Privacy Policy

This Privacy Policy describes how Four-Leaf Ventures LLC, a Minnesota limited liability company doing business as BizPulse (“BizPulse,” “we,” “us”), collects, uses, and shares information when you use our website and services (the “Service”). It also describes how we handle personal information about individuals identified in the public business-license records we display, including people who are not BizPulse users (“Identified Individuals”). Where this Policy refers to “your” information, it includes information about Identified Individuals unless the context clearly requires otherwise.

Account information: when you sign up, we collect your email address and authentication identifiers via Clerk. If you upgrade to a paid plan, payment information is collected and processed by Stripe; we do not store full payment card details.

Usage information: we collect information about how you interact with the Service — pages visited, search filters used, and features accessed — for product improvement and analytics.

Search inputs: the search filters and queries you submit are processed to return results and may be logged for debugging and product improvement.

Public business records: the Service displays publicly available business license records sourced from the City of Chicago. We do not collect this data from you. See Section 3 for how we handle the personal information within these records.

The Service displays public business-license and permit records published by the City of Chicago. These records include the names and, in some cases, addresses of individuals associated with licensed businesses — for example, applicants and owners of record (the “Identified Individuals”). We obtain this information from the City of Chicago, not from the Identified Individuals themselves. We use it to provide search and analysis features, to generate analytics, and, on the Intelligence tier, to generate AI summaries (Section 6). We make this information available to our subscribers and disclose it to the subprocessors listed in Section 5. If you are an Identified Individual, you may request access to, correction of, or removal of your information — without a BizPulse account — using the contact method in Section 16, and we will respond as described in Section 10.

We use the information we collect to: provide and improve the Service; authenticate accounts; process payments; communicate with you about your account; respond to support requests; comply with legal obligations; and detect and prevent abuse.

We use the following third-party service providers (“subprocessors”) to operate the Service. Each is bound by their own privacy and data-handling commitments.

• Clerk — Authentication, user accounts, billing portal
• Stripe (via Clerk) — Payment processing for paid subscriptions
• Supabase — Database hosting (account records, search history, AI summaries)
• Vercel — Web hosting, serverless functions, analytics
• Resend — Transactional email delivery (privacy-request responses, waitlist and account notifications)
• PostHog — Product analytics (usage events and funnels; session data processed in the US, served first-party). Session recording is disabled.
• Sentry — Error monitoring, performance tracing, and session replay (sampled, with all visible text and inputs masked by default)
• Anthropic — AI summary generation (Intelligence tier)
• Groq — AI summary generation (Intelligence tier)
• Google (Gemini) — AI summary generation (Intelligence tier)

Owner profile summaries available on the Intelligence tier are generated by third-party large language models (Anthropic Claude, Groq-hosted Llama, and Google Gemini). The inputs to these models are public business license records and owner names, not your personal account data. We have configured these providers to minimize data retention; refer to each provider’s privacy commitments for details. AI-generated summaries may be inaccurate; if you are an Identified Individual and believe a summary about you is wrong, you may request correction or removal under Sections 10 and 16.

We share information as follows: with subprocessors (Section 5) as necessary to operate the Service; with our subscribers, who can access the business-license records and derived information the Service provides; with law enforcement or government authorities when required by law; and with a successor entity in the event of a merger, acquisition, or sale of assets. We do not provide your personal account information to third parties for their own advertising. Some privacy laws define a “sale” or “sharing” of personal information broadly; to the extent our provision of access to public-record information is considered a “sale” or “sharing” under applicable law, you may opt out by contacting us using the method in Section 16.

We retain account information while your account is active and for a reasonable period afterward to meet legal, tax, and operational needs. Usage and search-input logs are retained for a limited period for debugging and product improvement. Public business records and AI-generated summaries are refreshed from, or regenerated against, the City of Chicago source data on an ongoing basis. When we remove an Identified Individual’s record at their request, we keep a suppression record so the information is not re-displayed the next time we ingest data from the City. You may request deletion of your account and associated personal data at any time (Section 10).

We use cookies and similar technologies for authentication (Clerk) and for usage and product analytics (PostHog and Vercel Analytics), all processed in the United States. We do not run third-party advertising networks. You can control cookies through your browser settings; some Service features may not function without authentication cookies.

Depending on your jurisdiction, you may have the right to access, correct, or delete the personal information we hold about you; to know what we collect and how we use and share it; to opt out of any “sale” or “sharing” (Section 7); to opt out of profiling, including the AI-generated summaries described in Section 6; and not to be discriminated against for exercising these rights. These rights extend to Identified Individuals as well as account holders.

To exercise any right, contact us using the method in Section 16 — you do not need a BizPulse account. We will acknowledge your request and respond within the time required by applicable law (within 45 days under the California Consumer Privacy Act, with one permitted extension). We may need to verify your identity before acting; for an Identified Individual, this generally means confirming you are the person named in the record, and we will request only the information necessary to do so. You may use an authorized agent to submit a request on your behalf. If we deny your request, you may appeal by contacting us, and we will inform you of the outcome. Requests are free unless excessive or repetitive.

If you are a California resident, you have the rights described in Section 10 under the California Consumer Privacy Act, as amended (the “CCPA”), including the rights to know, delete, correct, and opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising them. To exercise these rights, use the contact method in Section 16. Because we display and provide access to personal information about individuals with whom we may have no direct relationship, additional obligations — including state data-broker registration and participation in California’s Delete Request and Opt-out Platform (DROP) — may apply to us.

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will delete it.

The Service is operated in the United States. If you access the Service from outside the US, you consent to the transfer and processing of your information in the US, which may have different data protection laws than your country.

We maintain reasonable administrative and technical safeguards designed to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security. If a breach of personal information occurs, we will notify affected individuals and regulators as and when required by applicable law, including the Illinois Personal Information Protection Act.

We may update this Privacy Policy. Material changes will be communicated by email or in-app notice at least 14 days before taking effect.

For any privacy request — including access to, correction of, or removal of information about you, whether or not you have an account — submit our data privacy request form or email us at privacy@trybizpulse.com. You do not need a BizPulse account. For other questions about this Policy, you can also reach us via the support contact in your account dashboard.