Data Privacy

At BrightLane and AltFTool, data privacy is treated as a core architectural commitment. When prospective franchise buyers research commercial cleaning opportunities on our platform, we adhere to strict data minimization principles.

We believe users should be able to research startup models, calculate working capital buffers, and inspect FDD requirements without invasive surveillance or unsolicited sales calls from franchise brokers.

• Data Minimization: We collect only the minimum information necessary to provide educational research and optional newsletter briefings.
• Purpose Limitation: Data provided is never used for secondary advertising or unannounced commercial objectives.
• Zero Commercial Data Sharing: We will never sell, rent, license, or exchange your personal information with external franchise sales organizations.
• Transparent Control: Users maintain total authority to inspect, export, or permanently erase their data records upon request.

All client-server interactions are encrypted end-to-end using modern TLS 1.3 protocol standards. Data at rest is encrypted using AES-256 standards within audited cloud data centers.

Access to subscriber databases is restricted to authorized administrative engineers through multi-factor authentication (MFA) and audited operational logs.

Any questions or messages submitted regarding specific franchise contracts, Item 19 financial claims, or legal reviews are treated with strict confidentiality.

We do not pass inquiry data to any franchisor or third party without your express, written consent.

Under the California Consumer Privacy Act (CCPA/CPRA), General Data Protection Regulation (GDPR), and equivalent global consumer privacy statutes, you have enforceable legal rights:

• Right to Know: What specific categories of personal data we have collected in the preceding 12 months.
• Right to Delete: Request permanent erasure of personal records across all active databases.
• Right to Non-Discrimination: Equal service access and tool functionality whether you exercise privacy rights or not.
• Right to Restrict Processing: Limit how your contact information is utilized.

To exercise any statutory data rights, submit an access request, or discuss our security governance framework, contact our compliance team directly at privacy@altftool.com.

Written requests are acknowledged within 48 business hours and processed within statutory timelines (maximum 30 days).