Privacy Policy

What changed in this version: We updated our company name and business address, and expanded our disclosures about the website, domain-registration, and Google Business Profile services we provide to customers. Our retention and no-sale commitments are unchanged.

1. Who We Are

OnStride INC ("OnStride™," "we," "us," or "our"), operates the OnStride™ platform, website, and mobile application (collectively, the "Services"). OnStride™ is a software platform designed for equestrian facility management, including barn operations, horse records, scheduling, messaging, and billing.

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Services. It applies to all users, including Account Owners, barn managers, staff, boarders, trainers, and any other individuals whose information is submitted to the Services.

This Privacy Policy is incorporated into and forms part of the OnStride™ Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

Account registration information: name, email address, phone number, business name, and role.

Horse and animal records: horse names, breeds, ages, health notes, feeding schedules, training records.

Scheduling and task data: appointments, lessons, turnout schedules, and related operational records.

Communications: messages sent through the platform and support requests.

Billing and payment metadata: invoicing information, payment history. Full card numbers are not stored by OnStride™ — processed by our third-party payment processor.

Documents and attachments: files, photos, and documents you upload.

Website and business-profile content. If you use our website creation or business-profile services, you may provide business names, descriptions, addresses, service areas, operating hours, contact information, services, prices, photographs, logos, branding materials, booking links, social-media links, and other content you want displayed publicly.

Website inquiries and booking requests. Websites and forms created through the Services may collect information submitted by prospective customers, including names, contact details, service interests, booking preferences, horse information, messages, and any other information requested through a form configured by the Customer.

Business-profile access. If you authorize OnStride to help create or manage a Google Business Profile, we may receive access to the profile and the business information, photographs, posts, reviews, performance information, and other profile content made available through that authorization. We do not require or ask you to share your Google password.

2.2 Information We Collect Automatically

Usage data: pages visited, features used, clicks, searches, and actions taken within the Services.

Device and log data: IP address, browser type and version, operating system, device identifiers, referring URLs, and access timestamps.

Cookies and tracking technologies: see Section 6 for full details.

Push notification tokens. If you enable notifications, we store a token for each device so we can deliver alerts. Tokens are issued and relayed through our mobile platform provider’s push service to Apple and Google notification gateways. Disabling notifications in your device settings stops delivery.

Camera and photo content you choose to share. With your permission, you can photograph a paper waiver, a receipt, or a document instead of entering it by hand, and you can attach items from your photo library. We receive only the images and files you capture or select and submit. We do not access the camera or your photo library at any other time, and we do not record audio or video.

2.3 Information From Third Parties

Payment processors: transaction confirmation data and billing status information.

Integration partners: if you connect third-party services to OnStride™, we may receive data from those services consistent with your authorisation.

Payment processing is handled by Stripe, Inc. (https://stripe.com); full payment card numbers are never stored by OnStride™.

2.4 Information We Do Not Collect

OnStride™ does not collect or store: full payment card numbers, Protected Health Information (PHI) as defined by HIPAA, Social Security Numbers, or personal data of children under the age of 13.

3. How We Use Your Information

3.1 To Provide and Operate the Services

Creating and managing accounts, hosting Customer Data, enabling core features, processing payments.

Creating, hosting, maintaining, and updating Customer websites, booking links, inquiry forms, and related digital content.

Publishing Customer-approved business information, branding, services, photographs, and contact details on public websites.

Receiving website inquiries and booking requests and delivering them to the applicable Customer account.

Creating or managing a Google Business Profile when expressly authorized by the Customer.

3.2 To Maintain and Improve the Services

Diagnosing bugs, analysing usage patterns using aggregated and de-identified data, developing new features.

3.3 For Security and Fraud Prevention

Detecting, investigating, and preventing unauthorised access, abuse, fraud, or Terms of Service violations.

3.4 For Communications

Transactional emails, account confirmations, billing notices, service updates, and responding to support requests. You may opt out of non-essential communications at any time.

3.5 Legal and Compliance

Complying with applicable laws, regulations, and legal process; enforcing our Terms of Service.

3.6 Aggregated and De-Identified Data

We may create aggregated and/or de-identified data derived from Customer Data for product analytics, benchmarking, and business improvement purposes. We will not attempt to re-identify de-identified data.

3.7 AI-Assisted Features

Parts of the Services offer optional AI assistance (“Steward”), including drafting documents, summarizing barn records, answering questions about your data, and suggesting actions for you to review.

What is processed. When you use an AI-assisted feature, the information you submit and the barn records relevant to your request—which may include horse records, schedules, messages, client and boarder contact details, and the contents of documents or photographs you upload—are processed to generate a response.

Where processing happens. Model processing is performed by DeepInfra, Inc., a third-party model-hosting provider acting as our sub-processor, using open-weight models from the Qwen model family. Some processing, including initial text extraction from images and documents, is performed on infrastructure operated by or for OnStride and is sent to our model-hosting provider only where the initial result is insufficient.

Training. We do not use your Customer Data to train or fine-tune AI models, and our model-hosting provider does not use it to train its models. Our provider may retain inputs and outputs briefly for operational debugging.

Memory. To make assistance useful across sessions, the Services store your conversation history and a set of derived facts about your barn and preferences. This memory is tied to your account and organization and is available across the web and mobile apps. You may request deletion of this memory by contacting us at admin@onstrideapp.com.

Human decisions. AI output may be inaccurate or incomplete and is provided for your review. Actions with real-world effect require your explicit approval before they are carried out. We do not use AI to make decisions producing legal or similarly significant effects about you without human involvement.

Choice. You may decline to use AI-assisted features.

3.8 Website Creation and Digital-Presence Services

The Services may include website creation, hosting, maintenance, booking links, inquiry forms, and assistance with third-party business profiles.

Public content. Information that you direct us to publish on a website or business profile is intended to be publicly available. This may include your business name, location or service area, contact information, operating hours, services, prices, photographs, branding, and booking links. You are responsible for deciding what information should be published and for ensuring that you have the right to use all content you provide.

Website hosting. Customer websites may be hosted using third-party infrastructure providers, including Vercel. Those providers process website files, technical request information, and related operational data as necessary to deliver and secure the website.

Domains. If we register a domain name in connection with your website, the domain is registered by OnStride and our business contact information is generally listed in the domain registration record. We may use your business name and address to configure the domain and related services.

Business profiles. If you authorize us to manage your Google Business Profile or another third-party listing, we access and process the profile information needed to provide that service, using access you grant to an OnStride-designated account. If you do not have a profile, you may authorize us to create and verify one for your business under an account we control, using the business information you provide, and to manage it on your behalf.

Signature records. When you sign a document through the Services (for example, a waiver or agreement your barn requires), we record the signer name and email provided, the associated account, the document and version signed, and the date and time of signing, and store that record for the organization that requested the signature.

Forms and requests. If you enable an inquiry or booking form, information submitted through that form is delivered to your OnStride account and made available to authorized Users in your organization. You determine which fields the form collects and are responsible for requesting only information reasonably necessary for your business.

Updates. Content and service information connected to an OnStride-managed form may update automatically when you change the corresponding information in your OnStride account. You are responsible for keeping that information accurate and current.

4. How We Share Your Information

4.1 We Do Not Sell Your Data

OnStride™ does not sell, rent, or share your personal information with third parties for their own advertising or marketing purposes.

4.2 Service Providers and Sub-Processors

We share information with trusted third-party service providers (cloud infrastructure, payment processors, customer support tools, analytics platforms) that process data on our behalf. All are bound by contractual obligations to protect your data.

4.3 Legal Disclosures

We may disclose information when required by applicable law, court order, or governmental request, or when necessary to protect the rights, property, or safety of OnStride™ or others.

4.4 Business Transfers

If OnStride™ is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice as required by applicable law.

5. Data Retention

We retain Customer Data for as long as your account is active and for a commercially reasonable period afterward. Upon account termination or closure:

You may request export of your Customer Data during the account access period following termination.

We will delete Customer Data within 90 days of account closure, unless a longer retention period is required by applicable law.

Aggregated or de-identified data may be retained indefinitely as it cannot reasonably be linked back to you.

6. Cookies and Tracking Technologies

Type Required? Purpose

Essential / Session Yes Login authentication, session management, security

Analytics / Performance No (opt-out available) Understanding usage patterns, feature performance, product improvement

Preference / Functional No (opt-out available) Remembering user preferences such as timezone, display settings

You can control or disable non-essential cookies through your browser settings. We do not currently respond to Do Not Track (DNT) signals, but we do honour Global Privacy Control (GPC) signals to the extent required by applicable law.

7. Data Security

OnStride™ maintains commercially reasonable administrative, technical, and physical safeguards including:

Encryption of data in transit using TLS/SSL.

Access controls and role-based permission management.

Regular monitoring of systems for potential vulnerabilities.

Vendor security assessments for sub-processors handling Personal Data.

No method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your login credentials.

7.1 Data Breach Notification

In the event of a confirmed Personal Data Breach affecting your Customer Data, OnStride™ will notify the affected Customer within 72 hours of confirming the breach, to the extent reasonably practicable.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

Access: Request confirmation of whether we process your personal information and obtain a copy.

Correction: Request that we correct inaccurate or incomplete information.

Deletion: Request deletion of your personal information, subject to certain legal exceptions.

Data Portability: Receive a copy of your personal information in a structured, machine-readable format.

Restrict Processing: Request that we limit how we process your information in certain circumstances.

Object: Object to certain types of processing, including direct marketing.

Opt Out of Sale/Sharing: California residents have the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for advertising purposes.

To exercise any of these rights, please contact us at admin@onstrideapp.com with the subject line "Privacy Rights Request." We will respond within the timeframe required by applicable law (generally 30–45 days).

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the CCPA as amended by the CPRA provides specific rights regarding your personal information.

Categories of Personal Information Collected: identifiers (name, email, IP address), commercial information (billing records), internet or electronic network activity (usage data), and professional information (role, organisation).

No Sale or Sharing: OnStride™ does not sell or share your personal information as defined under CCPA/CPRA.

California residents may submit a CCPA rights request by emailing admin@onstrideapp.com with the subject line "California Privacy Request."

10. Children's Privacy

The Services are not directed to children. The minimum age to use the Services is 13 in the United States (COPPA) and 16 in the European Economic Area and United Kingdom. Account Owners must be at least 18 years old.

11. International Data Transfers

OnStride™ is based in the United States. If you access the Services from outside the United States, your personal information may be transferred to, stored, and processed in the United States or other countries where OnStride™ or its sub-processors operate. Where we transfer personal data internationally, we implement appropriate safeguards as required by applicable law.

12. Third-Party Links and Integrations

The Services may integrate with or link to third-party services. OnStride™ does not control these third parties and is not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you connect to or access through the Services.

12.1 Integrations You Connect

The Services let you connect third-party accounts. These connections are optional, are made by you, and can be disconnected at any time from Settings.

Google Calendar. If you connect Google Calendar, you authorize OnStride to read and write calendar events so your OnStride schedule and Google Calendar remain synchronized. We request the https://www.googleapis.com/auth/calendar scope, which is required to create and maintain a dedicated OnStride calendar in your Google account. We store the resulting access and refresh tokens, encrypted and associated with your user account, and use them only to perform the synchronization you enabled. Disconnecting in Settings revokes and deletes the stored tokens.

Limited Use. OnStride’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, we do not use Google user data to serve advertising; we do not sell it; we do not transfer it except as necessary to provide or improve the Services or as required by law; and we do not allow humans to read it except with your affirmative consent, for security or abuse investigation, to comply with applicable law, or where the data is aggregated and anonymized.

Sign-in providers. You may sign in using Google or Apple. We receive your name, email address, and a stable identifier from the provider. Where you use Apple’s Hide My Email, we receive only the relay address. We do not receive your password.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will revise the "Last Updated" date and provide additional notice such as by email or a prominent in-app notice. Your continued use of the Services after the effective date constitutes your acceptance of the changes.

14. Contact Us

Company OnStride INC

Address 915 N Franklin St, Tampa, FL 33602

Email admin@onstrideapp.com (Attn: Privacy)

Response Time We aim to respond to all privacy inquiries within 30 days.