Privacy Policy

Effective March 29, 2026

1. Who We Are

StrikePoint is operated by Sylas Software ("we," "us," "our"). StrikePoint is a bid management and estimation platform for pavement marking contractors. Our website is located at usestrikepoint.com.

2. Information We Collect

We collect information you provide directly when you use StrikePoint:

  • Account information: name, email address, company name, and phone number provided during registration.
  • Business data: bid documents, project details, pricing information, crew and equipment details, and bid strategy preferences you enter into the platform.
  • Google account data: if you connect your Google account, we access Google Sheets and Google Drive to create and manage bid tracking spreadsheets and project document folders on your behalf. We only access files and folders that StrikePoint creates. We do not read or modify your other Google Drive files.
  • Microsoft account data: if you connect your Microsoft account, we access OneDrive and Excel Online to create and manage bid tracking workbooks and related folders on your behalf. We do not use Microsoft inboxes for email scanning today.
  • Email data: StrikePoint can process bid emails that you forward into the platform. For selected workspaces, StrikePoint also supports limited-availability Gmail inbox scanning. Outlook inbox scanning is not currently live. We do not store full email contents beyond what is necessary for bid processing.
  • Usage data: pages visited, features used, and technical information such as browser type and IP address, collected automatically.

3. How We Use Your Information

  • To provide, maintain, and improve the StrikePoint platform.
  • To generate bid estimates and recommendations based on your business data.
  • To create and manage Google Sheets and Google Drive folders for bid tracking.
  • To send notifications about bid activity (via email or SMS, based on your preferences).
  • To process payments through our billing provider (Stripe).
  • To respond to support requests.

4. How We Share Your Information

We do not sell, rent, or share your personal information or business data with third parties for their marketing purposes. We share data only in these limited circumstances:

  • Service providers: we use third-party services to operate the platform, including Clerk (authentication), Supabase (database), Stripe (payments), Google APIs (Sheets, Drive, and limited-availability Gmail access), Microsoft Graph APIs (OneDrive and Excel Online), AWS (document processing), Vercel (hosting), and AI providers including Google Gemini, Anthropic Claude, and OpenAI GPT (for document classification, extraction, and estimation — details). These providers access only the data necessary to perform their function.
  • Legal requirements: we may disclose information if required by law, regulation, or legal process.
  • Your bid pricing, client details, and business strategy data are never shared with competitors or used to train AI models. StrikePoint does not use your blueprints or plan sets to train AI models. Documents are processed in real-time via API calls under each provider's data handling terms. We select providers and API tiers that minimize data retention.

5. Google API Scopes

When you connect your Google account, StrikePoint requests the following permissions:

  • Google Sheets: create and edit spreadsheets that StrikePoint uses as your bid tracking board.
  • Google Drive (limited): create folders and upload files for project document organization. We use the drive.file scope, which limits access to only files and folders created by StrikePoint.
  • Profile information: your email address and name, used to identify your account.
  • Gmail (limited availability): for workspaces explicitly enabled for Gmail inbox scanning, StrikePoint may request Gmail access needed to read bid-related messages and support inbox-driven bid workflows.

StrikePoint's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Security

We use TLS for data in transit. StrikePoint uses Clerk for authentication and restricts workspace access to authenticated users. Stored Google and Microsoft provider credentials, along with any enabled inbox-connection credentials, are encrypted before database storage. Public proposal and invoice links expire after 30 days, can be revoked, and can optionally require a verification PIN before viewing. StrikePoint records shared-link activity for staff review without retaining raw visitor IP addresses in that activity log.

7. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your account and all associated data at any time by contacting us at the email below. Upon deletion, we will remove your data from our systems within 30 days, except where retention is required by law. Google Drive files and Sheets created by StrikePoint remain in your Google account and are under your control. Public proposal and invoice links are designed to expire automatically rather than remain indefinitely accessible.

8. Your Rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your account and data.
  • Revoke Google or Microsoft provider access at any time through the provider account or through StrikePoint settings.
  • Disconnect supported inbox connections or switch back to forwarding at any time.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

10. Contact

If you have questions about this privacy policy or want to request data deletion, contact us at support@usestrikepoint.com.