Privacy Policy

Overview

Valuation Vitals ("we," "us," or "our") is a Business Strength Portal operated by Blue Ridge Horizon Advisors, LLC. We take your privacy seriously — particularly because our platform is designed to handle sensitive financial information. This policy explains what data we collect, why we collect it, how we protect it, and your rights regarding it.

By using valvitals.com or joining our waitlist, you agree to the practices described in this policy.

1. Information We Collect

Information you provide directly

• Email address. When you join our waitlist or create an account, we collect your email address to communicate with you about the product and your account.
• Financial documents. When you use the Business Strength Assessment feature, you may upload financial exports, contracts, and operational data. This is used solely to generate your Business Strength Report and is not shared with third parties.
• Payment information. When you subscribe, payment is processed by Stripe. We never see or store your raw credit card details. Stripe is Payment Card Industry Data Security Standard (PCI DSS) compliant.

Information collected automatically

• Usage data. We collect anonymized data about how you interact with the platform to improve the product. This does not identify you personally.
• Device and browser information. Standard technical information including browser type, operating system, and IP address, collected for security and performance purposes.

2. How We Use Your Information

• To provide and improve the Valuation Vitals platform
• To generate your Business Strength Score and Resilience Roadmap
• To communicate with you about your account and product updates
• To process subscription payments
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your personal data. We do not use your data for advertising. We do not share your financial documents with any third party.

3. AI and Your Financial Data

Valuation Vitals uses the Anthropic Claude Application Programming Interface (API) to analyze uploaded financial documents and generate your Business Strength Report. Documents sent for analysis are not stored by Anthropic or used to train AI models.

Your uploaded financial documents are stored securely in Supabase Storage, encrypted at rest and in transit. Access is restricted to your account only through row-level security controls.

4. Data Retention

• Waitlist emails. Retained until you request removal or unsubscribe.
• Account data. Retained for the duration of your subscription plus 90 days after cancellation, then permanently deleted.
• Uploaded financial documents. Retained for the duration of your active subscription. You may delete documents at any time. Upon account deletion, all documents are permanently removed within 30 days.
• Usage analytics. Retained in anonymized, aggregated form indefinitely for product improvement purposes.

5. Data Sharing

We share your data only with the following service providers, and only to the extent necessary to operate the platform:

• Supabase — database, authentication, and file storage
• Anthropic — AI-powered document analysis (not stored or used for training)
• Stripe — payment processing
• Vercel — hosting and content delivery
• Resend — transactional email delivery

We do not sell, rent, or trade your personal information to any third party for marketing purposes. We may disclose your information if required by law or to protect the rights and safety of Valuation Vitals or its users.

6. Security

We take reasonable technical and organizational measures to protect your data, including:

• All data encrypted in transit via Transport Layer Security (TLS)
• All data encrypted at rest in Supabase
• Row-level security ensuring each user can only access their own data
• Cloudflare Web Application Firewall (WAF) and Distributed Denial of Service (DDoS) protection
• API keys stored encrypted in environment variables, never in code

No method of transmission over the internet is 100% secure. While we implement industry-standard protections, we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time
• Export your data in a portable format

To exercise any of these rights, email us at jon@valvitals.com. We will respond within 30 days.

8. Cookies

Valuation Vitals uses minimal cookies necessary to operate the platform, including session authentication cookies. We do not use third-party advertising cookies or tracking pixels.

9. Children's Privacy

Valuation Vitals is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at jon@valvitals.com and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, contact us at: