Privacy Policy

1. Introduction & Contact Information

This Privacy Policy describes how Straight To Point, LLC and Straight To The Point Solutions (collectively “we,” “us,” or “our”) collect, use, and protect your personal information when you enroll in or access the AI Straight To The Point™ online training platform at courses.sttpsolutions.com and its associated pages.

This policy applies specifically to our AI training programs. For our full business services privacy policy, visit straighttopoint.com.

2. Information We Collect

Information you provide directly:

• Name and email address at enrollment
• Payment and billing information (processed securely through third-party processors)
• Identity and eligibility documentation for workforce participants (required by sponsoring agency)
• Communications when you contact our support team
• Marketing consent and communication preferences

Information collected automatically:

• Lesson completion, quiz results, and progress data
• Login timestamps and session activity
• IP address, browser type, device identifiers, and referring URLs
• Cookie and tracking data from our platform provider (Systeme.io)
• General geographic location based on IP address

Information from third parties:

• Transaction data from payment processors
• Analytics data from website performance tools
• Enrollment and eligibility data from workforce agencies or program sponsors

3. How We Use Your Information

To deliver your training program:

• Grant and manage access to your enrolled program
• Track your lesson progress and quiz results
• Issue your certificate of completion
• Send daily lesson notifications and program updates
• Provide customer support and respond to inquiries

For workforce compliance and reporting:

• Verify participant identity and eligibility documentation
• Report completion status, assessment results, and progress to sponsoring agencies
• Maintain auditable enrollment and completion records
• Generate unique certificate IDs for compliance documentation

For communications and marketing (with your consent):

• Send program updates, exclusive offers, and future training announcements
• Deliver newsletters and educational content you have subscribed to
• You may unsubscribe at any time via any email we send

For platform improvement and security:

• Analyze usage patterns to improve program content and delivery
• Detect and prevent fraud, abuse, and unauthorized access
• Maintain secure and reliable platform operations

4. Legal Basis for Processing

• Consent — when you explicitly agree to receive marketing communications or enroll in a program
• Contract performance — to deliver the training program you purchased
• Legitimate interests — for platform security, fraud prevention, and service improvement
• Legal obligations — to comply with workforce compliance requirements, tax regulations, and applicable law

5. Cookies & Tracking Technologies

Our training platform uses cookies and similar tracking technologies to maintain your session, track progress, and improve your experience. Types of cookies used include:

• Essential cookies — required for login, session management, and platform functionality
• Performance cookies — help us analyze usage and improve content delivery
• Analytics cookies — track usage patterns through tools such as Google Analytics
• Marketing cookies — used with your consent for relevant communications and remarketing

You can manage cookies through your browser settings. Disabling essential cookies may affect your ability to access your training. Our platform provider, Systeme.io, also places cookies subject to their own privacy policy.

6. Information Sharing & Disclosure

We do not sell your personal information. We may share your information with:

• Workforce agencies and program sponsors — progress, completion, and compliance documentation as required by enrollment agreement
• Platform providers — Systeme.io for training delivery and access management
• Payment processors — to complete transactions securely
• Analytics providers — Google Analytics and similar tools under data processing agreements
• Legal authorities — when required by law, court order, or to protect our rights and safety
• Business successors — in the event of a merger, acquisition, or asset transfer, with notice to you

All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

7. Data Security

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Secure payment processing through PCI-compliant third-party processors
• Role-based access controls limiting who can access your data
• Regular security monitoring and platform assessments
• Confidentiality obligations for all personnel with data access

No method of internet transmission is 100% secure. We cannot guarantee absolute security but are committed to protecting your information using best-practice standards.

8. Data Retention

• Enrollment and completion records — 3 years after program completion, or as required by agency compliance agreements
• Payment transaction records — 7 years for tax and accounting purposes (IRS requirement)
• Workforce compliance documentation — as required by the sponsoring agency or applicable WIOA regulations
• Marketing communications — until you unsubscribe or withdraw consent
• Website analytics data — 26 months (Google Analytics default)
• Certificate records — maintained indefinitely for verification purposes unless deletion is requested

9. Your Privacy Rights

Depending on your location, you have the right to:

• Access — request a copy of personal information we hold about you
• Correction — update or correct inaccurate or incomplete information
• Deletion — request deletion of your personal information, subject to legal retention requirements
• Portability — receive your data in a structured, machine-readable format
• Objection — object to certain processing, including marketing communications
• Withdraw consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at help@sttpsolutions.com. We will respond within 30 days of receiving your verified request.

10. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to Know — what personal information is collected, used, and shared
• Right to Delete — request deletion of personal information
• Right to Opt-Out — opt out of the sale or sharing of personal information (we do not sell personal information)
• Right to Correct — request correction of inaccurate personal information
• Right to Non-Discrimination — not be discriminated against for exercising privacy rights

To exercise your California rights, contact us at help@sttpsolutions.com or (203) 307-5272. You may also contact the California Attorney General’s office for complaints about our privacy practices.

11. European Privacy Rights (GDPR)

For EU/UK residents, we process personal information in accordance with GDPR requirements, including lawful basis for all processing, data subject rights, data protection by design, breach notification within 72 hours where required, and the right to lodge a complaint with your local data protection supervisory authority.

Your information may be stored and processed in the United States (New York and Delaware), where privacy laws may differ from your jurisdiction. We implement appropriate safeguards including standard contractual clauses where required.

12. Platform Access & Third-Party Services

Our training is delivered through Systeme.io, a third-party platform provider. By enrolling, you acknowledge that Systeme.io may process certain data as part of platform delivery, subject to their own privacy policy. We have a data processing agreement with Systeme.io requiring them to protect your information.

Our platform may contain links to third-party resources. We are not responsible for the privacy practices of external sites and encourage you to review their policies before providing personal information.

13. Children’s Privacy

Our training programs are designed for adult learners aged 18 and over. We do not knowingly collect personal information from individuals under 18. If we become aware that a minor has enrolled or provided personal information, we will delete it promptly. If you believe a minor has accessed our platform, contact us immediately at help@sttpsolutions.com.

14. Data Breach Response

In the event of a data breach affecting your personal information, we will:

• Take immediate steps to contain, investigate, and remediate the breach
• Notify relevant authorities within 72 hours where required by law
• Notify affected individuals without undue delay with clear information about what occurred
• Provide appropriate support and guidance on protective actions
• Document the breach and our response for regulatory compliance

15. Educational Content Disclaimer

All training content is provided for educational and professional skill development purposes only. AI tools and techniques demonstrated in our programs reflect current best practices and may evolve as technology advances.

Our training content represents the professional views and recommendations of Straight To The Point Solutions and is not a substitute for legal, financial, medical, or technical advice. Results from applying program content depend entirely on individual effort, circumstances, and application.

This program does not issue professional licenses, academic credentials, or degrees. Certificates of completion confirm participation and demonstrate skill development only.

16. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, platform, or legal requirements. We will notify enrolled participants of material changes by posting the updated policy with a new effective date and, for significant changes, by email notification.

Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

17. Questions, Complaints & Contact

For privacy questions, to exercise your rights, or to submit a complaint:

EU/UK residents may also lodge a complaint with their local data protection supervisory authority.
California residents may contact the California Attorney General’s office.