Privacy Policy

Identification you provide directly: name, email address, phone number, country and state, and the answers you give in the application form, the registration form, and the location submission form.

Identification documents you upload as part of the franchise registration step (government ID, business registration, etc.) and financial documents you upload to demonstrate qualification.

Files that come out of the signing process: the executed FDD, the executed franchise agreement, and wire-transfer receipts you upload for deposits and final fees.

Technical metadata: IP address, browser type, the pages you visit on the portal, and timestamps of significant actions (signing, payment, decision events). We use this to operate the service, prevent fraud, and produce the audit trail we need for franchise law compliance.

To run the application process — to evaluate your application, schedule calls, send notifications, route the workflow internally, and execute the contracts.

To comply with franchise law in the jurisdiction you applied from (the FTC Franchise Rule in the United States, the Ley de la Propiedad Industrial in Mexico, the Lei de Franquia 13.966/2019 in Brazil).

To detect fraud, protect the portal from abuse, and respond to law-enforcement requests when we are legally required to.

We do NOT sell your information. We do NOT use your information to train AI models. We do not share it with third parties for their own marketing.

Your assigned BD coordinator and BD lead in the country you applied from.

Finance reviewers in the country you applied from (limited to fee + deposit + final-payment confirmation).

Operations reviewers in the country you applied from (limited to the on-site location review form).

Legal reviewers in the country you applied from (limited to the registration step).

The country manager and the platform owner. Role-by-role access controls are described in our internal Permission Map and access is automatically logged in our audit trail.

DocuSign — for electronic signatures on the FDD and the franchise agreement.

Neon (PostgreSQL) and Cloudflare R2 — for database hosting and file storage. Data is hosted in the United States.

Our outbound email service (operated by MIXUE Americas) — for the notification emails the system sends you.

Anthropic (Claude) — only on the admin side, to translate free-text answers you wrote into English for our reviewers. The applicant-side flow does not call Anthropic.

These providers process information on our behalf under data processing agreements; they do not use your information for their own purposes.

Access — you can download every piece of data we hold on you at /api/applicant/me/data-export while logged in.

Correction — open a new application or request a fix via the message-support feature.

Deletion — we are required to retain franchise application records for the period mandated by the applicable jurisdiction (typically several years after the relationship ends). If you would like records deleted ahead of that retention window, write to us with your request and we will respond after legal review.

Opt-out of communications — transactional notifications (signing, payment, decision events) are part of running the application; we do not currently send marketing emails.

Application records: for the period required by the franchise-disclosure laws of the jurisdiction you applied from, plus reasonable additional time for audit defence.

Temporary security artifacts (one-time codes, login tokens, magic-link tokens) are pruned daily — typically within 1 to 7 days after they expire.

Email-dispatch records are pruned after 90 days for successful sends. Webhook-delivery records (DocuSign signatures, etc.) are pruned after 30 days.

Privacy questions: write to us using the support form inside the portal.

Updates: when this policy changes materially we will note the date at the top of this page and notify applicants whose accounts are active.