Privacy policy

1. Scope and contact

This notice explains how the operator trading as Restaurant Intel handles information about website visitors, customers, people who contact us and individuals identified in business research. Contact ab@getrestaurantintel.com or use the privacy-request form below. The operator and seller is FranBizNetwork, operating Restaurant Intel.

This notice describes our practices, not a blanket consent to every use. Third-party sources, linked websites and payment services have their own notices. Business contact details can identify an individual; we do not assume all publicly accessible information falls outside privacy law.

2. Information we collect and its sources

You provide account and request information: name, company, email, requested markets, vendor type, selected lead types, subscription and communication preferences, support messages and privacy requests. Supabase Auth handles password authentication and stores password hashes. Do not submit passwords, full card details, government identifiers or sensitive personal material in messages.

We retain service records such as account identifiers, subscription and payment status, Stripe customer and subscription references, consent information, saved reports, delivery recipients, delivery times, provider message references and delivery or setup errors. Stripe receives payment information directly; our application does not store full payment card numbers.

Research comes from government business filings, licenses, registrations and financing datasets, together with restaurant-owned websites and other specifically identified official business sources. Records may contain business and applicant names, business addresses, city/state, report dates, business activity, public contact names, business emails, phone numbers, evidence links and review notes. We do not intentionally source private residential contact lists, consumer credit files, sensitive traits or personal government identifiers for this product.

Our hosting and security services can receive IP addresses, browser/device information, requested URLs, timestamps and diagnostic logs when you use the site. The app uses a keyed representation of an IP address for login/request throttling. Map tile and external font providers receive network information when their resources load. We do not currently add advertising pixels or behavioral advertising SDKs to this application.

3. Why we use information

We use information to authenticate accounts, fulfill requests and subscriptions, select relevant reports, research and review business signals, deliver files, preserve customer history, avoid repeat deliveries, manage billing, provide support and handle corrections and privacy requests. We also use necessary information to prevent abuse, troubleshoot failures, protect accounts, maintain records, enforce agreements and meet legal obligations.

We do not use lead records to make automated decisions about individual credit, employment, housing, insurance or similar eligibility. Vendor and location preferences filter business research rather than assess a person’s sensitive characteristics. Where law requires a specific legal basis or consent for a use, we must establish that basis before undertaking it.

4. Who receives information

Brave Search receives public restaurant business names and city, state and postcode information to discover candidate business websites. We retrieve candidate pages to match restaurant identity and collect published business contacts. Customer account details, passwords, payment credentials and the vendor prospect list are not sent to this discovery workflow. FranBizNetwork may also supply business-for-sale listing information and contacts authorized for distribution, including listing status and last-confirmed dates.

Service providers process information to operate the product: Supabase for database storage and authentication; Vercel for hosting; Stripe for checkout, billing and related fraud controls; Google Gmail for account, delivery and owner-notification emails; GitHub Actions for scheduled source processing; and Anthropic for optional weekly AI-assisted verification of existing public business records and contacts. AI checks can use web searches restricted to saved source domains. We do not send customer passwords, billing credentials or our vendor prospect list to this verification workflow. Access depends on each provider’s role. Map tiles use OpenStreetMap services, and web fonts may load from Google Fonts. Following a source or contact link also interacts with the destination service.

Paying research customers receive the business records included in their reports, which may contain identifiable business contact names, emails, phone numbers and source details. Supplying such information for payment may constitute a sale under an applicable privacy law. We do not sell customer login information, customer/sample-request details or payment information as leads. We do not share personal information for cross-context behavioral advertising.

Authorized operators access information as needed to run the service. We may disclose information when legally required, to protect rights and security, or in a merger, financing or sale of the business subject to applicable protections. We do not give other customers access to your private account or delivery library.

5. Cookies and privacy signals

Essential HTTP-only session cookies keep customers and administrators signed in. Removing or blocking them prevents authenticated features from working. The current application does not use advertising cookies or cross-site advertising profiles. Browser Do Not Track has no uniform standard and does not change the essential processing described here.

An opt-out preference signal does not automatically identify a business contact in a research record or erase previously supplied reports. If applicable law requires processing such a signal for identifiable sale/sharing activity, that requirement applies. Use the request form or email to identify a research record you want suppressed; no subscription or login is required.

6. Retention and security

We keep information for as long as reasonably needed for the purpose collected, taking account of an active customer relationship, delivery history, source relevance, accounting obligations, dispute periods, security needs and deletion requests. We do not currently promise automatic deletion on a fixed timetable. Minimal suppression or delivery identifiers may need to be retained to honor an opt-out and prevent re-import or repeated delivery; they must not be reused for unrelated purposes.

Account cancellation does not automatically delete reports or billing records. A verified deletion request may require removing or redacting hosted records, while permitted legal, security or accounting records may remain. Copies already downloaded by independent recipients and records in original government sources are not erased merely by deleting our copy; where required, we will communicate a correction or deletion request to appropriate recipients. Backups may age out on their provider’s retention schedule and remain protected in the interim.

We use access controls, server-side authentication, HTTPS and restricted database access, and limit application credentials to server-side use. No internet service or storage system is completely secure. Protect your password and account links and report suspected unauthorized access promptly. We will provide legally required incident notices.

7. Your choices and privacy rights

Anyone can ask us to review a business record for correction, removal or exclusion from future research deliveries. Customers can update preferences and stop report emails in their account, through a delivery’s unsubscribe link or by replying. Email opt-out is separate from canceling billing. Essential security or legally required communications may still be necessary.

Depending on where you live, the information involved and whether a law applies to us, you may have rights to know or access information, obtain a portable copy, correct inaccuracies, delete information, opt out of sale/sharing or targeted advertising, restrict certain sensitive processing, appeal a denial or complain to a regulator. California residents may have rights under the CCPA where applicable; qualifying public records and other statutory exceptions can affect the scope. We do not knowingly sell or share personal information about people under 16.

Submit a request below or email ab@getrestaurantintel.com. For access, correction or deletion, we may request proportionate information to verify identity and authority, and use it only for that purpose. Opt-out requests do not require an account, payment or unnecessary identity documents. An authorized agent can submit a request; we may seek legally permitted proof of authorization. Include enough information to find the correct record, not sensitive identifiers.

We will respond within the deadline required by applicable law, explain any permitted extension or denial, and provide an appeal method where required. To appeal, reply with ‘Privacy appeal’ and your request reference. We do not unlawfully discriminate for exercising privacy rights. Removing information necessary to provide an account may mean that account cannot continue.

8. Location and age

The service is intended for adult business users in the United States and is not directed to children. We do not knowingly collect children’s information for this service; tell us if such information was submitted. Our providers may process information in the United States and other countries, whose laws can differ. International obligations and transfer safeguards must be addressed where applicable; use of the site alone is not consent to waive them.

9. Changes to this notice

We will post a dated update when our practices change. For material changes affecting existing personal information, we will provide additional notice and obtain consent where required. We will not retroactively broaden a use solely by silently changing this page. Contact us with questions or to request a copy of the notice applicable to your account.

Submit a privacy request

No account is required. This form saves your request for review; it does not instantly delete data. You can also email ab@getrestaurantintel.com.