Privacy Policy

1. Information We Collect

We collect the categories of information described below, either directly from you, automatically through your use of the Services, or from third-party integrations you authorize.

1.1 Information Provided by Brand Users

When a Brand User connects a Google service to the Platform through OAuth, we receive:

• Google Analytics property identifiers and associated performance metrics, including sessions, users, and pageviews;
• the Google account email address and basic account information associated with the connected integration;
• where Google Calendar is connected for a landing page scheduling feature, calendar identifiers, event metadata, meeting date and time, time zone, and generated meeting links; and
• OAuth access tokens, refresh tokens, and related connection metadata required to establish and maintain the integration.

We collect Google Calendar information only when a Brand User affirmatively enables the Google Calendar connection for a landing page's scheduling feature. We do not access or process Google Calendar data in connection with any landing page for which this feature is not enabled.

1.2 Information Provided by End Users

When an End User submits an inquiry on a hosted landing page, we collect the information voluntarily provided, which may include name, email address, telephone number, physical address, geographic area of interest, available liquid capital, estimated net worth, and other franchise qualification information submitted in connection with the inquiry ("Lead Information").

1.3 Information Collected Automatically

In connection with operating the Services, we and our service providers collect technical and usage information through Google Analytics and similar tools, including device and browser information, referral source, pages viewed, and interaction data associated with a hosted landing page.

2. How We Use Information

We use the information described in Section 1 to provide the functionality requested within a Brand User's private dashboard or a hosted landing page, including to:

• display Google Analytics performance data within a Brand User's dashboard;
• establish, maintain, and authenticate Google Calendar and related integrations;
• check calendar availability, create and manage calendar events, and generate meeting links for scheduled meetings between a Brand User and an End User;
• route, qualify, and respond to Lead Information submitted through a landing page, including delivering inquiries to the applicable franchise brand;
• send confirmations, qualification communications, and meeting reminders as described in Section 3; and
• operate, secure, maintain, and improve the Services.

We do not sell Google user data or Lead Information, and we do not use such data for advertising unrelated to the Services.

3. Artificial Intelligence, Automation, and Communications

We use artificial intelligence and automated technologies to improve the speed and accuracy of lead routing and to support scheduling and follow-up communications on the Platform.

3.1 Consent to Communications

When an End User submits contact information, including a telephone number, on a hosted landing page, the End User consents to receive communications related to that submission, which may be generated by a human, assisted by artificial intelligence, or fully automated. These communications may include email, SMS/MMS text messages, and voice calls, including calls that use a pre-recorded or artificial voice or an automatic telephone dialing system, for purposes such as confirming a submission, assessing franchise interest, and sending meeting or appointment reminders.

Consent to receive these communications is not required as a condition of purchasing any property, good, or service and is not a condition of any franchise or financial investment. An End User may revoke consent at any time using the methods described in Sections 7 and 10.

3.2 Use of Data to Improve Automated Systems

We may use anonymized, aggregated, or de-identified usage data to develop, train, and refine the automated scheduling and communication features of the Platform. We do not use personally identifiable information to train artificial intelligence systems in a manner that identifies a specific individual.

4. How We Share Information

We do not sell, rent, or trade personal information for monetary or other valuable consideration, and we do not disclose personal information to third parties for cross-context behavioral advertising. We disclose information only in the following circumstances:

4.1 Hosted Franchise Brands

Lead Information and related inquiry details are shared with the specific franchise brand whose landing page generated the inquiry, for that brand's use in evaluating and responding to the inquiry.

4.2 Service Providers

We share information with vendors who perform services on our behalf, including hosting, analytics, scheduling, and communications infrastructure providers, under contractual terms that limit their use of the information to providing services to us and require them to maintain its confidentiality and security.

4.3 Affiliates

We may share information with entities under common ownership or control with the Company to operate and support the Platform.

4.4 Legal and Safety Reasons

We may disclose information where required by law, in response to a valid legal process, to enforce our agreements and policies, or to protect the rights, property, or safety of the Company, our users, or others.

4.5 Business Transfers

We may disclose information in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

5. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, or loss, including encryption, access controls, and physical security measures for stored data. OAuth access tokens, refresh tokens, and related integration credentials are stored securely and used only to provide the connected functionality; we do not store a Brand User's Google account password or other direct sign-in credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Google API Services Disclosure

The Platform's use and transfer of information received from Google APIs — including Google OAuth, Google Analytics, and Google Calendar — adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Your Choices

A Brand User may revoke the Platform's access to a connected Google account at any time through that account's Google security settings, and may disconnect an integration from within the Platform where that functionality is available. Once access is revoked or an integration is removed, we will no longer access the associated data going forward.

8. Your Privacy Rights Under State Law

Depending on your state of residence, you may have additional rights with respect to your personal information under applicable state privacy law, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), and comparable laws in Virginia, Colorado, Connecticut, Utah, and other states.

8.1 Categories of Personal Information

In the preceding twelve months, we have collected the following categories of personal information, as defined under the CCPA: identifiers (such as name, email address, telephone number, and physical address); commercial information (such as franchise qualification data, including geographic area of interest, available liquid capital, and estimated net worth); internet or other electronic network activity information (such as Google Analytics metrics); and audio or electronic information (such as records of voice or SMS communications made in connection with the Services). We do not collect sensitive personal information as defined under the CCPA, and we do not knowingly collect personal information from consumers under sixteen years of age.

8.2 Your Rights

Subject to certain exceptions, you may have the right to: (a) know and access the specific pieces and categories of personal information we have collected about you; (b) request deletion of your personal information; (c) request correction of inaccurate personal information; (d) opt out of the sale or sharing of personal information; and (e) not be discriminated against for exercising these rights. We do not sell personal information and do not share personal information for cross-context behavioral advertising, so no opt-out mechanism is required to give effect to this right.

8.3 Exercising Your Rights

To exercise any of these rights, contact us using the information in Section 12. We will verify your request using information already associated with your account or submission before responding. You may designate an authorized agent to submit a request on your behalf, subject to our ability to verify the agent's authority and your identity.

8.4 Other State Law Rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, or another state with a comprehensive consumer privacy law, you may have similar rights to access, correct, delete, and obtain a portable copy of your personal information, and to appeal a denied request. To exercise these rights or appeal a decision, contact us using the information in Section 12.

9. Data Retention and Deletion

We retain Google-integrated data and Lead Information only for as long as necessary to provide the enabled functionality within a Brand User's dashboard and associated landing pages, or as otherwise required by law. If a Brand User disconnects a Google account or requests deletion, we will permanently delete the associated integration data — including applicable access tokens, refresh tokens, and stored integration records — within thirty (30) days, unless a longer retention period is required by law. To request deletion of your data, contact us at the email address in Section 12.

10. SMS and Mobile Messaging Policy

Mobile information collected in connection with SMS communications will not be shared with or sold to third parties or affiliates for marketing or promotional purposes. We may share such information with subcontractors that provide support services, such as customer service or automated booking assistance, solely for purposes of providing those services. Text message originator opt-in data and consent will not be shared with any third party for any purpose outside the exceptions described above. Message and data rates may apply, and message frequency will vary. To opt out of SMS communications, reply STOP to any text message at any time.

11. Children's Privacy

The Services are not directed to individuals under the age of eighteen, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to delete that information.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of the rights described above, contact us at [email protected].

13. Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Effective Date" above indicates when this Privacy Policy was last revised. Material changes will be reflected by posting the updated policy on this page. Your continued use of the Services after the effective date of any revision constitutes acceptance of the revised Privacy Policy.

14. Governing Law

This Privacy Policy is governed by the laws of the State of Illinois, without regard to conflict-of-laws principles, except to the extent superseded by applicable federal or state privacy law.