Privacy Policy

1. Introduction

Paralex Inc. ("Company," "we," "us," or "our") operates FDDHub and FDDAdvisor (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when you:

• Create an account: Name, email address, phone number, password, company name (for franchisors), city, and state
• Complete your profile: Investment range, industries of interest, buying timeline, business experience, and location preferences
• Use the Service: Questions asked to AI tools, notes saved, documents uploaded, and communications with franchisors
• Contact us: Information in your inquiries, feedback, or support requests

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage data: Pages visited, features used, time spent on pages, sections of FDDs viewed, questions asked to AI chat, and interaction patterns
• Device information: Browser type, operating system, device type, screen resolution, and unique device identifiers
• Log data: IP address, access times, referring URLs, and error logs
• Cookies and tracking technologies: Information collected through cookies, pixels, and similar technologies (see Section 7)

2.3 Information from Third Parties

We may receive information from:

• Franchisors: When a franchisor invites you to view an FDD, they provide us with your name, email, and phone number
• Authentication providers: If you sign in using third-party services
• Analytics providers: Aggregated usage statistics and performance data

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Deliver FDDs and facilitate communications between buyers and franchisors
• Power AI-assisted features to help you understand FDD content
• Generate engagement analytics and lead intelligence for franchisors
• Send you service-related communications and updates
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve user experience
• Detect, prevent, and address fraud, security issues, and technical problems
• Comply with legal obligations

4. How We Share Your Information

4.1 With Franchisors (for Buyers)

When you access an FDD through an invitation from a franchisor, we share certain information with that franchisor, including:

• Your name, email, phone number, and location
• Engagement data: time spent viewing the FDD, sections viewed, questions asked
• Profile information you have chosen to share

This information helps franchisors understand your interest level and provide better service. Franchisors cannot see your activity on other franchises' FDDs.

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database hosting and authentication
• Vercel: Website hosting and deployment
• Google Cloud / Gemini: AI processing and analytics
• Anthropic: AI-powered chat assistance
• Resend: Email delivery
• Twilio: Text message (SMS) delivery, if you opt in to text messages
• Sentry: Error monitoring and performance tracking

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders, government requests)
• Protect our rights, privacy, safety, or property
• Enforce our Terms of Service
• Protect against legal liability

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4.5 We Do Not Sell Your Personal Information

We do not sell, rent, or trade your personally identifiable information to third parties for their marketing purposes.

4.6 Text Messaging (SMS)

If you opt in to receive text messages, we use your mobile phone number to send you automated text messages about your Franchise Disclosure Document, including delivery notifications, review reminders, and responses to questions you ask by text. Opting in is voluntary and is not a condition of any purchase. Message frequency varies, and message and data rates may apply. You can opt out at any time by replying STOP to any message, or reply HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except for vendors and aggregators acting on our behalf solely to deliver the messages you have requested.

5. Your Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

5.1 Right to Know

You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.

5.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions (such as completing a transaction, complying with legal obligations, or detecting security incidents).

5.3 Right to Correct

You have the right to request correction of inaccurate personal information we maintain about you.

5.4 Right to Opt-Out

You have the right to opt-out of the sale or sharing of your personal information. As noted above, we do not sell your personal information.

5.5 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights.

5.6 How to Exercise Your Rights

To exercise any of these rights, you may:

• Email us at privacy@fddhub.com
• Use the account settings in your profile
• Contact us using the information in Section 12

We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal obligations (e.g., FTC Franchise Rule recordkeeping requirements)
• Resolve disputes and enforce our agreements
• Improve our Service and develop new features

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your interactions with the Service:

7.1 Types of Cookies We Use

• Essential cookies: Required for the Service to function (authentication, security, session management)
• Analytics cookies: Help us understand how you use the Service (page views, feature usage, performance)
• Preference cookies: Remember your settings and preferences

7.2 Your Cookie Choices

Most browsers allow you to control cookies through settings. However, disabling certain cookies may limit your ability to use some features of the Service.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws different from your country. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where we or our service providers operate.

11. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Texas, without regard to its conflict of law provisions.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last Updated" date. For significant changes, we may also send you an email notification.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about our data practices, please contact us:

For CCPA/CPRA requests, please include "Privacy Rights Request" in your subject line and provide sufficient information for us to verify your identity.

14. Additional Disclosures

Categories of Personal Information Collected (Last 12 Months)