Privacy Policy

LayaVantage Systems, Inc., doing business as FranVantage ("Company," "we," "our," or "us"), operates the FranVantage platform at franvantage.com. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our services.

Our mailing address is: [YOUR BUSINESS ADDRESS]

For privacy-related inquiries: privacy@franvantage.com

1. Information We Collect

Account and Contact Information

When you sign up for early access or create an account, we collect your name and email address. If you create a full account, we may also collect billing information necessary to process payments. We do not store full credit card numbers — payment processing is handled by our third-party payment processor.

Uploaded Documents

When you upload a Franchise Disclosure Document (FDD) for analysis, we receive and process the content of that document. FDDs may contain information about franchisors, financial data, legal terms, and other business information.

Usage Information

We automatically collect information about how you use FranVantage, including pages visited, features used, interactions with analysis results, browser type, device information, IP address, and referring URLs. This helps us improve the product and diagnose technical issues.

Cookies and Similar Technologies

We use the following types of cookies:

• Essential cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our site. You may opt out of analytics cookies through your browser settings or by contacting us.

We do not use advertising or tracking cookies. We do not participate in cross-site tracking.

2. How We Use Your Information

• To provide, operate, maintain, and improve the FranVantage platform
• To process and analyze your uploaded FDD documents
• To communicate with you about your account, updates, and service-related information
• To respond to your requests and provide customer support
• To monitor and analyze usage patterns to improve our services
• To detect, prevent, and address technical issues or security threats
• To comply with legal obligations

3. How Documents Are Processed

When you upload an FDD, the document is transmitted to third-party AI services for optical character recognition (OCR), text extraction, embedding, and analysis. These third-party providers include AI model providers and cloud infrastructure services.

Under the current API and enterprise terms of our AI service providers, document content submitted via their APIs is not used to train their models and is not retained beyond what is necessary to complete the processing request. We rely on these provider terms for this protection — we do not have individually negotiated data processing agreements with each provider at this time.

We are transparent about this because your FDDs contain sensitive information and you deserve to know exactly how they are handled.

4. Data Sharing

We do not sell, rent, or distribute your personal information or document content to third parties for their marketing or commercial purposes.

We share data only in the following circumstances:

• Service providers: With third-party AI, infrastructure, and payment providers necessary to operate the platform. These providers receive only the data needed to perform their specific function.
• Legal requirements: When required by law, regulation, subpoena, court order, or legal process.
• Safety and rights: When we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security issues.
• Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

5. Data Security

We implement technical and organizational measures to protect your data:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Documents and data stored on our infrastructure are encrypted at rest using AES-256.
• Infrastructure: Our services run on cloud infrastructure providers (such as AWS and Supabase) that maintain SOC 2 compliance. FranVantage itself has not obtained independent SOC 2 certification at this time.
• Access controls: Access to customer data is restricted to authorized systems and personnel necessary to provide the service.

6. Data Breach Notification

In the event of a data breach that affects your personal information or uploaded documents, we will notify affected users without unreasonable delay and in accordance with applicable law. Where required, we will also notify relevant regulatory authorities. Notification will include a description of the breach, the types of data involved, and steps we are taking in response.

7. Data Retention

We retain your uploaded documents and analysis results for as long as your account is active or as needed to provide the service. Upon account deletion or document deletion request:

• Your documents and analysis results will be permanently deleted from our primary systems within 30 days
• Backup copies will be purged within 90 days
• We may retain anonymized, aggregated data that cannot be used to identify you
• We may retain certain information as required by law or for legitimate business purposes (e.g., transaction records for tax compliance)

8. Your Rights

Regardless of your location, we provide the following rights to all users:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data and uploaded documents.
• Export: Request an export of your data in a portable format.
• Opt out: Opt out of analytics tracking and non-essential communications.

To exercise any of these rights, contact us at privacy@franvantage.com. We will respond to requests within 30 days.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete your personal information, subject to certain exceptions.
• Right to Opt Out of Sale/Sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Categories of personal information we collect: Identifiers (name, email, IP address), commercial information (purchase history), internet activity (usage data, interactions), and professional information (uploaded FDD content).

To exercise your California privacy rights, contact us at privacy@franvantage.com.

10. International Users

FranVantage is operated from the United States and is primarily intended for users located in the United States. If you access our services from outside the United States, please be aware that your data will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using FranVantage, you consent to the transfer of your information to the United States. We do not currently target users in the European Economic Area (EEA) or the United Kingdom. If this changes, we will update this policy with appropriate legal bases for processing, data transfer mechanisms, and additional rights.

11. Children's Privacy

FranVantage is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the "Last updated" date, and where practicable, sending notice to the email address associated with your account. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at privacy@franvantage.com.