Privacy Policy

Overview

FranchiseKit ("we," "us," or "our") operates the franchise management platform at getfranchisekit.com. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

We believe your data belongs to you. We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes. Your data is used solely to provide and improve the FranchiseKit service.

Information We Collect

We collect the following types of information:

• Account information: Name, email address, and organization details provided during registration.
• Tenant data: Information you and your team enter into the platform, including franchise applications, onboarding workflows, training content, tickets, announcements, locations, and documents.
• Usage data: How you interact with the platform (pages visited, features used) to improve the service.
• Device information: Browser type, operating system, and IP address for security and troubleshooting.

How We Use Your Information

Your information is used to:

• Provide, maintain, and improve the FranchiseKit platform.
• Authenticate your identity and manage access to your tenant workspace.
• Send transactional emails (invitations, notifications, password resets).
• Process payments and manage your subscription.
• Provide customer support.
• Monitor platform security and prevent abuse.

We do not use your data for advertising, profiling, or any purpose unrelated to operating the FranchiseKit service.

Data Storage & Security

Your data is stored securely in our database infrastructure powered by Convex. Files and documents are stored in Cloudflare R2 object storage.

We implement industry-standard security measures including encryption in transit (TLS), role-based access control, row-level tenant isolation, and regular security reviews. Access to your data is strictly limited to authorized personnel for the purpose of maintaining the service.

Data Sharing

We do not sell or share your data with third parties. The only exceptions are the service providers required to operate the platform:

• Convex: Database hosting and real-time data infrastructure.
• Clerk: Authentication and user management.
• Stripe: Payment processing (we never store your card details directly).
• Cloudflare R2: File and document storage.
• Resend: Transactional email delivery.

These providers process data solely on our behalf and are contractually obligated to protect your information.

Multi-Tenant Data Isolation

FranchiseKit is a multi-tenant platform. Each tenant's data is logically isolated — your franchise data is only accessible to authenticated users within your organization based on their assigned role and permissions.

Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Export your data in a standard format.
• Withdraw consent for optional data processing at any time.

To exercise any of these rights, contact us at [email protected].

Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the platform is used. We do not use advertising or tracking cookies.

Data Retention

We retain your data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., billing records).

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app announcement. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at [email protected].