Last updated: September 14, 2026
Account Information: When you create an account, we collect your name, email address, and password. If you are invited by an admin, we also collect your role and the email address used for the invitation.
Business Profile Data: When you build your franchise, we collect information you provide about your business, including business name, industry, description, location, financial data, and operational details.
Franchise Data: We store the franchise manuals, FDDs, training programs, financial models, leads, and other content you create using the Service.
Usage Data: We automatically collect information about how you use the Service, including your IP address, browser type, device information, pages visited, and timestamps.
We use your information to:
We do not sell your personal information to third parties. We do not use your franchise content to train AI models for the benefit of third parties.
We may share your information with:
California residents have the right under California Civil Code § 1798.83 ("Shine the Light" law) to request a list of all third parties with whom we have shared your personal information for their direct marketing purposes during the preceding 12 months, along with the categories of information shared.
As part of our franchise broker network operations, we may share your name, email address, phone number, and geographic location with independent franchise brokers and sales agents for the purpose of marketing franchise opportunities to you.
To exercise your right under this law, please submit your request via email to:
Please include "Shine the Light Request" in the subject line and verify your California residency in the body of the email. We will respond to your request within 30 days of receipt.
For transfers of personal data from Switzerland to the United States, this platform relies on the Swiss-U.S. Data Privacy Framework as a standalone transfer mechanism, as recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC). The U.S. Department of Commerce has certified the platform's adherence to the Swiss-U.S. DPF Principles.
Your rights under the Swiss-U.S. DPF: Swiss-resident data subjects have the right to access their personal data, correct inaccuracies, and request deletion in limited circumstances. If you have a complaint regarding our handling of your personal data under the Swiss-U.S. DPF, you may submit it to the FDPIC or to an independent dispute resolution mechanism in the U.S.
FDPIC Complaint Submission Portal:
https://www.edoeb.admin.ch/edoeb/en/home/data-protection/complaints.htmlFederal Data Protection and Information Commissioner (FDPIC) — Switzerland
For questions about our Swiss-U.S. DPF compliance, contact our privacy team through the Privacy Portal. We will respond within the timeframe required by Swiss data protection law.
Franchise Builder US complies with all comprehensive state consumer privacy laws enacted as of the date of this Privacy Policy. The following sections detail your rights under each state's privacy law. If your state is not listed below, you still have rights under applicable federal law and any state-specific consumer protection laws that may apply.
California (CCPA/CPRA — Cal. Civ. Code § 1798.100 et seq.): California residents have the right to: (a) know what personal information is collected, used, shared, or sold; (b) request deletion of personal information; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information; (e) limit the use of sensitive personal information; (f) non-discrimination for exercising privacy rights; and (g) access the specific pieces of personal information collected. California also enacted the California Consumer Health Data Privacy Act (effective January 1, 2026), which provides additional protections for health-related data. To exercise these rights, visit our Do Not Sell page at /legal/do-not-sell or our Privacy Portal at /privacy-portal.
Virginia (VCDPA — Va. Code § 59.1-575 et seq.): Virginia residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) obtain a copy of personal data in a portable format; (e) opt out of targeted advertising, sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects; and (f) appeal a controller's refusal to act on a request. Requests must be responded to within 45 days (extendable by 45 additional days).
Colorado (CPA — Colo. Rev. Stat. § 6-1-1301 et seq.): Colorado residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale of personal data, and profiling; and (f) appeal a controller's refusal. Colorado requires controllers to recognize Universal Opt-Out Mechanisms (UOOMs) such as Global Privacy Control (GPC) signals. Requests must be responded to within 45 days.
Connecticut (CTDPA — Conn. Gen. Stat. § 42-515 et seq.): Connecticut residents have the same rights as Virginia residents (access, correction, deletion, portability, opt-out of targeted advertising/sale/profiling, and appeal). Connecticut also requires recognition of UOOMs and mandates data protection assessments for targeted advertising, sale, and profiling.
Utah (UCPA — Utah Code § 13-61-101 et seq.): Utah residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) obtain a copy of personal data; and (e) opt out of targeted advertising and sale of personal data. Utah does not require recognition of UOOMs. Requests must be responded to within 45 days.
Texas (TDPSA — Tex. Bus. & Com. Code § 541.001 et seq.): Texas residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale of personal data, and profiling; and (f) appeal a controller's refusal. Texas also enacted the Responsible Artificial Intelligence Governance Act (TX HB 149, effective January 1, 2026), prohibiting certain harmful uses of AI. Requests must be responded to within 45 days.
Oregon (OCPA — Or. Rev. Stat. § 646A.570 et seq.): Oregon residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale of personal data, and profiling; (f) limit processing of sensitive data; and (g) appeal a controller's refusal. Oregon requires recognition of UOOMs and has a lower revenue threshold than most states. Requests must be responded to within 45 days.
Montana (MTCDPA — Mont. Code § 50-21-101 et seq.): Montana residents have the same rights as Virginia residents. Montana requires recognition of UOOMs. Requests must be responded to within 45 days.
Delaware (DPDPA — Del. Code tit. 6, ch. 12D): Delaware residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; and (f) appeal a controller's refusal. Delaware requires recognition of UOOMs. Requests must be responded to within 45 days.
Iowa (ICDPA — Iowa Code § 715D.1 et seq.): Iowa residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; and (e) opt out of targeted advertising and sale of personal data. Iowa does not include a right to opt out of profiling or a right to appeal. Iowa does not require recognition of UOOMs. Requests must be responded to within 45 days.
Nebraska (NDPA — Neb. Rev. Stat. § 87-1101 et seq.): Nebraska residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; and (f) appeal a controller's refusal. Nebraska also enacted the Age-Appropriate Design Code (NE LB 504, effective January 1, 2026), imposing additional requirements for services likely to be accessed by minors.
New Hampshire (NHPA — N.H. Rev. Stat. § 507-H:1 et seq.): New Hampshire residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; and (f) appeal a controller's refusal. New Hampshire requires recognition of UOOMs.
New Jersey (NJDPA — N.J. Stat. § 56:8-166 et seq.): New Jersey residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; (f) limit use of sensitive data; and (g) appeal a controller's refusal. New Jersey also enacted a Data Broker Registration Law (effective July 2026) requiring data brokers to register with the state.
Tennessee (TIPA — Tenn. Code § 47-18-301 et seq.): Tennessee residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; and (f) appeal a controller's refusal. Tennessee requires recognition of UOOMs.
Minnesota (MCDPA — Minn. Stat. § 325O.01 et seq.): Minnesota residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; (f) limit use of sensitive data; and (g) appeal a controller's refusal. Minnesota requires recognition of UOOMs and includes a right to challenge profiling decisions.
Maryland (MODPA — Md. Code, Com. Law § 14-4601 et seq.): Maryland residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; (f) limit use of sensitive data; and (g) appeal a controller's refusal. Maryland also enacted the Online Data Privacy Act (MODPA) and a surveillance pricing ban on certain food products (effective 2026). Maryland requires recognition of UOOMs.
Indiana (INCDPA — Ind. Code § 7-1-6-1 et seq., effective January 1, 2026): Indiana residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; and (f) appeal a controller's refusal. Indiana requires recognition of UOOMs.
Kentucky (KCDPA — Ky. Rev. Stat. § 365.820 et seq., effective January 1, 2026): Kentucky residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; and (f) appeal a controller's refusal. Kentucky requires recognition of UOOMs.
Rhode Island (RIDTPPA — R.I. Gen. Laws § 11-49.3-1 et seq., effective January 1, 2026): Rhode Island residents have the right to: (a) access personal data; (b) correct inaccuracies; (c) delete personal data; (d) data portability; (e) opt out of targeted advertising, sale, and profiling; (f) limit use of sensitive data; and (g) appeal a controller's refusal. Rhode Island requires recognition of UOOMs.
Other States with Pending or Enacted Privacy Laws: Louisiana (LDPA), Oklahoma (OCDPA), Alabama (APDPA), and Vermont (VDPOSA) have also enacted comprehensive or sector-specific privacy laws. We monitor legislative developments and will update this section as additional state privacy laws take effect. Residents of these states may exercise their rights through the same channels described below.
Universal Opt-Out Mechanism (UOOM) Recognition: Franchise Builder US recognizes and honors Global Privacy Control (GPC) signals and other browser-based universal opt-out mechanisms as valid opt-out requests for targeted advertising and the sale or sharing of personal information, as required by California, Colorado, Connecticut, Oregon, Montana, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island. When we detect a GPC signal, we will treat it as a request to opt out of the sale or sharing of your personal information for targeted advertising purposes.
How to Exercise Your Rights: To exercise any of the rights described above, you may: (a) submit a request through the Support section of the platform; (b) visit our Privacy Portal at /privacy-portal; (c) visit our Do Not Sell page at /legal/do-not-sell; or (d) enable the Global Privacy Control (GPC) signal in your browser. We will verify your identity before processing your request and respond within the timeframe required by your state's law (typically 45 days, extendable by an additional 45 days where reasonably necessary). All Data Subject Requests are processed at no cost to you.
Authorized Agents: You may designate an authorized agent to submit requests on your behalf. The authorized agent must provide written permission from you and may be required to verify their own identity. We may require you to verify your identity directly with us before processing a request submitted by an authorized agent.
Appeal Rights: If we decline to act on your request, you have the right to appeal our decision under the laws of Virginia, Colorado, Connecticut, Oregon, Montana, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island. To submit an appeal, contact us through the Support section of the platform within a reasonable time after receiving our decision. We will respond to your appeal within 45 days. If your appeal is denied, you may contact your state's Attorney General or the relevant state privacy regulatory authority to submit a complaint.
Sensitive Personal Information: Under California (CPRA), Oregon, Minnesota, Maryland, and Rhode Island law, you have the right to limit the use of your sensitive personal information — which includes racial or ethnic origin, religious beliefs, mental or physical health condition, sexual orientation, citizenship/immigration status, genetic and biometric data, precise geolocation, and personal data of minors under 16. We do not process sensitive personal information for the purpose of inferring characteristics about you unless necessary to provide the Service or as otherwise permitted by law.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights. You will not be denied service, charged different prices, or provided a different level of service quality for exercising any right described in this section.
The Service uses artificial intelligence to generate and assist with franchise documentation. When you use AI features, your input data (such as business profile information and manual content) is sent to AI model providers for processing. The AI-generated results are returned to you and stored in your account.
AI Sub-Processors: We engage third-party AI model providers as sub-processors to process personal and business data you submit through AI-powered features. We have executed a Data Processing Agreement (DPA) with our AI model provider(s) that governs the processing of personal data on our behalf, in accordance with Article 28 of the GDPR and similar requirements under CCPA/CPRA. The DPA includes terms addressing:
GDPR (EU/UK) Rights: If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the right to: access your personal data (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), object to processing (Article 21), and rights regarding automated decision-making (Article 22). You may lodge a complaint with your local data protection authority.
CCPA/CPRA (California) Rights: California residents have the right to: know what personal information is collected and sold/disclosed, request deletion of personal information, correct inaccurate personal information, opt out of the sale or sharing of personal information, and limit use of sensitive personal information. We do not sell personal information. To exercise these rights, contact us through the Support section of the platform.
International Data Transfers: When your data is transferred to AI sub-processors located outside your country of residence, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.
You should avoid entering sensitive personal information (such as Social Security numbers or financial account credentials) into AI-powered fields.
We use industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. See our Cookie Policy for details on the types of cookies we use and how to manage them.
Depending on your location, you may have the right to:
To exercise these rights, contact us through the Support section of the platform. We will respond to your request within 30 days.
Data Subject Requests Are Free of Charge: We process all Data Subject Requests (DSRs) — including access, deletion, rectification, portability, objection, and opt-out requests — at no cost to you, as required by GDPR Article 12(5), CCPA § 1798.105, and comparable provisions under state privacy laws (CDPA, CPA, CTDPA, UCPA, TDPSA). We reserve the right to charge a reasonable fee or refuse to act on a request that is manifestly unfounded or excessive — for example, repetitive requests, requests requiring disproportionate effort, or requests submitted for harassment purposes. If we determine that your request is manifestly unfounded or excessive, we will notify you of the reason and inform you of your right to lodge a complaint with the relevant supervisory authority.
We retain your data for as long as your account is active. After account cancellation, we retain your data for a reasonable period to allow for data export, after which we may permanently delete it. We may retain certain information as required by law or for legitimate business purposes such as fraud prevention.
The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
If you access the Service from outside the United States, your data will be processed in the United States. By using the Service, you consent to this transfer of data. We comply with applicable data protection laws for international users, including the EU General Data Protection Regulation (GDPR), the UK Data Protection Act, and the California Consumer Privacy Act (CCPA/CPRA).
EU-U.S. Data Privacy Framework (DPF): Franchise Builder US self-certifies under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. We adhere to the DPF Principles with respect to the processing of personal data received from the European Union, the United Kingdom, and Switzerland. If you are an EU, UK, or Swiss resident, you may contact your local Data Protection Authority or the U.S. Department of Commerce's DPF dispute resolution mechanism if you believe we have not resolved a complaint regarding our DPF compliance.
Standard Contractual Clauses (SCCs) — Current Versions: For transfers of personal data from the EU, UK, or Switzerland to the United States that are not covered by the DPF, we rely on the following lawful data transfer mechanisms, each as currently in force and as may be updated or superseded by successor versions adopted by the relevant authority:
These contractual safeguards ensure that personal data transferred to the U.S. receives a level of protection essentially equivalent to that in the originating jurisdiction. We conduct periodic document audits to ensure that the most recent versions of the EU SCCs (2021), the UK Addendum (March 2022), and Swiss equivalents are dynamically inserted into all franchisor and franchisee agreements at the time of execution.
SCCs in Franchise Agreements: We incorporate the current versions of the Standard Contractual Clauses (EU 2021 SCCs, UK March 2022 Addendum, and Swiss equivalents) into our standard franchisor and franchisee agreements to ensure that all parties processing personal data on behalf of the platform do so under appropriate safeguards. Franchisees operating in the EU, UK, or Switzerland are required to execute the applicable SCCs as part of their franchise agreement to ensure lawful cross-border data transfers.
Supplementary Measures: Where necessary, we implement supplementary measures such as encryption, pseudonymization, and access controls to provide an additional level of protection for cross-border data transfers, in accordance with the requirements of the 2021 SCCs and the UK Addendum.
The data controller responsible for your personal data under this Privacy Policy is Grant Search US, Inc., which operates the Service under the trade names Franchise Builder US (domestic) and Franchise Builder Global (international). All references to "Franchise Builder US," "Franchise Builder Global," "we," "us," or "our" in this Privacy Policy refer to Grant Search US, Inc.
Under Article 37 of the EU General Data Protection Regulation (GDPR), the designation of a Data Protection Officer (DPO) is mandatory for organizations that carry out large-scale processing of personal data. Franchise Builder US processes significant volumes of franchisee and end-customer personally identifiable information (PII), including financial data, identity verification documents, and business records. To comply with GDPR Articles 37–39, we have appointed a DPO who serves as the primary point of contact for data protection matters for EU, UK, and EEA-based users.
DPO Contact Information:
DPO Responsibilities: Our DPO is responsible for (a) monitoring compliance with GDPR, UK GDPR, and other applicable data protection laws; (b) advising on data protection impact assessments (DPIAs); (c) cooperating with and acting as the contact point for supervisory authorities; (d) serving as the contact point for data subjects exercising their rights under Articles 15–22; and (e) maintaining an overview of data protection practices across the Service.
EU Representative (Article 27): For data subjects located in the European Union, our DPO also serves as our Article 27 representative for matters relating to processing of personal data in the EU. EU-based users may contact our DPO directly using the contact information above for any data protection inquiry, complaint, or rights request, including access, rectification, erasure, restriction, portability, objection, and automated decision-making rights under GDPR Articles 15–22.
Supervisory Authority: If you are located in the EU or UK and wish to lodge a complaint about our data processing practices, you may contact our DPO first, and you also have the right to lodge a complaint with your local data protection supervisory authority. The European Data Protection Board (EDPB) maintains a list of national supervisory authorities at edpb.europa.eu.
Important Notice Regarding FTC Franchise Rule Compliance: Under the FTC Franchise Rule (16 CFR Part 436), franchisors are legally required to disclose in Item 20 of the Franchise Disclosure Document (FDD) the names and last-known contact information of former franchisees who have left the system during the preceding fiscal year. This mandatory disclosure is a federal regulatory requirement intended to provide prospective franchisees with the ability to contact prior franchisees about their experience with the franchisor.
Carve-Out from "Do Not Sell" and Opt-Out Requests: Notwithstanding any general "Do Not Sell My Personal Information" request, privacy opt-out, or data deletion request you may have submitted under the CCPA, CPRA, GDPR, or any other privacy law, we may still disclose your name and contact information in an FDD Item 20 listing as required by the FTC Franchise Rule and applicable state franchise disclosure laws. This regulatory disclosure is exempt from general privacy opt-out requests because:
Former Franchisee Notification: We will make reasonable efforts to notify former franchisees by email at their last-known address at least 30 days before their contact information is included in an FDD Item 20 disclosure. The notification will inform them of the upcoming disclosure and their right to provide updated contact information or request that only minimal contact information (name and city/state) be listed.
Scope of This Carve-Out: This regulatory carve-out applies only to FDD Item 20 former franchisee contact disclosures. All other privacy rights — including the right to delete personal data, opt out of data sales for marketing purposes, and restrict processing for non-regulatory purposes — remain fully in effect for all other uses of your personal information.
GDPR Lawful Basis: For EU/EEA/UK residents, the lawful basis for this disclosure is Article 6(1)(c) of the GDPR (compliance with a legal obligation) and, where applicable, Article 6(1)(e) (performance of a task carried out in the public interest). The FTC Franchise Rule constitutes a legal obligation under US federal law that applies to all franchisors offering franchises in the United States, regardless of the franchisee's country of residence.
Under Article 27 of the UK General Data Protection Regulation (UK GDPR), organizations that do not have a physical office in the United Kingdom but offer goods or services to, or monitor the behavior of, individuals located in the UK are required to appoint a representative in the UK. Franchise Builder US (operated by Grant Search US, Inc.) does not maintain a physical office in the United Kingdom, but offers franchise development services to UK-based franchisors and franchisees. Accordingly, we have appointed a UK-based representative to serve as the primary point of contact for UK data subjects and the UK Information Commissioner's Office (ICO) on all matters relating to the processing of personal data under UK GDPR.
UK Representative Contact Information:
Role of the UK Representative: Our UK Representative is authorized to communicate with UK-based data subjects and the UK Information Commissioner's Office (ICO) on our behalf regarding all matters relating to the processing of personal data under UK GDPR, including: (a) handling data subject requests from UK residents exercising their rights under Articles 15–22 of UK GDPR (access, rectification, erasure, restriction, portability, objection, and automated decision-making); (b) cooperating with the ICO on behalf of Grant Search US, Inc. in relation to our UK GDPR obligations; (c) maintaining records of processing activities and making them available to the ICO upon request; and (d) serving as the first point of contact for UK data subjects who wish to lodge a complaint about our data processing practices.
UK Data Subjects' Rights: If you are located in the United Kingdom, you have the following rights under UK GDPR: the right to be informed (Article 13–14), the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restrict processing (Article 18), the right to data portability (Article 20), the right to object to processing (Article 21), and rights in relation to automated decision-making and profiling (Article 22). You may exercise these rights by contacting our UK Representative using the contact information above, or by contacting our DPO at dpo@franchisebuilderus.com.
Complaints to the ICO: If you are a UK data subject and you believe we have not resolved a complaint regarding our processing of your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO). The ICO can be contacted at ico.org.uk or by phone at 0303 123 1113. We encourage you to contact our UK Representative first, as we are committed to resolving all complaints promptly and in accordance with UK GDPR requirements.
Franchise Builder US's lead enrichment and franchisee data processing activities may meet the definition of a "data broker" under statutes enacted in Oregon, Vermont, and Texas. We have registered (or are in the process of registering) as a data broker with the appropriate authorities in each of these states, and we provide the following statutory notices as required by each jurisdiction's data broker registration law.
Oregon (Or. Rev. Stat. § 646A.850 — Delete Act): Franchise Builder US is registered as a data broker with the Oregon Department of Justice. Oregon residents have the right to request deletion of their personal data held by data brokers. To submit a data deletion request under the Oregon Delete Act, contact us through the Support section of the platform or through our Privacy Portal at /privacy-portal. We will process your deletion request within 45 days, as required by Oregon law.
Vermont (9 V.S.A. § 2446ff — Data Broker Registration Act): Franchise Builder US is registered as a data broker with the Vermont Attorney General. Vermont residents have the right to request information about the personal data we collect about them, the source of that data, and the categories of third parties to whom we disclose it. Vermont residents also have the right to opt out of the sale of their personal data. To exercise these rights, contact us through the Support section of the platform. We are required to disclose whether we collect personal data from consumers directly or indirectly, and we hereby disclose that we collect lead and franchisee data both directly (through user input) and indirectly (through lead enrichment activities).
Texas (Tex. Bus. & Com. Code § 541.101 — Delete Act): Franchise Builder US is registered as a data broker with the Texas Attorney General. Texas residents have the right to request deletion of their personal data held by data brokers. To submit a data deletion request under the Texas Delete Act, contact us through the Support section of the platform or through our Privacy Portal at /privacy-portal. We will process your deletion request within 45 days, as required by Texas law. The Texas Attorney General maintains a public list of registered data brokers at texasattorneygeneral.gov.
California (Cal. Civ. Code § 1798.99.80 — Delete Act): Franchise Builder US has previously registered as a data broker with the California Privacy Protection Agency. California residents have the right to request deletion of their personal data, opt out of the sale or sharing of their personal data, and access the categories of personal information we collect. To exercise these rights, visit our Do Not Sell page at /legal/do-not-sell or our Privacy Portal at /privacy-portal.
What This Means for You: If you are a resident of Oregon, Vermont, Texas, or California, you have the right to request deletion of your personal data from our data broker records, subject to applicable legal retention requirements (including FTC Franchise Rule Item 20 disclosure obligations). We will process your request in accordance with the applicable state's statutory timeline. You do not need to be a registered user of the Service to submit a data broker deletion request.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page or by sending you a notice. We encourage you to review this page periodically.
Essential cookies are always on. You can accept or reject analytics, marketing, and translation (CPRA / GDPR).