Privacy Policy

1. Information we collect

Account information: email address, name, and password (stored securely via AWS Cognito — we do not store passwords on our servers). Payment information: billing details are collected and processed by Stripe — we do not store credit card numbers. Usage data: API requests (endpoint, timestamp, response time) for billing and analytics. Analytics: anonymized page view and event data collected via Google Analytics 4. Technical data: IP address, browser type, and device information collected through server logs.

2. How we use your information

We use your information to: provide and operate the Service (API access, billing, account management); process payments and maintain your prepaid balance; send transactional emails (verification, welcome, password reset); enforce rate limits and prevent abuse; improve the Service based on aggregated usage patterns; comply with legal obligations. We do not use your information for advertising or sell it to third parties.

3. API data

The data returned by the API (corporation records, officer names, addresses, filing events) is public record sourced from the Florida Division of Corporations. This data is not personal information belonging to our users — it is publicly available government data that we structure and serve via API.

4. Payment information

Payment processing is handled by Stripe, Inc. We do not store credit card numbers or bank account details on our servers. We retain your Stripe customer ID and balance to manage your account. When you add funds, your payment method is saved by Stripe for auto-recharge purposes. Stripe's privacy policy governs payment data — see stripe.com/privacy.

5. Data storage and security

All data is stored in United States data centers (AWS us-east-1). Database records are encrypted at rest. All data in transit is encrypted using TLS/HTTPS. Authentication is handled by AWS Cognito with industry-standard password hashing. API keys are stored as hashed values. Access to production systems is restricted to authorized personnel only.

6. Data sharing

We do not sell, rent, or trade your personal information. We share data only with the following service providers, solely to operate the Service:

• AWS — infrastructure, authentication (Cognito), email delivery (SES)
• Stripe — payment processing
• Cloudflare — bot protection (Turnstile)
• Google Analytics — anonymized usage analytics (no personal data shared)

We may disclose information if required by law, court order, or to protect the rights and safety of our users or the public.

7. Data retention

Active accounts: data is retained for the duration of your account. Usage records: API request logs are retained for 90 days for billing reconciliation, then aggregated. After termination: account data is permanently deleted within 30 days. Backups: database backups are retained for 7 days and then automatically deleted.

8. Your rights

You have the right to: access the personal information we hold about you; correct inaccurate information via your dashboard; request deletion of your account and associated data; request an export of your usage data. To exercise these rights, contact us. We will respond within 30 days.

9. Cookies and analytics

We use Google Analytics 4 (GA4) to understand how the Service is used. GA4 collects anonymized page view and event data — no advertising cookies or cross-site tracking is used. We use essential cookies only for authentication session management. You can opt out of analytics using browser privacy settings or the Google Analytics Opt-out Browser Add-on.

10. Children's privacy

SunbizData is not intended for use by individuals under 18. We do not knowingly collect personal information from children. If we become aware that a child has provided personal information, we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact

Questions about this privacy policy? Contact us.