Privacy Policy
Effective Date: April 11, 2026
Last Updated: April 11, 2026
Zebra Cat LLC ("we," "us," or "our") operates StriveDB, a secure cloud-based case management database built for victim service organizations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website strivedb.com (the "Site") or use our services.
1. Information We Collect
1.1 Information You Provide
- Contact Information: Name, email address, phone number, and organization name when you fill out our contact form, request a demo, or sign up for our newsletter.
- Account Information: If you become a StriveDB customer, we collect information necessary to set up and maintain your account.
- Communications: Any messages, feedback, or other communications you send to us.
1.2 Information Collected Automatically
- Usage Data: Pages visited, time spent on pages, links clicked, and other actions taken on our Site.
- Device Information: Browser type, operating system, device type, and screen resolution.
- IP Address and Location: Your IP address and approximate geographic location (country-level) as determined by our content delivery network (Cloudflare).
- Cookies and Tracking Technologies: See Section 5 (Cookies and Tracking) for details.
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide customer support
- Send newsletters and marketing communications (with your consent)
- Analyze website usage to improve our Site and services
- Measure the effectiveness of our marketing campaigns via Facebook Pixel
- Ensure the security and integrity of our Site
- Comply with legal obligations
3. Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:
- Consent: For marketing communications and non-essential cookies (Facebook Pixel). You may withdraw consent at any time.
- Legitimate Interest: For website analytics, security, and improving our services, where our interests do not override your fundamental rights.
- Contractual Necessity: To fulfill our obligations when you become a customer.
- Legal Obligation: To comply with applicable laws and regulations.
4. Sharing Your Information
We do not sell your personal information. We may share your information with:
- Service Providers: Third parties that help us operate our Site and deliver our services, as described in the table below.
- Legal Requirements: When required by law, regulation, or legal process.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
Service Providers
| Provider | Purpose | Data Processed |
|---|---|---|
| Amazon Web Services (AWS) | Website hosting, email delivery (SES), serverless functions (Lambda) | Form submissions, IP addresses |
| Cloudflare | Content delivery, DDoS protection, CAPTCHA (Turnstile), geographic detection | IP addresses, country codes, request metadata |
| Meta (Facebook Pixel) | Marketing analytics and ad measurement | Page views, site interactions (only with consent in EU/EEA/UK/CH) |
| Calendly | Demo scheduling | Name, email, scheduling preferences |
| Font Awesome | Icon delivery | IP addresses (CDN requests) |
5. Cookies and Tracking
5.1 Essential Functionality
Our Site uses Cloudflare for content delivery and security. Cloudflare may set cookies necessary for its operation. These do not require consent.
5.2 Facebook Pixel
We use Facebook Pixel (ID: 1346739136426654) for marketing analytics. This tracking technology is handled differently based on your location:
- EU/EEA/UK/Switzerland visitors: Facebook Pixel is blocked by default and only loads after you explicitly click "Accept" on our cookie consent banner. This complies with GDPR opt-in requirements.
- All other visitors: Facebook Pixel loads automatically. An informational banner notifies you of cookie usage.
- Global Privacy Control (GPC): If your browser sends a GPC signal, we honor it by suppressing Facebook Pixel regardless of your location.
5.3 Cookie Consent Preferences
You can change your cookie preferences at any time by clicking "Cookie Settings" in the footer of any page. This will clear your stored preference and re-display the consent banner.
5.4 cookie_consent Cookie
We store a single first-party cookie called cookie_consent to remember your preference. It contains one of: "accepted," "rejected," or "dismissed." It expires after one year and is set with Secure and SameSite=Lax attributes.
6. Data Retention
We retain your personal information only as long as necessary to fulfill the purposes described in this policy:
- Contact form submissions: Retained for up to 2 years, then deleted.
- Newsletter subscriptions: Until you unsubscribe.
- Cookie consent preferences: 1 year (cookie expiry).
- Website analytics data: Governed by Meta's data retention policies for Facebook Pixel.
7. Your Rights
7.1 GDPR Rights (EEA/UK/Switzerland)
If you are in the EEA, UK, or Switzerland, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Request erasure of your personal data
- Restrict processing of your personal data
- Data portability
- Object to processing based on legitimate interest
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
7.2 CCPA/CPRA Rights (California)
If you are a California resident, you have the right to:
- Know what personal information we collect
- Request deletion of your personal information
- Opt out of the sale or sharing of personal information (we do not sell your data)
- Non-discrimination for exercising your rights
7.3 Exercising Your Rights
To exercise any of these rights, contact us at:
- Email: [email protected]
- Mail: 1041 N Dupont Hwy #1104, Dover DE 19901
We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA).
8. Special Considerations for Survivor Data
StriveDB serves victim service organizations. While this privacy policy covers only our marketing website (strivedb.com), we want to be transparent about our commitment to survivor safety:
- Our website includes a "Quick Exit" button that immediately navigates away from the site.
- We do not store any case management or survivor data through this website.
- Customer (organization) data in the StriveDB application is governed by separate data processing agreements and HIPAA-compliant security controls.
- We design our systems with the understanding that browsing history and digital footprints can pose safety risks to survivors.
8.1 VAWA Confidentiality
StriveDB is built to support victim service organizations that are subject to the Violence Against Women Act confidentiality provisions (34 U.S.C. § 12291(b)(2)) and analogous state confidentiality statutes. The StriveDB application is designed so that personally identifying information about survivors is not shared, disclosed, or revealed without the informed, written, reasonably time-limited consent of the person about whom information is sought, except as compelled by statute or court order. Operational details are set out in the data processing agreement provided to each customer organization.
9. International Data Transfers
Our Site is hosted in the United States via Amazon Web Services. If you access our Site from outside the United States, your information may be transferred to, stored, and processed in the United States. We rely on:
- Standard Contractual Clauses (SCCs) for transfers from the EEA/UK
- AWS and Cloudflare's compliance frameworks, including SOC 2 and ISO 27001 certifications
- Meta's data transfer mechanisms for Facebook Pixel data
10. Security
We implement reasonable technical and organizational measures to protect your information, including:
- HTTPS encryption for all Site traffic
- Cloudflare DDoS protection and web application firewall
- Cloudflare Turnstile CAPTCHA to prevent automated abuse of forms
- Honeypot fields for additional bot protection
- Secure, SameSite cookie attributes
11. Children's Privacy
Our Site and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated through a notice on our Site.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Zebra Cat LLC
1041 N Dupont Hwy #1104
Dover, DE 19901
[email protected]