Privacy
This notice explains what joinstriveon.com collects, why, and what you can ask us to do about it. Last updated 14 October 2026.
Data controller
Striveon Oy, Jyväskylä, Finland. Contact us at support@striveon.app.
What we collect
Use of this website. We use third-party analytics services that set cookies and record how pages are used, including your IP address, browser and the pages you visit.
Buying a spreadsheet. A spreadsheet bought on this site is paid for at Stripe's checkout, which runs on its Link service and takes the payment and the sales tax. Stripe passes us your email address, your country, what you bought and the page you bought it from, and the name and VAT number of your business if you gave them. Your card details stay with Stripe. Link's own privacy policy(opens in new tab) covers what it does at the checkout.
What we use it for
To answer questions and refunds about a spreadsheet you bought and keep the accounting records of the sale, and to see how this website is used. We do not sell personal data and we do not use it for advertising.
Legal basis
Legitimate interest for website analytics. For a purchase, the contract of sale and our legal duty to keep accounting records.
Who we share it with
Service providers acting on our behalf: web analytics. Purchases go through Stripe, which runs the checkout. Some of them operate outside the EEA, so data about your visit is transferred there.
How long we keep it
An email address is kept while it is still needed for the purpose it was given for, and is deleted on request. The record of a purchase is kept for as long as Finnish accounting law requires.
Your rights
You can ask for a copy of what we hold about you, ask for it to be corrected or deleted, object to how it is used. Write to support@striveon.app from the address you gave us.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman.
The coach package list
You can join this list under some of the free tools and on the coach package page, to hear about a paid package of coaching tools that is not built yet. This part covers what joining it collects and what happens to it.
What we collect. Your email address, which is the one thing you need to give to join. Your role, the tools you would like built next and, if you pick “Something else”, your own idea are optional. With them we keep a record of your consent: when you joined, on which page and in which of our sign-up panels, whether you had typed names into that page's table (never the names themselves), which version of the form, and the exact wording of the emails you ticked. Before an address is added, we check that its domain can receive email; if that check cannot finish (it times out or the lookup fails), the address is added and marked as unchecked.
Keeping automated sign-ups out. When the form comes into view, the page loads Cloudflare Turnstile, which receives your IP address and details of your browser, and it runs its check when you join. To limit how many sign-ups can come from one connection, we store a keyed hash of your IP address, not the address itself. It expires after two hours and is then deleted automatically, usually within a few days.
What we use it for. To send the emails you ticked and nothing else: one question about what you would need, and one email if the package gets built, with the price and what is in it. Your optional answers help us decide what to build first. If you reply to the question email, your reply comes to support@striveon.app and we read it for the same purpose. Our analytics count that someone joined, with the role and tools picked, but never your email address or your own words, and the session recording on this site does not record what you type into the form.
Legal basis. Your consent (GDPR Article 6(1)(a)), which you give by ticking one or both emails. We keep the record of your consent because we must be able to show that you gave it (GDPR Article 7(1)).
Who processes it. Amazon Web Services stores the list and sends the emails, in Ireland. Cloudflare runs the check against automated sign-ups. Replies to the question email arrive in our mailbox at Google Workspace.
Transfers outside the EEA. The list stays in the AWS region we chose. AWS's data processing terms let it leave that region only where needed to provide the service or to comply with the law, and apply the EU standard contractual clauses to any such transfer. Cloudflare is a US company, and the information its check receives may be processed outside the EEA. For the safeguards that cover that transfer, and a copy of them, write to support@striveon.app.
How long we keep it.
- If you asked only for the question email, your address is deleted once that email is sent, and no later than 31 March 2027.
- If you asked for the email about the package being built, your address is deleted right after that email, or no later than 31 December 2027 if the package is not built.
- Your optional answers and the record of your consent are deleted with your address. Replies to the question email are deleted from our mailbox no later than 31 March 2027.
- If you unsubscribe, your address is deleted at once. We keep only a keyed one-way hash of it, which cannot be turned back into the address, so that we never email it again, even if it is entered on the form later.
- Deleted data can stay in our database's automatic backups for up to 35 days.
Your rights. You can withdraw your consent at any time, with the unsubscribe link in either email or by writing to support@striveon.app. Withdrawing does not affect what was done before it. You can also ask for a copy of what the list holds about you, have it deleted, restrict how it is used, or receive it in a machine-readable form to take elsewhere. You can lodge a complaint with the Finnish Data Protection Ombudsman.
Children. The list is meant for adults. If we learn that an address belongs to a child under 13, we delete it.
The Striveon application
This notice covers this website. Personal data inside the Striveon application, where athletes, plans and evaluations live, is governed by the agreement with the customer organisation.