Privacy Policy

Overview

Sunbiz Daily is operated by Easy Call Tech, LLC ("we", "us"). This policy explains what information we collect when you use sunbizdaily.com and its API, how we use it, who we share it with and how, how we protect it, how long we keep it, and the choices you have.

Sunbiz Daily is operated in the United States, and the information we collect is processed and stored in the United States.

Information We Collect

Account information. When you create an account we collect:

• Your first and last name and email address
• Your password, stored only as a secure hash (or no password, if you sign in with an emailed link)
• How you signed up, and, if you choose to tell us, your company name and how you heard about us

Settings and preferences. Your timezone, alert schedule, and which emails you have chosen to receive.

Content you create.

• Saved searches and alerts, including the search text and filters
• Export history (the search behind each export and when it ran)
• API key details: a name, the first characters of the key, and when it was created, last used and revoked. The full key is never stored.
• Leads workspace content: lead lists, pipeline stages, follow-up dates, outreach records, and notes you write, which may include the names of business officers and your notes about them

Billing and usage.

• A ledger of credits purchased, granted, used, refunded and expired, and your auto top-up settings
• Stripe customer, payment method, payment and subscription identifiers. We never store card numbers, security codes, or bank account numbers.
• A record of each export or API response that delivered records to you: the request (address and search parameters), when it ran, and how many records it returned. We record this for every account, including accounts that are not currently charged, to apply free credits and the 30-day repeat window and to bill accurately.

Support requests. Your name, email address, message, the page you wrote from, and your browser type.

Consent records. When you accept our Terms of Use and this Privacy Policy we record the version you accepted, when, how (for example, the sign-up checkbox), your IP address and your browser type, as evidence of your agreement.

API request logs. For each API call: your account and key, the IP address it came from, the endpoint and query parameters, the response status, and how long it took.

AI search request logs. The text of natural-language searches sent to Anthropic and the interpreted result, with no account or IP address attached.

Analytics. Page views and when you leave a page, collected with PostHog. When you are signed in, these are linked to your account ID, email address, account tier, beta status and account creation date. PostHog discards IP addresses and does not look up your location. Staff accounts are excluded.

Server logs. Each request to our servers logs the IP address, method, page address (without search parameters), response status and response time. Email addresses that appear in log lines are masked.

How We Use Information

• To provide the service: sign you in, save your searches and workspace, run exports, deliver API responses, and send the alerts you set up.
• To bill for usage: meter records delivered, apply free credits and the repeat window, process purchases, auto top-ups, subscriptions and refunds.
• To communicate with you: account and security emails (email confirmation, sign-in links, password changes), export-ready and API key notices, billing notices (payment failures, subscription changes, credit expiry), notices of changes to our Terms or this policy, service outage notices, the saved-search and lead alerts you turn on, and product release announcements, tips and other marketing emails if you opt in, which may be sent through our marketing email provider. We do not send marketing email unless you opt in.
• To keep the service secure and reliable: rate limiting, bot protection, preventing abuse and fraud, and diagnosing errors.
• To understand and improve the service: analytics on how pages are used, and aggregated reports (such as sign-up counts and search volume) reviewed without identifying individuals.
• To run our business: our team receives internal notifications of new sign-ups (name, email and how you heard about us) and support requests, and we keep records needed for accounting, tax, and legal obligations.
• To test changes: before releasing changes we may test them on a temporary, private copy of our systems that includes production data. It runs with the same protections, and it does not send email to users.

How We Share Information

We do not sell your personal information, share it for advertising, or let advertising networks track you on our site. We share information with the service providers below, who help us operate Sunbiz Daily. Each receives only what it needs for the purpose described, and each entry lists what they receive and how.

• Stripe (payments). Receives: your name, email address and account ID when you first pay, plus the card or US bank account details you enter. How: you enter payment details on Stripe-hosted pages, so they go directly to Stripe and never reach our servers. We create purchases, saved payment methods, auto top-up charges, subscriptions and refunds through Stripe's API, and Stripe sends us signed notifications of payment events. Stripe emails your receipts. See Stripe's Privacy Policy.
• Cloudflare (network security, delivery and backups). Receives: every request to sunbizdaily.com, including your IP address and browser details, because all traffic to our site passes through Cloudflare. It also receives the results of bot checks (Cloudflare Turnstile), which we verify by sending Cloudflare the check token and your IP address. It stores our off-site backups, and it delivers email if our primary email provider is unavailable. How: network traffic, a Turnstile script in your browser, and server-to-server API calls. See Cloudflare's Privacy Policy.
• Zoho (email delivery). Receives: the recipient address, subject and content of every email we send you. Account, billing, alert and policy emails are delivered by Zoho ZeptoMail, which reports bounces back to us. If you opt in to marketing emails, such as product release announcements and tips, we may send them through Zoho's marketing email service (Zoho Campaigns), which receives your name and email address, adds its own unsubscribe link, and can record whether you open an email and which links you click. How: server-to-server API calls. See Zoho's Privacy Policy.
• PostHog (product analytics). Receives: page views and page leaves, and when you are signed in, your account ID, email address, account tier, beta status and account creation date. PostHog discards IP addresses. How: a PostHog script in your browser. See PostHog's Privacy Policy.
• Anthropic (AI features and AI tools our team uses). In the product: the text of searches you type into the natural-language search box, and business names from public Florida filings, are sent to Anthropic's API to interpret searches and assign industry labels. These requests don't include your name, email address, IP address or account ID. Our team's tools: our team uses Anthropic's Claude to help run Sunbiz Daily, including reviewing logs, investigating errors, and analyzing usage and billing. When we review server logs, Claude may see individual log entries, including IP addresses, pages requested and response details; email addresses in logs are masked. Elsewhere we use account IDs instead of names or email addresses where we can. When we need to look at a specific account, for example to answer a support request or a billing question, investigate suspected abuse, or plan pricing, information such as your name, email address and usage records may be shown to Claude. We use Claude with model training turned off, so Anthropic doesn't use this information to train its models, and Anthropic keeps it for a limited time under its own privacy policy. How: API calls from our servers, and AI tools used by our team. See Anthropic's Privacy Policy.
• Akamai (Linode) (hosting). Receives: all data described in this policy, which is stored on servers we rent from them. How: they host our servers and databases. See Akamai's Privacy Statement.
• unpkg.com and OpenStreetMap (page libraries and maps). Receives: your IP address and browser details, as with any website your browser contacts. How: your browser loads JavaScript libraries from unpkg.com and map images from OpenStreetMap's tile servers. See the OpenStreetMap Foundation's Privacy Policy.
• U.S. Census Bureau Geocoder (map locations). Receives: business addresses from public filings only, to place them on the map. No information about you is sent. How: server-to-server API calls.

We may also disclose information:

• when required by law, subpoena, or other legal process;
• to protect the rights, property or safety of Sunbiz Daily, our users, or others, including to investigate fraud or abuse;
• as part of a merger, acquisition, financing, or sale of all or part of our business, in which case this policy continues to apply to your information;
• with your consent.

Cookies and Browser Storage

We use a small number of cookies and browser storage entries. None are used for advertising.

• Session cookie (sessionid): keeps you signed in, for up to 14 days.
• CSRF token (csrftoken): a security cookie that protects forms from cross-site request forgery.
• Messages cookie (messages): briefly holds one-time notices, such as "Your search was saved".
• Cloudflare (cf_clearance): records that your browser passed a bot check, so you are not asked again.
• PostHog: a cookie and a browser storage entry holding a random identifier, so page views in one visit are counted together, and linked to your account when you are signed in.
• Site preferences in browser storage: which table columns you have chosen (filingTable_columns), notices you have dismissed (ss-change-note-<id> and terms-banner-<id>), and a short-lived marker used during the bot check (sbdPreclearReloaded).

You can block or delete cookies and browser storage in your browser settings. Signing in requires the session and CSRF cookies.

Do Not Track: Sunbiz Daily does not respond to browser Do Not Track signals, because there is no common standard for them. We do not track you across other websites, and we do not allow third parties to collect information about your activity on our site for advertising.

How We Protect Information

• Encrypted connections: the entire site and API are served only over HTTPS, and browsers are instructed never to connect without it (HSTS). Our servers accept traffic only through Cloudflare.
• Passwords and keys: passwords are stored as salted one-way hashes, never in readable form. Emailed sign-in links expire after 15 minutes. API keys are stored as one-way hashes and shown to you only once.
• Payment details: card and bank details are entered on Stripe-hosted pages and never reach our servers. Payment notifications from Stripe are verified by cryptographic signature before we act on them.
• Application protections: cookies are sent only over encrypted connections, forms are protected against cross-site request forgery, and requests are rate-limited. Sign-in, sign-up, password reset, email preference and support forms are protected by Cloudflare Turnstile bot checks.
• Restricted access: there is no web-based administration panel. Administrative actions are performed only by authorized personnel with server access, and credentials such as API keys and database passwords are kept out of our source code.
• Staff access: our team accesses account data only to provide support, handle billing, prevent abuse, fix problems, or meet legal obligations.
• Exports: export download links are long random values that expire after 24 hours, and the files are deleted at that point.
• Backups: backups are stored off-site with restricted access.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by law.

How Long We Keep Information

• Account information, settings, saved searches, alerts, API key details, export history and leads workspace content: while your account is open, or until you ask us to delete them.
• Export files: 24 hours.
• API request logs, server logs and AI search request logs: up to 24 months, including copies our team keeps for log review. We may keep specific logs longer when needed to investigate a security incident, abuse or a billing dispute, or to meet a legal obligation.
• Records of deliveries (the request behind each export or API response): 24 months.
• Credit ledger and payment records: 7 years, for accounting and tax purposes.
• Interpreted AI searches: cached indefinitely so repeat searches don't need to be sent to Anthropic again. The cache is not linked to any account.
• Analytics: up to 7 years in PostHog.
• Support requests: for as long as needed to handle your request and keep a record of it, or until you ask us to delete them.
• Consent records: for as long as needed to show what you agreed to, including after an account is closed.
• Email bounce and unsubscribe records: kept so we don't email addresses that bounced or asked not to be contacted.
• Backups: backups of our database are kept for up to about 12 months, so deleted information can remain in backups until they expire.

Your Choices and Requests

• Email: you can turn off alert emails, announcements and other marketing emails from your email preferences page or with the unsubscribe link in those emails. Account, security, billing and policy emails are sent while your account is open.
• Subscriptions: you can cancel an Unlimited subscription at any time from your profile page or the Stripe customer portal.
• Browser controls: you can block or clear cookies and browser storage, as described above.

Access, correction and deletion. To request a copy of the personal information we hold about you, a correction, or deletion of your account, email [email protected] from the email address on your account, so we can confirm the request is yours. We respond within 30 days.

When we delete an account, we delete your profile, settings, saved searches and alerts, API keys, export history, leads workspace content, support requests and your analytics profile in PostHog, and cancel any subscription. Unused purchased credit can be refunded as described in our Terms of Use. We keep what we are required or permitted to keep: payment and credit records for 7 years, consent records, and your email address on our do-not-email list so we don't contact you again. Deleted information can remain in backups for up to about 12 months, and Stripe keeps its own payment records under its privacy policy.

Public Business Records

The business information on Sunbiz Daily (corporation, fictitious name and partnership filings, including business names, addresses, and the names of officers, registered agents and other listed people) comes from public records published by the Florida Division of Corporations. We display it on the site and provide it through exports and the API, and we place business addresses on a map.

If your personal information appears in a filing, such as a home address, you can ask us to hide it by emailing [email protected] or contacting us through our support page. We hide those details on Sunbiz Daily, in exports, and in the API from then on, though not in copies customers downloaded before your request. This does not change the official state record; to change that, contact the Florida Division of Corporations.

AI Features

• Search interpretation: when you use natural-language search, the text you type is sent to Anthropic's Claude API to turn it into search filters. It is not sent with your name, email address, IP address or account ID. If you save a search, the search text is stored with your account.
• Industry classification: business names from public filings are sent to Anthropic's Claude API to help assign industry labels, such as "Restaurant" or "Plumber". Labels may be inaccurate.

Children

Sunbiz Daily is a business research service and is for adults: accounts are limited to people 18 and older, and the Service is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact [email protected] and we will delete it.

Changes to This Policy

When we change this policy, we publish a new version with the date it takes effect. For material changes, we tell you on the site when or before they take effect, may also email you, and ask you to accept the updated policy to continue using your account. Past versions are kept.

Contact

Sunbiz Daily is operated by Easy Call Tech, LLC. For privacy questions or requests, email [email protected]. For anything else, contact us through our support page.