DataPrivacy&Security

All digital communications between your browser and AltFTool servers are encrypted utilizing Transport Layer Security (TLS 1.3) with 256-bit encryption keys.

• In-Transit Security: Protects lead capture submissions and email inquiries from interception across public and private networks.

• At-Rest Encryption: Database records and inquiry archives are encrypted using industry-standard AES-256 cryptographic standards.

• Certificate Pinning: Our platform uses strict HTTPS-only policies with HTTP Strict Transport Security (HSTS) headers enabled.

AltFTool strictly enforces a zero-sale policy for personal data:

• Never Sold to Data Brokers: We do not monetize user contact information through third-party data aggregators or marketing companies.

• No Robocalls or Unsolicited Marketing: Your contact information is never made available for public directory scraping or mass telemarketing campaigns.

• Direct Introductions Only: Contact details are shared solely with the specific franchisors you explicitly ask to connect with through our platform.

• Role-Based Access Controls (RBAC): Platform infrastructure is restricted strictly to verified technical staff with purpose-limited database permissions.

• Multi-Factor Authentication (MFA): All administrative access to data systems requires MFA verification.

• Audit Logs: Administrative actions and database reads are logged and monitored for anomalous activity patterns.

• Regular Vulnerability Auditing: Independent third-party security scans and penetration testing are conducted on a continuous basis.

We retain inquiry records only as long as necessary to facilitate your franchise research and fulfill statutory compliance reporting obligations.

• Standard Retention: Active inquiry records are retained for up to 24 months from last interaction.

• Legal Compliance Hold: Certain records may be retained longer if required by applicable state franchise law or federal regulatory obligations.

• Erasure Requests: You may request immediate erasure of your profile at any time by mailing our Compliance Department. Requests are processed within 30 business days.

In the unlikely event of a data security incident affecting your personal information, AltFTool maintains a documented incident response plan:

• Rapid Containment: Affected systems are isolated within 24 hours of confirmed breach detection.

• Regulatory Notification: Applicable state data breach notification requirements are followed, including notifications to relevant supervisory authorities.

• User Notification: Affected users are notified promptly with details on what information was compromised and remediation steps.

Depending on your state of residence, you may have additional data privacy rights:

• California (CCPA/CPRA): Right to Know, Delete, Correct, and Opt-Out of 'sale' or 'sharing' of personal information.

• Colorado (CPA): Right to access, correct, delete, and opt-out of targeted advertising.

• Texas (TDPSA): Right to access, correct, delete personal data and opt-out of targeted advertising.

• Virginia (CDPA): Right to access, correct, delete, and obtain a portable copy of personal data.

To submit a state privacy rights request, contact our Compliance Department by mail.