Privacy Policy

Vantage Enterprises, Inc. ("Vantage," "we," "us," or "our") operates the website at vantageworks.ai and the Vantage operational intelligence platform (collectively, the "Services"). This Privacy Policy explains how we collect, use, share, and protect information in connection with the Services.

By accessing or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

---

1. Who This Policy Covers and Our Role

Vantage provides a business-to-business software platform used by franchise operators, field service companies, their clients, and their independent contractors. Depending on the situation, we handle information in two different capacities:

As a controller. When you visit our website, request a demo, create an account, or otherwise interact with us directly, we determine how and why your information is used. This Privacy Policy governs that activity.

As a processor (service provider). When our business customers use the platform to manage their own operations, they upload and generate information about their clients, contractors, jobs, and accounts. We process that information on our customers' behalf and under their instructions, typically governed by a separate customer agreement or Data Processing Addendum. If you are an end user of a customer's account (for example, a client or subcontractor invited into a customer's workspace), the customer is responsible for how your information is handled, and you should review that organization's privacy practices.

2. Information We Collect

Information you provide to us:

• Account and contact information: name, business name, email address, phone number, job title, and login credentials.
• Business and operational data: territory and franchise details, client and account records, contractor and subcontractor profiles, capability and licensing information, bid requests, job and service records, and other content you enter into the platform.
• Payment information: when you pay for the Services or process payments through the platform, billing details are collected and handled by our payment processor (see Section 7). We do not store full payment card numbers.
• Communications: information you share when you contact us for support, sales, or other inquiries.

Information we collect automatically:

• Usage data: pages viewed, features used, actions taken, and timestamps.
• Device and log data: IP address, browser type, operating system, device identifiers, and referring URLs.
• Cookies and similar technologies: see Section 6.

Information from third parties:

• Information from our business customers who invite you into their workspace.
• Information from service providers that support authentication, payments, analytics, and fraud prevention.

3. How We Use Information

We use information to:

• Provide, operate, maintain, and improve the Services.
• Create and manage accounts and authenticate users.
• Process payments and payouts.
• Generate platform features such as account health scoring, contractor capability matching, and automated bid generation.
• Provide customer support and respond to requests.
• Send service-related communications, and, where permitted, marketing communications (which you can opt out of).
• Monitor, detect, and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our agreements.

4. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your information on the following legal bases: performance of a contract, our legitimate interests (such as operating and securing the Services), your consent (where required, such as for certain marketing or cookies), and compliance with legal obligations.

5. How We Share Information

We do not sell your personal information. We share information only as described below:

• Service providers (subprocessors): we use trusted third parties to host and operate the Services, including infrastructure, database, deployment, payment processing, email, and analytics providers. Our current key subprocessors include Amazon Web Services (cloud infrastructure), Vercel (application hosting), Neon (database hosting), and Stripe (payment processing). These providers are authorized to use your information only to perform services for us.
• Our business customers: if you are an end user within a customer's workspace, your information is accessible to that customer.
• Legal and safety: we may disclose information to comply with law, respond to legal process, protect our rights and the safety of others, and prevent fraud or abuse.
• Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.
• With your direction or consent: when you ask us to share information or otherwise consent.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you logged in, remember preferences, understand usage, and improve the Services. You can control cookies through your browser settings. Some features may not function properly if you disable certain cookies. Where required by law, we obtain consent before setting non-essential cookies.

7. Payments

Payments and payouts processed through the Services are handled by Stripe, including via Stripe Connect for transactions between our customers and their contractors or clients. Your use of payment features is subject to Stripe's terms and privacy policy. We receive limited transaction information (such as confirmation, amounts, and status) but do not store full payment card numbers on our systems.

8. Data Retention

We retain information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. For information we process on behalf of a business customer, retention is governed by that customer's instructions and our agreement with them. When information is no longer needed, we delete or anonymize it.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect information, including encryption in transit, access controls, and tenant isolation within the platform. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International Data Transfers

We are based in the United States and process information there. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States and other countries that may have different data protection laws than your own. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for international transfers.

11. Your Privacy Rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at admin@vantageworks.ai. We will respond as required by applicable law. We will not discriminate against you for exercising your rights.

If you are an end user within a business customer's workspace, please direct your request to that organization. We will assist our customers in responding as needed.

12. U.S. State Privacy Rights (Including California)

Residents of California and other U.S. states with comprehensive privacy laws may have additional rights, including the right to know what personal information we collect, the right to delete or correct it, the right to opt out of "sale" or "sharing" of personal information and certain targeted advertising, and the right to limit use of sensitive personal information.

We do not sell personal information and do not share it for cross-context behavioral advertising. To exercise your rights, contact us at admin@vantageworks.ai. You may use an authorized agent to submit a request on your behalf, subject to verification.

13. Children's Privacy

The Services are intended for business use and are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

14. Third-Party Links and Services

The Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: