EnRoute Growth Platform Privacy Policy

Effective Date: May 30, 2026 | Version: 3.0 | Supersedes: V2.0 (April 1, 2026)

V3 Change Summary

V3 expands Section 7 (Privacy Rights) with state-resident rights coverage in force since V2:

7.5 Colorado Privacy Act (CPA, eff. July 1, 2023; Universal Opt-Out July 1, 2024)
7.6 Connecticut Data Privacy Act (CTDPA, eff. July 1, 2023)
7.7 Utah Consumer Privacy Act (UCPA, eff. Dec 31, 2023)
7.8 Texas Data Privacy and Security Act (TDPSA, eff. July 1, 2024)
7.9 Oregon Consumer Privacy Act (OCPA, eff. July 1, 2024)

Also clarifies the CCPA/CPRA Sale/Sharing opt-out, adds Global Privacy Control recognition, and adds Sensitive Personal Information right-to-limit. All other sections of V2.0 are incorporated by reference without material change.

1. Introduction (unchanged from V2.0)

EnRoute Growth Platform ("EGP," "we," "us," or "our") protects the privacy and security of your personal information. Applies to EGP MapBoost, PRBoost, AIBoost, RepBoost, VoiceBoost, AutoBoost, ContentBoost, ComplianceGuard, LegalBoost, CRM, and ORCA.

Headquarters: EnRoute Growth Platform, 1640 Boro Pl, 4th Floor, McLean, VA 22102, United States.

2-6. Information Collection, Sharing, and Retention (unchanged from V2.0)

Sections 2 (Information We Collect), 3 (GDPR Legal Basis), 4 (How We Use), 5 (How We Share), and 6 (Data Retention) are incorporated by reference from V2.0 without material change.

7. Your Privacy Rights

7.3 CCPA/CPRA Rights (California Residents) (UPDATED V3)

Right to Know, Delete, Correct
Right to Opt-Out of Sale or Sharing. EGP does not sell PI for monetary consideration. EGP may share PI for cross-context behavioral advertising in certain contexts; California residents may opt out via our "Do Not Sell or Share My Personal Information" link or by transmitting a Global Privacy Control (GPC) signal, which EGP honors as a valid opt-out request.
Right to Limit Use and Disclosure of Sensitive Personal Information (SPI) per Cal. Civ. Code Section 1798.121.
Right to Non-Discrimination
Right Regarding Automated Decision-Making per CPPA regulations adopted under Cal. Civ. Code Section 1798.185(a)(16).

Response Time: 45 days, extendable by 45 days with notice.

7.4 Virginia CDPA Rights (unchanged from V2.0)

7.5 Colorado Privacy Act Rights (NEW V3)

Colorado Privacy Act, C.R.S. Section 6-1-1301 et seq., effective July 1, 2023. Rights: access, correction, deletion, portability, opt-out of targeted advertising, sale, and consequential profiling. EGP recognizes Universal Opt-Out Mechanisms (including GPC) as of July 1, 2024 enforcement. 45-day response, 45-day extension, 45-day appeal.

7.6 Connecticut Data Privacy Act Rights (NEW V3)

Conn. Gen. Stat. Section 42-515 et seq., effective July 1, 2023. Rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale, and consequential profiling. EGP recognizes Universal Opt-Out Mechanisms (eff. January 1, 2025). 45-day response.

7.7 Utah Consumer Privacy Act Rights (NEW V3)

Utah Code Section 13-61-101 et seq., effective December 31, 2023. Rights of access, deletion, portability, and opt-out of targeted advertising and sale. 45-day response.

7.8 Texas Data Privacy and Security Act Rights (NEW V3)

Tex. Bus. & Com. Code Section 541.001 et seq., effective July 1, 2024. Rights of access, correction, deletion, portability, and opt-out of targeted advertising, sale, and consequential profiling. EGP recognizes Universal Opt-Out Mechanisms (eff. January 1, 2025). 45-day response.

7.9 Oregon Consumer Privacy Act Rights (NEW V3)

ORS Section 646A.570 et seq., effective July 1, 2024. Rights of access (including list of third parties to whom personal data has been disclosed), correction, deletion, portability, and opt-out of targeted advertising, sale, and consequential profiling. 45-day response.

7.10 How to Exercise Your Rights

Email: privacy@enroutegrowthplatform.com | Web form: https://app.enroute.global/privacy-request | Mail: EnRoute Growth Platform, Attn: Privacy, 1640 Boro Pl, 4th Floor, McLean, VA 22102. EGP verifies requestor identity proportionate to data sensitivity and does not discriminate against consumers exercising privacy rights.

8-15. (Unchanged from V2.0)

Sections 8 (Data Security), 9 (International Data Transfers), 10 (Cookies and Tracking Technologies), 11 (Children's Privacy), 12 (Automated Decision-Making and Profiling), 13 (Third-Party Links and Services), 14 (Changes to This Privacy Policy), and 15 (Contact Us) are unchanged from V2.0 and are incorporated by reference.