Privacy Policy

Effective date: October 4, 2026

1. Who we are

FindBusiness.ai is operated by Dependable AI Solutions LLC, a limited liability company organized under the laws of the State of California, United States ("we", "us", "our"). You can reach our privacy team at privacy@findbusiness.ai.

2. Scope

This policy applies to findbusiness.ai and the AI Readiness Assessment service (the "Service") offered at that domain. It does not cover third-party websites we link to.

3. Effective date

This policy is effective as of October 4, 2026.

4. Information we collect

Account information

If you sign in with Google or via a passwordless email link, we collect and store your uid, email address, display name, photo URL (when provided by Google), account creation timestamp, and last login timestamp. These are stored in our Firestore database under users/{uid}. During the email-link sign-in flow, your email is temporarily saved in your browser's localStorage under the key emailForSignIn so we can complete the sign-in after you click the link.

Assessment inputs

When you request an assessment, you provide a URL and/or a business name plus location (and optionally a phone number when running a "no-website" assessment).

Assessment outputs

For each assessment we store the scanned URL, the business name / location / services that we extract from publicly available web pages, Lighthouse (PageSpeed) scores, Google Business Profile data, AI Visibility results, computed scores, and generated action plans. These are stored under sites/{siteId}/assessments/{assessmentId} in Firestore. We do not store raw HTML or full page text.

Analytics events

We use Firebase Analytics to record product events including assessment_started, assessment_completed, assessment_failed, and results_viewed, along with labeled parameters that describe which type of assessment ran.

Cookies, local storage, and similar technologies

We use a small number of cookies and browser-storage technologies, listed below. We do not use advertising or cross-site tracking cookies, and we do not sell or share your information for cross-context behavioral advertising. Because we do not use cookies for advertising and the Service is intended for use in the United States, we do not display a cookie-consent banner; this section is your notice of what we set. You can clear cookies and site data at any time in your browser settings, though doing so will sign you out.

Payment and purchase information

When you buy a Market AI Assessment, payment is processed by Stripe, Inc. on a Stripe-hosted checkout page. Your full card number, CVC, and bank details go directly to Stripe; we never receive or store them. We do receive and store a record of each purchase under users/{uid}/marketEntitlements/{sessionId}: the Stripe Checkout session and event identifiers, the amount paid, a timestamp, and whether the run it pays for has been used.

We previously sold prepaid visibility credits. That product is retired, but purchase records made under it remain on your account at users/{uid}/creditPurchases/{sessionId} and are retained for the same tax and accounting reasons described below.

What we do NOT collect

• IP addresses
• Raw HTML or full page text of scanned sites
• User-agent strings
• Full payment card numbers, CVC, or bank account details. These go directly to Stripe; we never receive them

5. How we use it

• To deliver the Service and generate your assessment reports
• To cache results (typically with a 24-hour TTL) so repeat checks are fast. You can force a fresh scan at any time with the Rescan button
• To authenticate you and link assessments to your account
• To process your purchases and fulfill them to your account, and to keep a transaction record for tax and accounting
• To send you transactional emails about your account and your purchases. A website assessment sends no email; its report is on the page you ran it from. When a market report you ordered, on its own or as part of an AI Visibility Plan, finishes with a fresh result, we send a short notice to the email address on your account linking you to it. You get at most one such notice a day, however many reports you run that day, and every report is listed on your account page. It is customer-care correspondence, not marketing. Replies and questions about any email we send go to admin@dependableaisolutions.com.
• To send you periodic follow-up emails, at the email address tied to your account, about your experience with the Service and about paid services we may offer that relate to issues identified in your reports. Any such email will say how to opt out, and you can opt out at any time by emailing privacy@findbusiness.ai.
• To debug failures and improve our scoring checks

We do not cold-email, cold-call, or cold-text the businesses you assess on your behalf, and we do not share information about those businesses with marketing partners for outreach purposes. Follow-up communications go only to you, the signed-in User who ran the assessment.

6. Public sharing of reports

Please read carefully. Every assessment report, whether free or paid, is published at a public URL and is accessible to anyone with that URL. No authentication is required to view a report. Reports are derived from publicly available information about the business at the scanned URL. If you do not want a report to be public, do not submit the URL; if a report already exists that you want removed, email us at privacy@findbusiness.ai.

If your business was assessed by someone else. A report may exist for a business that the business itself did not submit, because anyone with the URL of a publicly available website can request an assessment. If you are an owner or authorized representative of a business that appears in a report and you would like the report removed or corrected, email privacy@findbusiness.ai with the report URL and what you would like changed or removed. We will review reasonable requests in good faith and respond within a commercially reasonable time.

7. Third-party subprocessors

We share the information described above with the following subprocessors strictly to operate the Service. Gemini via Google Vertex AI is used for the paid Market AI Assessment, and for the legacy premium visibility scan where an internal or partner account still runs one. The free website scan never sends anything about your site to a generative AI system.

8. Data retention

• Account information is retained while your account is active.
• Assessment data is retained indefinitely so that shared report URLs keep working.
• Purchase and transaction records are retained as long as required for tax, accounting, and legal compliance (typically up to seven years).
• We will delete account data or specific assessments on request. See "How to exercise rights" below.
• Analytics data is retained according to Google's default Firebase Analytics retention schedule.

9. Your GDPR rights

If you are in the EU, EEA, or UK, you have the following rights under the GDPR / UK GDPR:

• Access: a copy of the personal data we hold about you
• Rectification: correction of inaccurate data
• Erasure: deletion of your data
• Portability: your data in a portable format
• Restriction: limiting how we process your data
• Objection: objecting to processing based on legitimate interests
• The right not to be subject to a decision based solely on automated processing
• The right to lodge a complaint with your local supervisory authority

Our legal bases for processing include legitimate interests (delivering the Service), performance of a contract (operating your account), and consent where required (for analytics in some jurisdictions).

10. Your CCPA rights

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, the right to correct inaccurate information, and the right to limit the use of sensitive personal information. We do not sell your personal information and we do not share it for cross-context behavioral advertising.

Categories of personal information we collect (per the CCPA): identifiers (email, UID); internet or network activity (analytics events); and commercial information (URLs submitted for assessment, and purchase records such as the amount and transaction identifiers). Categories of recipients to whom we disclose personal information for business purposes are listed in Section 7 (Third-party subprocessors).

11. How to exercise rights

To exercise any right described above, email privacy@findbusiness.ai with your request and, if applicable, the email address associated with your account. We respond within 30 days, or within 45 days where the CCPA applies (extensions possible where permitted by law). We may need to verify your identity before acting on a request.

12. International transfers

Our data is processed on Google Cloud infrastructure in the United States. For users in the EU / EEA / UK, transfers rely on Google's Standard Contractual Clauses and other transfer mechanisms Google makes available.

13. Security

We use TLS to encrypt data in transit, restrict Firestore access with security rules, and apply industry-standard controls. No system is perfectly secure; we cannot guarantee absolute security. We will notify affected users of any data breach as required by applicable law.

14. Children

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us at privacy@findbusiness.ai and we will delete it.

15. Do Not Track and Global Privacy Control

We do not sell personal information and we do not share personal information for cross-context behavioral advertising. Because we do not engage in either practice, a Global Privacy Control (GPC) signal has no practical effect on how we handle your data. Because web browsers have no consistent standard for "Do Not Track" signals, we do not respond to DNT headers.

16. Changes to this policy

We may update this policy from time to time. If we do, we will update the Effective date at the top of the page. For material changes, we will also notify signed-in users by email.

17. Contact

Questions or requests about this policy or your data? privacy@findbusiness.ai.