Privacy Policy

1. Information We Collect

We collect information you provide directly: your name, email address, and any FDD documents you upload for analysis. We also collect usage data including pages visited, features used, and search queries.

2. Cookies & Analytics

We use a small number of cookies. Here is exactly what each one does:

Attribution (always on). On your first visit we set a first-party cookie, fs_attr, that records which page you landed on and, if you came from a link with tracking parameters, the source of that link. It is read only by our own servers (it is not accessible to JavaScript or any other site), is never sold or shared, and expires after 90 days. We use it to understand which of our own pages and campaigns bring people to the Service — not to track you across other websites.

Analytics (only with your consent). We use Google Analytics (GA4) and Microsoft Clarity, both loaded through Google Tag Manager, to understand how the Service is used. These do not load, and set no cookies, until you click "Accept" on the cookie banner. We run Google Consent Mode: your choice is respected by our analytics tags immediately, we serve no advertising, and we do not sell or share personal information with anyone for their own advertising purposes.

Vercel Analytics (always on, cookieless). We use Vercel Analytics for basic page-view and referrer counts. It does not use cookies or any other persistent identifier and cannot be used to track you individually, so it runs regardless of your cookie choice.

Changing your choice. Click "Cookie Preferences" in the footer at any time to re-open the banner and change your choice, or clear your browser's site data for this domain to reset it (the banner will reappear on your next visit).

3. How We Use Your Information

We use your information to provide and improve the Service, process payments, send transactional communications, and generate franchise analysis reports.

4. Document Security

FDD documents are stored with encryption at rest and in transit. We do not share your uploaded documents with third parties. Documents are processed by our automated forensic pipeline only.

5. Data Retention

We retain your account data for as long as your account is active. FDD documents and analysis results are retained to provide ongoing access to your reports. You may request deletion of your data at any time.

6. Subprocessors

We rely on the following companies to run the Service. Each processes data on our behalf, under its own privacy policy and security commitments — we do not sell data to any of them, and none of them may use your data for their own purposes.

• Supabase — authentication and database
• Stripe — payment processing
• Google Cloud — document storage and processing
• Vercel — hosting and (cookieless) analytics
• Sentry — error monitoring
• Resend — transactional email
• Calendly — scheduling, for Deep Dive consultation customers only
• Anthropic and Google — AI providers used to analyze the documents you upload

7. Your Rights & Data Deletion

Wherever you are, you can ask us to:

• see what personal data we hold about you (access)
• correct inaccurate data (rectification)
• delete your account, documents, and personal data (erasure)
• get a copy of your data in a portable format (portability)
• object to or restrict certain processing

We don't sell personal information, so there is no "opt out of sale" to exercise (California and other state privacy laws) — and we never treat you differently for exercising any of these rights. To use any of them, email founder@franchisesonar.com — we respond within 30 days.

8. Contact

For anything else, reach us at our contact page.