Privacy Policy

Who we are

Streben Ellipse is operated by Streben Marketing LLC, a New York limited liability company trading as Streben. If you are a Streben client, we act on your instructions and on your behalf when we handle information about your business and your customers.

You can reach us about anything in this policy at support@streben.io.

What we collect

Information you give us when you sign up and set up your account:

• Your name, your business name, and your email address.
• Your website address and what kind of business you run.
• A description of your business, the services you offer, and what you want your marketing to achieve.
• Your locations, including the label you use for each one, its city, its street address and its phone number.
• How you want to sound, including a tone preference, any notes you give us, and a writing sample if you provide one.
• Photos you upload, or photos in a Google Drive folder Streben keeps for you.

Information we read from the accounts you connect:

• Your Google Business Profile, including your locations, categories, hours, description, services and photos.
• Reviews left on your Google listing, including the reviewer's display name, their star rating, the text of the review, and any reply.
• Search performance data for your website, such as the queries people used and how your pages ranked.

Information we generate for you, such as drafted posts, articles, review replies, profile changes, website recommendations and AI search visibility results.

Technical information, which is limited. We keep ordinary server logs, and we record the IP address a signup came from so that the public signup form cannot be used to flood us with fake accounts.

If you pay through the product, Stripe handles the payment. We never see or store your card number. We store only the customer and subscription identifiers Stripe gives us.

Google user data

This section describes what we do with data we get from Google. It applies whether you connect by signing in with Google or by adding a Streben email as a manager on your listing.

When you connect by signing in with Google, we request one scope and only one: https://www.googleapis.com/auth/business.manage. We do not request access to your Gmail, your contacts, your calendar, your files or your location.

We use that access to:

• Read your business locations, categories, hours, description, services, attributes and photos, so we can tell you what is missing or wrong.
• Read your reviews so we can draft replies for you.
• Publish posts, photos, review replies and profile changes, but only the ones you have approved, or the ones you have explicitly told us to handle without asking.

Most Streben clients today do not sign in with Google at all. Instead they add a Streben email address as a manager on their listing, which is a permission you grant inside Google and can remove at any time from the same screen. Either way, the access is yours to withdraw.

Streben Ellipse's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, that means we use Google data to provide the features you can see in the product and for nothing else. We do not use it for advertising. We do not sell it. We do not use it to train generalized artificial intelligence models. A person at Streben looks at it only when you ask us for support, when we have to investigate a security or abuse problem, or when the law requires it.

To disconnect, remove the Streben email from the people and access screen on your Google Business Profile, or, if you signed in with Google, revoke access at myaccount.google.com/permissions. Tell us as well and we will delete the Google data we hold for you within 30 days.

Separately from your own account, Streben keeps client photo folders in its own Google Drive. Where that applies to you, Ellipse reads those folders. It cannot write to them, and it never touches a Drive that belongs to you.

Artificial intelligence and your content

Ellipse drafts content with AI, and you should know exactly what that means for your data.

To draft an article, a social post, a Google post or a review reply, we send the relevant material to an AI provider. That material includes what you told us about your business, your services and your brand voice, and, when we are drafting a reply, the text of the review and the reviewer's display name.

We use providers whose terms do not permit them to train their models on data sent through their business interfaces. Today those providers are Anthropic and Google. We do not train any model of our own on your content.

Photos you upload are analyzed automatically so that we can describe and tag them. If a photo shows an identifiable person, that photo is processed too, which is why you should only upload photos you have the right to use and to publish.

Everything AI writes is a draft. Nothing reaches your Google listing, your social accounts or your website until you approve it, unless you have explicitly turned that requirement off for a particular kind of work.

How we use information

• To run the service you signed up for, which is the reason for nearly everything we hold.
• To show you what is waiting for your approval and what has already gone out.
• To email you about your account, including a welcome message and notices about your service.
• To take payment, if you pay through the product.
• To keep the service secure, prevent abuse, and fix things when they break.
• To meet our legal obligations.

We do not use your information to advertise to you, and we do not use one client's information to benefit another client.

Who else can see it

Streben staff who need access in order to run your account can see your data. Beyond that, we use the following service providers. Each one receives only what it needs for the purpose shown, and handles it under its own terms of service and data processing terms:

Some accounts have articles produced through a third-party content generation service operated by an independent partner. Where that applies to you, your business description, services and brand voice are shared with that service in order to produce the article. Ask us and we will tell you whether your account uses it.

We also share information when the law requires it, when we need to establish or defend a legal claim, or in connection with a merger or sale of the business, in which case you will be told.

What we do not do

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

The Ellipse application carries no third-party analytics, no advertising pixels and no tracking scripts. There is no analytics tag, no advertising network tag and no session recorder in the product. This is worth stating plainly because it is unusual.

Cookies

Ellipse uses cookies for one purpose, which is to keep you signed in. Those cookies are set by our authentication provider, Clerk, and the service does not work without them.

We also store your light or dark theme preference in your browser. That never leaves your device and is not a cookie.

There are no advertising or analytics cookies to opt out of, which is why the product does not show you a cookie banner.

Security

• Traffic to and from the product is encrypted in transit.
• Credentials you grant us, such as an access token for your own account, are encrypted before they are stored, using AES-256-GCM with a key held in our hosting environment rather than in the database. The database never holds the token itself.
• Access is limited to Streben staff who need it, through individual accounts.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your information, we will tell you promptly and tell you what we know.

How long we keep it

We keep your account data for as long as your account is open.

After your account closes, we keep it for 30 days so that you can change your mind or ask for a copy, and then we delete it within 90 days. Data in routine backups is removed as those backups age out. We keep what we must keep for tax, accounting or legal reasons, and nothing else.

You can ask us to delete your data sooner by writing to support@streben.io. Google data specifically is deleted within 30 days of your request or of your account closing, whichever comes first.

Work that has already been published belongs to you and stays where it is. An article on your website, a post on your Google listing or a reply under a review is yours, and closing your Ellipse account does not remove it.

Your choices

• You can see and change what we hold about your business at any time from your dashboard.
• You can ask us for a copy of your data, ask us to correct it, or ask us to delete it.
• You can withdraw our access to any connected account at any time, from that account rather than from us.
• You can unsubscribe from anything promotional. Messages about your own account and service are not promotional, and you will keep receiving those while your account is open.

If you are in California, you have the right to know what we collect, to have it deleted, to correct it, and not to be treated differently for exercising those rights. As above, we do not sell or share personal information as those terms are used in California law.

We do not charge for these requests and we will answer within 30 days.

Information about other people

Some of what we handle is about your customers rather than about you. Reviews are the clearest example, since a review carries the reviewer's display name and whatever they chose to write.

We handle that information on your behalf and on your instructions. You are responsible for it under your own privacy policy, and we are responsible for handling it only in the ways this policy describes.

The same applies to photographs. If you upload a photo showing a customer, a patient or a resident, you are confirming that you have the right to use and publish it. Please do not upload anything containing health information or any other sensitive personal data. Ellipse is not built to hold it.

Children

Ellipse is a product for businesses. It is not directed at children, and we do not knowingly collect information from anyone under 13. If you think a child has given us information, write to us and we will remove it.

If you are outside the United States

Streben is based in the United States, and every provider listed above processes data in the United States. If you use Ellipse from elsewhere, your information will be transferred to and stored in the United States, where privacy law differs from the law where you live.

Ellipse is sold to businesses in the United States. If you are subject to the law of another country and need specific commitments, write to us before you sign up rather than after.

Changes to this policy

We will update this policy when the product changes. The effective date at the top always reflects the current version. If a change materially affects how we handle your information, we will email you rather than quietly changing the page.