling

EGP uses automated decision-making and profiling in the following contexts:

• AI Content Generation: Automated content creation based on your input and preferences
• Search Optimization: Automated analysis and optimization of search visibility
• Fraud Detection: Automated monitoring of account activity for suspicious behavior
• Service Recommendations: Automated suggestions based on usage patterns

You have the right to request human review of automated decisions that have a significant effect on you. Contact us at privacy@enroutegrowthplatform.com to exercise this right.

13. Third-Party Links and Services

The Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on our website, sending email notification, or displaying a notice within the Services.

15. Contact Us