Privacy Policy

This Privacy Policy explains how Blue Ridge Horizon Advisors, LLC, a North Carolina limited liability company doing business as Valuation Vitals ("Valuation Vitals," "we," "us," or "our"), collects, uses, and shares personal information in connection with our website at www.valvitals.com and the Valuation Vitals platform (together, the "Services"). It works together with our Terms and Conditions and, for business customers, our Master Services Agreement and Data Processing Addendum.

1. Two Roles: Controller and Processor

We handle personal information in two different roles, and this matters for who is responsible for it.

(a) As a controller. For the personal information of our website visitors, waitlist subscribers, account holders, and prospects, we decide how and why it is processed. This Policy primarily describes that processing.

(b) As a processor. When a customer (for example, a business owner or an advisory firm) uploads business and financial data to the platform, that customer is the controller of that data and we process it on the customer's behalf to operate the Services. Our handling of that data is governed by our agreement with the customer and our Data Processing Addendum, and the customer is responsible for the accuracy of the data, for keeping it current, for deleting it, and for having the rights and authorizations needed to provide it. If you are an individual whose information was uploaded by a business or advisor, please direct privacy requests to that business or advisor.

2. Information We Collect

Information you provide:

• Account and contact information, such as your name, email address, company or firm name, and role.
• Waitlist and marketing information, such as the email address you submit to join the waitlist or request early access.
• Business profile and uploaded content, such as business profile settings, financial statements (for example, exports from QuickBooks or Xero), and other business documents you choose to upload. This content may include personal information about owners or individuals (for example, owner compensation).
• Communications, such as messages you send us by email or support requests.
• Payment information, if and when paid plans are offered. Payments are handled by a third-party payment processor; we do not store full payment card numbers.

Information we collect automatically:

• Device and usage data, such as IP address, browser type, pages viewed, and actions taken within the Services, collected through cookies and similar technologies and through our infrastructure and security providers.
• Audit and access logs of activity within client workspaces and reports, used for security and support.

Information from third parties: If you reach us through a referral, advisor, or partner, we may receive your contact information from them.

3. How We Use Information

(a) Provide the Services. To create and manage accounts, store and process uploaded data, generate the Strength Score, valuation ranges, multiples, and the Resilience Roadmap, and provide support.

(b) Communicate. To respond to you, send service and account messages, and, where permitted, send waitlist and marketing communications you can opt out of.

(c) Secure and operate. To protect the Services, detect and prevent fraud and abuse, maintain audit logs, and meet legal obligations.

(d) Improve, using aggregated and de-identified data. To analyze, benchmark, and improve the Services using aggregated and de-identified data that does not identify you or any business.

4. What We Do Not Do

(a) No model training. We do not use your data, including uploaded business and financial data, to train, fine-tune, or improve any artificial- intelligence or machine-learning model, and we contractually require our artificial-intelligence provider not to use data submitted through the Services to train its models.

(b) No sale of personal information; no cross-context behavioral advertising. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. How We Share Information

We share personal information only as described here:

(a) Service providers (subprocessors). With vendors that help us operate the Services, under contracts that require them to protect the information and, where applicable, not to use submitted data to train AI models. Our current providers include Supabase (database and document storage), Vercel (application hosting), Cloudflare (content delivery, security, and network protection), Anthropic (artificial-intelligence model API used to generate results, with no training on submitted data), and Resend (transactional and notification email). Payment and analytics providers, if used, are available on request.

(b) Advisors and customers. If you use the Services through an advisor or firm, or as an owner working with an advisor, your information and reports may be shared between you and that advisor or firm as part of the Services, consistent with the access you and they configure.

(c) Legal and safety. When required by law or valid legal process, or to protect our rights, users, or the public.

(d) Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy or a successor policy with comparable protections.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the site, remember preferences, maintain sessions, secure the Services, and, where applicable, measure usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

7. Data Retention

We retain personal information for as long as needed to provide the Services, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements. For business data you control, you can update or delete it within the Services, and you may export it before account termination, after which we may delete it as described in our Data Processing Addendum, subject to routine backups and legal retention requirements.

8. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls and least-privilege permissions, tenant isolation, authentication, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

(a) Marketing. You can unsubscribe from marketing emails using the link in those emails or by contacting us. We may still send you service and account messages.

(b) Access, correction, and deletion. You can access and update much of your information within the Services. Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to appeal a decision about a request. To exercise these rights, contact us using the details below; we will verify your request and respond as required by applicable law. If your information was uploaded by a business or advisor (where we act as a processor), we will direct your request to that controller.

(c) No discrimination. We will not discriminate against you for exercising your privacy rights.

10. Children's Privacy

The Services are intended for business use by adults and are not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. Where We Operate

We are based in the United States and process information in the United States. If you access the Services from outside the United States, you understand that your information will be processed here.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a new "Last updated" date and, where appropriate, provide additional notice. Your continued use of the Services after the changes take effect means you accept the updated Policy. Material changes also require acceptance through the in-app acceptance gate.

13. Contact Us

If you have questions about this Policy or our privacy practices, contact us at privacy@valvitals.com or jon@valvitals.com, Blue Ridge Horizon Advisors, LLC.

Version history

Version 1.0, effective July 10, 2026. This version replaces the earlier public Privacy Policy page.