Privacy Policy

This Privacy Policy applies to all individuals who access or use the Business Hero platform, including visitors, registered clients, and attorneys who interact with our Platform, whether via our website, client portal, or mobile interface.

Information You Provide Directly:

• Name, email address, phone number, and business information provided at registration
• Payment and billing information processed securely through Stripe
• Matter details, legal questions, and supporting documents submitted through intake forms
• Communications sent through the Platform's messaging system
• Documents uploaded for review or processing

Information Collected Automatically:

• Log data including IP address, browser type, pages visited, and timestamps
• Device information including operating system and screen resolution
• Session and activity data within the Platform
• Cookies and similar tracking technologies (see Section 7)

Information From Third Parties:

• Payment verification and fraud prevention data from Stripe
• Authentication data if you sign in via a third-party identity provider

We use collected information to:

• Create and maintain your account, process transactions, and provide the Platform services
• Match you with appropriate independent attorneys and facilitate legal service delivery
• Send transactional emails including order confirmations, status updates, and appointment notifications
• Communicate service announcements, policy updates, and billing notices
• Monitor Platform usage, detect fraud, and maintain security
• Comply with applicable laws, regulations, and legal process
• Improve, personalize, and develop new Platform features
• Enforce these Terms of Service and other Platform policies

We do not use your legal matter content for marketing, advertising targeting, or to train AI models without your explicit consent.

We do not sell your personal information. We share data only in the following limited circumstances:

• Independent Attorneys: Matter details, intake information, and uploaded documents are shared with assigned attorneys as necessary to provide legal services.
• Service Providers: We work with trusted vendors (including Stripe for payments, cloud hosting providers, and email delivery services) who process data on our behalf under confidentiality obligations.
• Legal Compliance: We may disclose information when required by law, subpoena, court order, or government request, or to protect the rights and safety of Business Hero, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before such a transfer and your choices will be respected.

We implement industry-standard security controls including:

• Encryption of data in transit using TLS/HTTPS
• Secure cloud infrastructure with access controls and audit logging
• Payment processing handled entirely by Stripe (PCI-DSS compliant) — we do not store raw card numbers
• Role-based access controls limiting which staff can access sensitive matter data

No data transmission over the internet is 100% secure. While we take substantial precautions, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

We retain your personal information for as long as necessary to provide the Platform services and comply with our legal obligations. For detailed retention periods, see our Document Retention Policy.

When you request account deletion, we will delete or anonymize your personal information within 30 days, subject to retention obligations required by law, regulatory compliance, or ongoing legal matters. See our Data Deletion Policy.

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for authentication, session management, and core Platform functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how the Platform is used to improve the experience. You may opt out.
• Preference Cookies: Remember your settings and personalization choices.

You can configure your browser to refuse cookies or alert you when cookies are being set. Note that disabling essential cookies may prevent the Platform from functioning correctly.

Depending on your location, you may have the following rights under applicable privacy law, including the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we hold about you
• Right to Delete: Request deletion of your personal information (subject to legal retention obligations)
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights
• Right to Portability: Request a portable copy of your personal information

To exercise these rights, submit a request to info@mybusiness-hero.com. We will respond within 45 days as required by California law. We may need to verify your identity before processing requests.

The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover we have collected information from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes via email and by updating the "Last Updated" date above. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

For privacy questions, requests, or concerns:

Business Hero, Inc. — Privacy Team
660 S Figueroa St, Suite 2250
Los Angeles, CA 90017
info@mybusiness-hero.com