Privacy Policy

1. Two kinds of information, and why the distinction matters

This is the most important thing in this policy, so it comes first.

Information about you, our client. You provide this when you become a client and use your account. Everything below governs it.

Information about businesses. Our reports compile information that third parties have already published about businesses. That information is recorded against the business it concerns, not against the client who requested the report. It exists independently of any client relationship, persists whether or not any client relationship exists, and is not deleted when a client account is deleted. It is public information about a third party rather than information about our client.

Where a business is a sole proprietorship or is operated under an individual's name, information about that business may also constitute information about a person. We collect such information only from public sources and only in relation to the business. Before any information is used in the preparation of a report, we filter out names of officers, registered agents and individual owners, mailing addresses, taxpayer identification numbers and similar identifiers.

2. What we collect about you

• Your name
• Your email address
• Your business name and business address
• The business you have asked your dashboard to follow
• A customer reference issued by our payment processor, which allows us to match a payment to an account
• Sign-in times and activity within your account
• The content of any message you send us

Payment card numbers are collected and held by Stripe, Inc. They do not pass through our systems and we do not store them.

We do not collect government identification numbers, financial account numbers, health information, biometric or genetic information, precise geolocation, information revealing racial or ethnic origin, religious belief, sexual orientation, immigration status, or information about children.

3. How we use it

• To prepare and deliver the reports you have engaged us for
• To operate your account and authenticate you
• To process payment
• To respond when you contact us
• To maintain, secure and improve the Services
• To comply with legal obligations

We do not use your information for advertising, and we do not profile you.

4. We do not sell or share your contact information

We do not sell, rent, trade or otherwise disclose your name, email address, telephone number or business address to marketers, data brokers, advertising networks, list vendors or commercial partners.

This commitment does not expire when your engagement ends.

We do not sell personal data as that term is defined under the Texas Data Privacy and Security Act, and we do not process personal data for targeted advertising or for profiling in furtherance of decisions producing legal or similarly significant effects.

5. Service providers

We share information only with the providers that operate this business on our behalf, each of which is permitted to use it solely for that purpose:

Providers may process information outside the State of Texas.

6. Other disclosures

We disclose information where we believe in good faith that disclosure is required by law, legal process or governmental request; where necessary to investigate a violation of our Terms of Use; or where necessary to protect the rights, property or safety of KYSB, our clients or the public.

If KYSB is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction. This policy will continue to apply to information transferred until you are notified of and become subject to a different policy.

7. Client confidentiality

We do not publish, sell or provide the reports we prepare for you to any other person, except at your instruction or as Section 6 requires.

For as long as your engagement is active, we will not prepare a report on your business at the request of another client. Where we decline such a request, we decline without stating a reason.

These commitments govern our conduct. They do not and cannot make public information private: the material in our reports is published by third parties and remains obtainable by anyone directly from those sources. Our Terms of Use describe these commitments and their limits in full.

8. Report sharing links

We may issue a link that opens a specific report without requiring a sign-in. Such links expire thirty days after issue.

When such a link is opened, we record which report was opened and the date and time. We record nothing else. We do not record IP addresses, device or browser information, referring pages or approximate or precise location, and we do not set cookies for this purpose.

The consequence is deliberate: two different people opening the same link produce indistinguishable records. This tells us that a report was opened and when. It cannot tell us who opened it, from where, or whether the same person opened it more than once.

9. Cookies and tracking

We use only the cookies strictly necessary to keep you signed in and to protect the Site against abuse.

We do not use advertising cookies, analytics cookies or third-party trackers, we do not track you across other websites or services, and we do not participate in cross-context behavioural advertising. Because we do not track across sites, we do not respond differently to Global Privacy Control or Do Not Track signals; there is no such tracking to disable.

10. Retention

Your account and reports. Retained for ninety days after your engagement ends, then deleted.

Information about businesses. Retained as described in Section 1.

Financial and tax records. Retained for the period required by applicable law.

Support correspondence. Retained for up to two years.

11. Your rights

You may ask us to:

• confirm whether we hold personal information about you, and provide a copy;
• correct inaccuracies in that information;
• delete that information;
• provide it in a portable format.

Contact us through knowyoursmallbusiness.com/contact. We will respond within forty-five days and may extend that period once by a further forty-five days where reasonably necessary, in which case we will tell you.

Texas residents. The Texas Data Privacy and Security Act provides the rights above, together with the right to appeal a refusal. If we decline your request, we will tell you why and how to appeal. If an appeal is denied, you may contact the Office of the Texas Attorney General.

Verification. We may need to verify your identity before acting on a request. We will not ask for more information than is necessary to do so.

Deletion, and what it does not reach. If you ask us to delete your personal information, we will delete your account and the reports within it. We cannot delete information about a business from the third-party sources that publish it, and we do not delete our own records of information collected about businesses, for the reason set out in Section 1.

12. If you are not our client

If your business appears in one of our reports and you are not a KYSB client, the information in that report was collected from publicly available sources.

You may contact us to ask what information we hold about your business, to identify an error, or to ask that we not prepare further reports concerning it. We will respond.

Corrections to public records must be made with the body that publishes them, and we cannot make those corrections on your behalf. Where you tell us a record is disputed, we will note the dispute in our own records.

13. Security

We use encrypted connections, hosted infrastructure with its own access controls, and passwordless authentication. Access to production systems is limited to those who require it.

No system is perfectly secure, and we cannot guarantee absolute security. Where a breach affects your personal information, we will notify you and the appropriate authorities as applicable law requires.

14. Children

The Services are intended for businesses and for individuals aged eighteen or over. We do not knowingly collect personal information from children. If we learn that we have, we will delete it.

15. Changes to this policy

We may update this policy. Where we do, we will post the revised policy with a new effective date. Where the changes are material, we will notify clients with an active engagement by email.

16. Contact

High-Key Adventures LLC
d/b/a Know Your Small Business
4610 Summer Lakes Drive
Sugar Land, Texas 77479

Contact form: knowyoursmallbusiness.com/contact