Privacy Policy

Last updated: October 13, 2026

This website is owned and operated by ExOrion LLC (“ExOrion,” “we,” “us,” or “our”). This Privacy Policy explains how ExOrion LLC collects, uses, and protects information when you use PursuitOS Solo (the “Service”). By using the Service, you agree to the practices described here.

1. Information We Collect

Account information. When you sign up, we collect your name, email address, and password (stored securely, never in plain text).

Pipeline and deal data. Information you enter to use the Service — prospects, deals, notes, activity history, and similar sales data. This is your data; we process it to provide the Service.

Payment information. Subscription payments are processed by Stripe, our payment processor. We do not store your full card number on our servers; Stripe handles that directly.

Usage information. We collect information about how you use the Service, including which features you use and how often, to operate, maintain, and improve the Service, and to enforce plan limits (such as the Lite plan’s monthly AI usage allowance).

CRM connection information. If you choose to connect a CRM platform (such as HubSpot), we collect the CRM information you ask us to work with and a secure access credential from the CRM platform, as described under “Connecting a CRM Platform” below.

2. How We Use AI Features

Certain features of PursuitOS, including meeting prep, deal-health scoring, and drafted outreach, are powered by AI models. To generate these, relevant account and pipeline data (such as prospect details or meeting context) is sent to OpenAI, our AI service provider, for processing. We do not permit OpenAI to use your data to train models available to other users. AI-drafted messages are never sent automatically. They are held for your review and approval before anything goes out.

3. How We Share Information

We do not sell your personal information. We share information only with:

• Service providers who help us operate the Service: Stripe (payments), Supabase (database and authentication), Vercel (hosting), and OpenAI (AI features).
• As required by law, such as in response to a valid legal request.
• In a business transfer, such as a merger or acquisition, subject to standard confidentiality protections.

4. Connecting a CRM Platform

PursuitOS Solo lets you connect your CRM platform so you can work your pipeline inside the Service. HubSpot is the first CRM we support, and we expect to add others over time. This section applies to every CRM platform you connect, whether HubSpot or another platform we add later.

Connecting a CRM is always your choice. We ask for your explicit consent before connecting, and you may disconnect at any time. When you connect, the CRM platform gives us an access credential, which we store in encrypted form and use only to access your CRM account for the purposes of the Service.

When you use the Service with a connected CRM, we retrieve the CRM records you ask us to work with, such as contacts, companies, deals, notes, and tasks, at the time you use the Service. We do not keep a full copy of your CRM database. We store only what is needed to provide the Service, such as coaching notes, scores, and drafts that you create or accept in PursuitOS, linked to the matching CRM record identifier.

To generate AI features such as meeting prep, deal-health scoring, and drafted outreach, relevant CRM information is sent to OpenAI, our AI service provider, as described in Section 2.

PursuitOS does not send email or messages to your contacts on your behalf and does not edit or delete your existing CRM records on its own. Drafts and tasks are created only when you take an explicit action.

The information held in your CRM platform remains subject to that platform’s own terms and privacy policy. If you disconnect a CRM or delete your account, we will stop accessing your CRM account.

5. Third-Party Privacy Practices

Third-party providers, platforms, and other companies, including the CRM platforms you choose to connect, operate independently from ExOrion.

Once information is lawfully transmitted to a third party for a disclosed or requested purpose, that company’s handling of the information may also be governed by its own privacy policy and applicable legal obligations.

We encourage users to review a third party’s privacy practices before providing additional information or completing a transaction.

6. Data Security

Your pipeline and account data are isolated to your account — other users cannot access it. We use industry-standard security practices, including encrypted connections and access controls. No system is completely secure, and we cannot guarantee absolute security.

We are committed to using all appropriate guardrails to optimize the security of your data and our systems. While we cannot ensure that personal information may not be altered, accessed, disclosed, or destroyed by a breach; we strive to protect the information above by complying with applicable US Federal and State Regulations. If we become aware of a breach of administrative, operational, etc., systems then we may attempt to notify you electronically so that you can take appropriate protective steps. If users transmit any information to us through our Services or store on the Site, you do so at your own risk. Given the above, we advise that our users take any precautionary measures they can to protect their personal data.

By using our Services, you agree that we may communicate with you electronically at the e-mail address you have provided to us. Depending on where you live, you may have a legal right to receive notice of a security breach in writing. To receive free written notice of a security breach (or to withdraw your consent from receiving electronic notice of a security breach), please email us at privacy@exorionllc.com.

7. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription or delete your account, we will delete your data within 30 days, except where we’re required to retain it for legal or accounting purposes.

De-identified or aggregated information that cannot reasonably be associated with you may be retained.

Users may also have access to functionality allowing them to export certain account information.

8. Cookies

We use essential cookies to keep you logged in and the Service functioning. We may use limited analytics to understand how the Service is used. We do not use cookies for third-party advertising.

9. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. To exercise these rights, contact us at privacy@exorionllc.com. If you are located in the European Economic Area, United Kingdom, or California, additional rights may apply under GDPR or the CCPA, contact us and we’ll address your request under applicable law.

10. EEA Resident Rights

If you are a resident of the European Economic Area, you have the following data protection rights:

• If you wish to access, correct, update or request deletion of your personal information, you can do so at any time by contacting us using the contact details provided under the “Contact Us”.
• In addition, you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us using the contact details provided under the “Contact Us.”
• You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. Registered users can manage their account settings and email marketing preferences as described in the “Choices Regarding Your Personal Information” section below. If you are an unregistered user, or to opt-out of other forms of marketing (such as postal marketing or telemarketing), you may contact us using the contact details provided under the “Contact Us.”
• Similarly, if we have collected and processed your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent. You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We will respond to all requests within a reasonable timeframe. Notwithstanding the foregoing, we reserve the right to keep any information in our archives that we deem necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

11. California Consumer Privacy Act (CCPA) Notice

In this notice, we are addressing specific disclosure requirements under the California Consumer Privacy Act of 2018 for California residents. This notice applies only to “personal information” that is subject to that law and applies to all California residents who visit our Sites or use the Services. California residents have rights to request access to certain personal information collected about them over the past 12 months, or deletion of their personal information, subject to certain exceptions, and may not be discriminated against because they exercise any of their rights under the California Consumer Privacy Act. We may require you to provide additional personal information to verify your identity before we process your request; we may not process your request if we are unable to verify your identity.

We collect, use and share personal information regarding California residents as described in this notice.

12. Children’s Privacy

ExOrion is intended for adults and is not directed to children under 18. ExOrion does not knowingly collect personal information from children under 18. Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.

ExOrion does not knowingly collect any Personal Identifiable Information from children under the age of 13. If we learn at any time that we have been providing services to or have collected the information of a child under the age of 13 then we will immediately destroy this personal information unless we are legally obligated to retain such data. Please email us at privacy@exorionllc.com if you believe that we have unintentionally provided services to or collected the information of a child under the age of 13.

If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

Children between the ages of 13 and 18 years of age must receive permission from a parent of legal guardian to access this website.

13. Canadian Anti-Spam Law

ExOrion applies to commercial electronic messages (CEMs) of all types (i.e., email, texts, sound, voice or image messages) meant to encourage participation in a commercial activity (e.g., offer to purchase a product, advertise or promote a product). Its key feature requires organizations that send CEMs within, from, or to Canada to receive consent from the consumer before sending messages. Consent can be obtained either explicitly or implicitly. Examples of explicit consent include but are not limited to signing up for our mailing list online, entering sweepstakes and contests, and information requests made via one of our online services. Implied consent stems from either the purchase of a product or inquiry about a product; implied consent is considered valid for 24 months following the purchase of a product, and 6 months following an inquiry about a product.

If you are on our commercial electronic messages mailing list, you may unsubscribe from it at any time. Unsubscribe instructions are included with each of our emails. You may also visit our online email page and unsubscribe. If you choose to unsubscribe, your address will be removed in no more than 10 business days. Please allow 5 days for us to remove your email address from any future mailings. Please note that should you order from us in the future, you will still receive order and shipping confirmations from us via email below.

14. Governing Law

This Agreement shall be governed by and interpreted in accordance with the laws of the State of Georgia, United States.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We’ll post the updated version here with a new “Last updated” date. Material changes will be communicated to active users.

16. Contact Us

Questions about this Privacy Policy? Contact us at privacy@exorionllc.com.