Privacy policy

Scope and who this policy covers

This Privacy Policy applies to Stride’s websites, applications, field-service tools, account onboarding, support, communications, and related services that link to this policy (collectively, the “Services”). In this policy, “Stride,” “we,” “us,” and “our” refer to Automotive Resource Co., an Oklahoma company based in Oklahoma, United States.

The policy covers people who visit a Stride website, create or use a Stride account, receive communications from Stride, interact with a business using Stride, or otherwise have information processed through the Services. It does not apply to third-party products, websites, or services that have their own privacy notices.

Our role and your business’s role

Privacy responsibilities depend on why information is in Stride and who decides how it is used.

Information Stride controls

Stride acts as the business responsible for information used to create accounts, administer subscriptions, operate our websites, provide support, protect the Services, and communicate about the Services. We decide how and why this information is processed, subject to this policy and applicable law.

Information a customer controls

When a business uses Stride to manage its customers, contacts, employees, contractors, jobs, invoices, files, or other business records, that business generally decides why the information is collected and how it is used. Stride processes that information to provide the Services on the business’s instructions.

If you are an employee, technician, customer, property contact, or other individual whose information was entered by a Stride business customer, direct requests about that information to the business first. We will support the business in responding where required.

Customer responsibilities

Businesses using Stride are responsible for having an appropriate legal basis to collect and use personal information, providing any required notices, honoring individual rights, configuring access appropriately, and avoiding information that is unnecessary for field-service operations.

Information we collect

The information we collect depends on how you interact with Stride and how your organization configures the Services.

Account and identity information

Name, work email address, password credentials handled by our authentication provider, verification status, account identifiers, role, permissions, and invitation status.
Company name, business address, phone number, contact email, time zone, logo, trade type, team structure, and account configuration.
Signup answers, onboarding progress, subscription status, and communications preferences.

Customer and contact records

Customer and company names, contact names, job titles, email addresses, phone numbers, notes, tags, and communication history.
Service, billing, and mailing addresses; property or site details; access instructions; and map coordinates derived from an address.
Records imported from spreadsheets or a connected accounting platform at the direction of a business customer.

Field-service and commercial records

Jobs, visits, schedules, dispatch assignments, routes, service categories, work descriptions, checklists, time entries, completion details, and internal notes.
Equipment details, materials, receipts and receipt images, invoices, purchase order references, tax settings, payment status, and document templates.
Photos, logos, attachments, files, messages, and any other content a user chooses to upload or enter.

Billing and transaction information

Subscription plan, seats, trial dates, billing status, transaction references, discounts, and limited payment metadata.
Payment card and bank details are collected and processed by our payment provider. Stride does not receive full payment card numbers.

Connected-service information

Connection status, authorization tokens, external account or company identifiers, synchronization settings, mappings, import selections, and sync history.
Data requested from or sent to a connected service, such as customers, contacts, products and services, accounts, tax references, and invoices in QuickBooks Online.

Chat with Stride memories

Chat with Stride can keep short memories that you ask it to remember, such as a nickname or how you like notes written. Memories are private to you in that business. If you have Chat with Stride access, you can view, edit, or delete them in My account, and you can turn memory off. Memories are deleted when the business account is deleted. Forgetting a memory removes it from your memory list, but the conversation keeps what was said, as with any other message.

Device, usage, and support information

IP address, browser and device type, operating system, timestamps, referring pages, requested URLs, session activity, error data, and security events.
Product analytics and diagnostic information, linked to account or person identifiers. On the website this includes pages viewed, clicks and other on-screen activity, and recordings of how a session was used. On the website and in the mobile app it includes failed sign-ins and errors, and in the app the steps that led to a problem.
Support requests, feedback, survey responses, call or meeting details you choose to share, and related correspondence.
Local browser storage used for interface preferences, onboarding progress, walkthrough status, and drafts. Session storage may preserve signup progress within a browser session.

Where information comes from

Directly from you when you register, configure an account, enter records, upload files, connect another service, or contact us.
From your employer, organization, account owner, administrator, or another authorized Stride user.
From your customers, vendors, or other people whose details are entered into business records.
From connected services when an authorized user requests an import, synchronization, or other integration action.
Automatically from browsers, devices, servers, cookies, local storage, logs, and similar operational technologies.
From public or licensed sources used for functions such as address completion or geocoding.

How we use information

Provide and operate Stride

Create and authenticate accounts, maintain sessions, apply roles and permissions, and administer subscriptions.
Store and organize business records; support customer, job, dispatch, field-work, invoice, reporting, and integration workflows.
Generate documents, deliver authorized emails and notifications, map service addresses, and synchronize connected services.

Secure and maintain the Services

Prevent fraud, abuse, unauthorized access, and other harmful activity.
Monitor availability, investigate errors, maintain audit history, back up data, and enforce our agreements.
Verify integration callbacks and webhooks and protect credentials used to connect third-party services.

Support, communicate, and improve

Respond to questions, troubleshoot issues, provide account and service notices, and send requested or transactional communications.
Understand feature use, evaluate performance, develop new capabilities, and improve workflows and usability.
Create aggregated or de-identified information that does not reasonably identify an individual, and use it for lawful business purposes.

Comply with law and protect rights

Meet tax, accounting, legal, regulatory, and recordkeeping obligations.
Establish, exercise, or defend legal claims and protect Stride, our customers, users, and the public.

Legal bases for processing

Where a law requires a legal basis, we process information as necessary to perform a contract with you or your organization; to pursue legitimate interests such as operating, securing, supporting, and improving the Services; to comply with legal obligations; or with consent when consent is the appropriate basis.

If we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that already occurred and may prevent us from providing a feature that depends on the information.

Email logging and the Gmail extension

When your business enables email logging, Stride provides a logging address that receives Bcc copies of emails you choose to log. The Stride email logging Chrome extension adds a Log control to supported Gmail compose windows. You can change your default and choose whether to log each supported draft. The extension does not request Gmail OAuth access, import mailbox history, or capture incoming replies.

The extension reads draft recipient email addresses and sends them to Stride to identify exact matches in your business. It stores a limited connection credential in trusted extension storage and a short-lived connection nonce in session storage. Gmail content scripts cannot retrieve that credential. Connections expire after seven days and can be revoked by disconnecting.

When you send with the logging Bcc included, Mailgun receives a copy of the message and forwards it to Stride. Stride retains the sender, To and Cc recipients, subject, sent date, plain message text, and attachment names. Attachment files are not retained by the capture service. The receiving provider processes the message copy, including any attachments, to deliver it. Stride links captured emails to customer or contact records; an unknown recipient may create a person record with no stage. Authorized members of your business can access captured content according to their record permissions.

Never log rules prevent recipient links and new records for excluded addresses or domains. They do not remove those addresses or message text from a mixed email that also has eligible recipients. A manually added logging Bcc still sends a copy even if the extension checkbox is unchecked. Review the recipients and message before sending.

Disconnecting removes the active extension credential and stops the extension connection; it does not delete emails already captured. Removing an Activity entry hides its projection but does not erase the captured source message. Discarding a held email in review clears its held content while retaining delivery deduplication information. Captured records otherwise follow the business retention and backup practices described in this policy. Contact support@mg.stridejob.com for deletion assistance.

We use extension data to provide and secure the requested email logging service. We do not sell it, use it for advertising, or use it to determine creditworthiness or for lending. The extension contains no analytics or advertising libraries and does not collect browsing history. Its executable code is bundled with the extension; it does not download remote code.

Text messages and your consent

Stride sends automated, transactional text messages about appointments, arrival times, schedule changes, estimates, and invoices involving a business that uses Stride. Stride creates the message content. You agree to these texts by saying yes when the business’s staff ask you, using a script Stride provides. Agreeing is optional and is not a condition of purchasing goods or services. Entering a phone number in a business record does not by itself give Stride permission to text it.

When you agree, we collect your mobile number, the business, the wording you were asked or shown, the policy versions, how you agreed, and the time. When the business’s staff record your agreement, we also record which staff member recorded it and the contact record it was recorded on. Records of earlier web signups may include a protected hash of the network address used. Delivery records may include message content, delivery status, provider identifiers, and replies needed to process STOP, START, and HELP.

We share mobile numbers and message information with Twilio and the telecommunications providers needed to deliver messages, process replies, prevent abuse, and comply with law. We do not sell mobile information or share it with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from other information-sharing provisions in this policy, except sharing with providers necessary to operate the messaging service or as required by law.

Reply STOP to any Stride text to opt out of all Stride texts, including texts involving other businesses. Reply START to that Stride number to restore an existing agreement; START does not enroll you with another business. Reply HELP for assistance, or email support@mg.stridejob.com. Ordinary replies are not a monitored support channel; use the business phone number in the message for questions about your service.

We retain consent, delivery, and opt-out evidence as needed to operate the service, honor your preferences, prevent unwanted messages, and meet legal obligations. A minimal global suppression record may remain after a business account is deleted so deleting an account does not undo your STOP choice.

Service providers and international processing

Depending on configuration and availability, Stride may use providers such as Google Firebase for authentication or storage, Stripe for subscription billing, Mailgun for email delivery, Vercel or cloud infrastructure providers for application hosting, Google Maps for native maps and address services, OpenStreetMap-based services for maps or geocoding, Google Sign-In for signing in with a Google account, Anthropic or OpenAI for Stride AI summaries and Chat with Stride replies, OpenAI for Stride AI dictation transcription, ElevenLabs for Call Stride voice calls, and Intuit for QuickBooks Online connections.

Providers may process information in the United States and other countries where they or their subprocessors operate. Those countries may have different data-protection laws. Where required, we use contractual or other lawful transfer mechanisms intended to protect information transferred across borders.

Provider names and functions may change as the Services evolve. A business customer may contact us for current information relevant to its account.

Google services in the mobile app

Maps and addresses

The mobile app uses Google Maps to display job locations and scheduled route stops from saved service addresses and their coordinates. Address services may also send addresses to Google for geocoding or address lookup. These locations describe work sites; Stride does not access your device’s GPS location to show these maps.

The Google Maps SDK may send Google device or installation identifiers, map interactions, crash reports, performance information, and other technical information about SDK use. This supports map operation and usage and reliability analysis.

Google Sign-In and Firebase authentication

When you choose Google Sign-In, Google processes sign-in information and Stride uses the resulting credential with Firebase Authentication. Authentication information can include your name, email address, profile information, user identifiers, and authorization tokens. Google Sign-In may also collect your IP address and infer an approximate location from it for fraud prevention. This does not require access to your device’s GPS location.

The native Google Sign-In and Firebase SDKs may also send device or installation identifiers, SDK usage information, and diagnostic information. Google Sign-In’s SDK declarations include other usage and other data types; the information collected depends on the SDK and sign-in features used. Firebase Authentication processes identifiers and account information to authenticate you; Firebase SDKs may send technical diagnostics such as SDK, device, and operating-system information.

Provider privacy practices

Some SDK information may be associated with your account, device, or installation. These SDKs declare that their collection is not used for tracking, and Stride does not use them for cross-app advertising tracking. Their collection is separate from the per-person permission for Stride AI described below.

Google’s handling of information is described in its Privacy Policy (https://policies.google.com/privacy), with additional Maps SDK information at https://developers.google.com/maps/documentation/ios-sdk/apple-privacy-policy and Firebase information at https://firebase.google.com/support/privacy. Provider retention depends on the service and data involved; deleting your Stride login does not promise immediate erasure of all information previously received by a provider.

QuickBooks Online data

This section applies when an authorized account owner or administrator connects Stride to QuickBooks Online.

What Stride accesses

Based on the actions you request and the permissions granted through Intuit, Stride may access QuickBooks company details, customers, products and services, accounts, tax references, invoices, identifiers, and related metadata. Stride also receives connection credentials, realm or company identifiers, webhook events, and synchronization results.

Why Stride accesses it

Stride uses QuickBooks data to help you review and import accounting references, map Stride records, prepare or synchronize accounting copies of invoices, reconcile totals and tax treatment, detect changes, display connection status, and troubleshoot integration activity. Stride does not access QuickBooks data for unrelated advertising.

Storage, security, and disconnect

Stride stores connection credentials in encrypted form and limits integration actions to authorized users and account-scoped workflows. When you disconnect QuickBooks, Stride removes active credentials from its systems and requests revocation where supported.

Disconnecting does not automatically delete business records previously imported into Stride or accounting records previously sent to QuickBooks. Those records remain subject to the retention rules and controls of the system where they reside. Intuit independently controls information held in QuickBooks.

Stride AI

Stride AI is the set of Stride features that use AI providers: dictation, the summaries on Command, Chat with Stride, and Call Stride voice calls. Stride asks each person for permission in the app before Stride sends anything on their behalf to an AI provider, and sends nothing until they turn Stride AI on.

What is sent, to whom, and why

Voice recordings go to OpenAI, which turns them into text.
Typed messages, what you say on a call, photos you attach, and the details Stride uses to answer go to Anthropic or OpenAI, which write Command summaries, Chat with Stride replies and what Stride says on a call. Those details include jobs, visits, job notes, customers, contacts, estimates, invoices, equipment, time entries, team members, opportunities, products and your saved memories.
When Chat with Stride searches the web, Anthropic receives the search terms, which can include customer names.
During a Call Stride call, your voice and Stride’s spoken replies go to ElevenLabs, which turns speech into text and text into speech. Those replies can include details from your records, such as customer names and addresses.
Stride sends this information only to write text, summaries and replies for the person who asked. The providers process it for Stride under contractual restrictions.

Your choice

Stride AI is one choice per person, kept with your sign-in, so it applies in every business you belong to, on the web and in the app. Stride records when you turned it on, when you turned it off, and which version of the explanation you agreed to.

You can turn Stride AI off at any time in My account > Stride AI. While it is off, Stride sends nothing of yours to AI providers, and dictation, Command summaries, Chat with Stride and calls stay off. Summaries and chats already written stay in Stride. Turning it off does not delete information a provider already received for a request it completed.

A platform operator helping with an account cannot turn Stride AI on for anyone.

Connected AI apps

This section applies when an owner, administrator, scheduler or technician connects an AI app, such as ChatGPT or Claude, using their own Stride sign-in. Every request follows the current account, role, plan, permissions and assignment; a connection does not give someone a higher role or access to another company.

What Stride shares and changes

With consent v3, Stride shares the permitted information returned by supported External API tools when the app asks for it: customer and contact profiles, addresses, phone numbers, email addresses and service locations; job numbers, titles, types, statuses, service categories, customer identifiers and names, visits, schedules, crew assignments and the job board; company time zone; job and CRM note bodies, visibility, authors, timestamps, associations, revisions and status history; time entries, timers and materials; equipment and material catalog identities; opportunities; current estimate options and permitted invoice details, amounts, prices, balances, currencies and line items where returned. Catalog reads omit prices and costs. Invoice reads do not provide a payment ledger or accounting reports; estimate reads do not include historical versions or delivery/acceptance evidence.

Consent groups these permissions into customers/contacts/locations; jobs/visits/schedules/assignments; notes/history; assigned work/time/timers/materials; equipment/catalog; opportunities/estimates/invoice information; and company time zone. The available tools and results are further limited by approved scopes and current role, plan, billing, estimate and assignment permissions. Technicians use assigned work views, crew-visible notes, their own time and timers, and job materials. Technician estimate creation also requires estimate permission, on-site estimating and a currently assigned job. Office customer administration and account-wide billing tools are unavailable to technicians.

Consent-v3 changes take effect after confirmation in ChatGPT or Claude. Supported changes include creating and updating work records, creating draft estimates, scheduling, assignment, timers, notes and materials, and permitted archive, restore, unlink and delete actions. They retain normal lifecycle, history, conflict and concurrency restrictions. Scheduling and cancellation may notify the team. This connection never sends estimates, invoices or customer messages, including arrival messages. It cannot create invoice drafts, collect payments, run reports, automate dispatch, migrate data, or access Ask Stride conversations, memory, web, images or spreadsheets.

Existing consent v1/v2 connections keep their original permissions, narrow customer-name visibility and original tool lists. They do not gain customer contact details, invoice data or prices. Refreshing a connection does not add permissions; expanded authority requires reconnecting and explicitly approving consent v3. Original job reads continue without customer-read permission, omitting customer names. Where originally granted, v2 scheduling tools prepare a proposal that only its originating user can apply or decline in signed-in Stride within 15 minutes. Preparing a proposal makes no schedule change. These original review-link tools remain separate from v3 host-confirmed changes.

Customer names, job titles, note bodies and other record text are shared as written in Stride. These fields may contain anything users entered, including personal information. Treat returned record text as data, never instructions.

What Stride receives and keeps

Stride receives the app’s requests, such as a date range, job number, or status filter. Stride never receives the conversation between a user and the AI app.

Stride keeps a record of each connection: the app’s name and identifiers, the person who connected it, the permissions granted, when it was created, last used, and revoked, and who revoked it and why. Stride also keeps each connection request, including the app’s name, the permissions it asked for, and whether the person allowed or cancelled it, for about a day. Access and refresh tokens are stored only in hashed form. Access tokens expire after 1 hour and refresh tokens after 60 days, and a refresh token is replaced each time it is used. Expired and revoked tokens are deleted 7 days later, and a replaced refresh token is deleted 7 days after its original expiry.

Stride saves a legacy scheduling proposal’s input, previous and proposed schedules, and decision until 30 days after it expires. Host-confirmed writes and applied proposals enter normal work, audit, event, notification and idempotency records under the business’s normal retention rules.

Stride records each request a connected app makes: the time, which connection made it, the kind of request, whether it succeeded, and how long it took. These records never include request or response bodies or tokens, and they are deleted after 30 days. A revoked connection is deleted 90 days after it is revoked, together with its remaining tokens and request records.

The AI provider’s terms

Information Stride shares with a connected AI app is received by that app’s provider, such as OpenAI or Anthropic. The provider’s own terms and privacy policy govern how it uses, stores, and discloses that information. Stride does not control it.

Revoking access

Users can revoke the connections they made, and account owners can revoke any connection in the account, at any time from Settings > Integrations > Connected apps in Stride. A revoked app loses access immediately. A connection also stops working when the person who made it is removed or disabled or when the account is deleted. Current role and assignment changes immediately narrow subsequent requests; a pre-v3 connection cannot be used as a technician.

Revoking a connection does not delete information the AI provider already received. Contact the provider about that information.

Retention and deletion

We retain information for as long as reasonably necessary to provide the Services, maintain the account, complete requested transactions, satisfy legal and accounting requirements, resolve disputes, enforce agreements, protect the Services, and preserve legitimate business records.

Retention varies by category. Account and business records generally remain while an account is active. Security logs, audit records, invoices, payment references, support history, and records needed for legal obligations may be retained longer. Browser-stored preferences and drafts remain until cleared by the user, the application, or the browser.

Deletion from the active application may not immediately remove information from encrypted backups, logs, fraud-prevention systems, or records retained for legal reasons. Residual copies are isolated from ordinary use and removed or overwritten according to applicable retention cycles.

Anyone can delete their own Stride login, and an Owner can delete the business, in the app or on the web, without contacting us. app.stridejob.com/delete-account explains how. An Owner can also ask us to close and delete an account; we may verify authority and preserve required records before completing the request.

Deleting a business takes effect right away, with no grace period. We delete its customers, jobs, invoices, estimates, files, settings, and other records, cancel its Stride subscription, and disconnect QuickBooks, connected AI apps, and calendar subscriptions. Team members keep their own logins. Before deleting a business, export information it must retain. Stride keeps its own billing records with Stripe, such as past invoices and payments, for its accounting.

When a person deletes their Stride login, we delete their sign-in, contact details, photo, personal settings, Stride AI consent, and Stride AI memories and conversations (a conversation that became a saved job note stays with the note), disconnect Sign in with Apple, and remove their email and phone number from the business’s team history. Work records they created, such as notes, photos, time, materials, and job history, stay with the business under their name, because they are the business’s records.

Records of emails we sent, such as account, weekly goal, and customer communication delivery logs, may keep the recipient’s email address as a record of delivery after that person’s login or the business is deleted.

Security

Stride uses administrative, technical, and physical safeguards designed to protect information, including access controls, tenant-scoped authorization, encrypted network connections, protected session cookies, credential protection, audit mechanisms, and security testing appropriate to the nature of the Services.

No method of storage or transmission is completely secure. Customers should use unique credentials, limit administrative access, promptly remove former users, review connected services, protect devices, and notify us of suspected unauthorized access.

Your choices and privacy rights

Account controls

Review and update profile, company, customer, team, and integration information through available account settings.
Disconnect supported integrations, change user access, manage certain notifications, or close the account through the account owner or by contacting Stride.
Control browser cookies and local storage through browser settings. Blocking essential storage may prevent authentication or saved preferences from working.

Communications

You may opt out of non-essential marketing emails by using the unsubscribe method provided. We may still send account, security, billing, support, or other transactional messages necessary to provide the Services.

Legal rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, or restriction of personal information; to object to certain processing; to withdraw consent; or to appeal a denied request. You may also have the right not to receive discriminatory treatment for exercising a privacy right.

We may verify your identity, authority, and jurisdiction before acting. Authorized agents may be required to provide signed permission. Some information may be exempt, and a request may be limited where retention is required by law or needed to protect rights and security.

United States state disclosures

For residents of states with comprehensive privacy laws, the categories of personal information we may collect are described in “Information we collect.” We collect them from the sources in “Where information comes from,” use them for the purposes in “How we use information,” and disclose them to the recipients in “How we disclose information.”

Stride does not sell personal information and does not share it for cross-context behavioral advertising. We do not knowingly use sensitive personal information to infer characteristics or for purposes other than providing and protecting the Services. Because we do not engage in these practices, Stride does not currently offer a “Do Not Sell or Share” link.

We may disclose identifiers, commercial information, internet or device activity, professional information, approximate location derived from business addresses, and customer-provided content to service providers and connected services for the business purposes described above. We retain each category under the principles in “Retention and deletion.”

Children

The Services are for business use and are not directed to children under 16. We do not knowingly collect personal information directly from children for their own use of Stride. If you believe a child submitted information directly to us without appropriate authorization, contact us so we can review and, where appropriate, delete it.

Business customers should not place information about minors in Stride unless it is necessary for a lawful business purpose and the customer has provided any required notice or obtained any required permission.

Changes to this policy

We may update this Privacy Policy to reflect changes in the Services, law, or our practices. We will post the revised policy with a new “Last updated” date. If a change materially reduces privacy protections, we will provide additional notice when required, such as an account notice or email to the account owner.

The version in effect when information is processed governs that processing, unless applicable law requires otherwise.

Contact and requests

For privacy questions or requests, email Stride at support@mg.stridejob.com. You may also use the in-product support channel or the contact information listed in your order form or subscription record. Include the email address associated with your account, the business you are connected to, your jurisdiction, and the nature of your request. Do not include passwords or other credentials.

If your information was entered by a business using Stride, contact that business first. If you contact us directly, we may refer the request to the business and assist it in responding.

We aim to acknowledge verified privacy requests promptly and respond within the period required by applicable law. If we deny a request, we will explain the basis when required and provide appeal instructions where available.

support@mg.stridejob.com