Privacy Policy

This Privacy Policy explains how DBE Narrative Pro ("we," "us," or "our") handles information when you visit our website, use our document-generation services, or use the Compliance Vault. It applies to all products on dbenarrativepro.com, including the Narrative Template, Narrative Review, Narrative Pro, the AI Narrative Editor, and the Compliance Vault membership.

By using our services, you agree to the collection and use of information as described here. This policy works alongside our Terms of Service.

We collect the following categories of information:

Information you provide directly

• Account information — your email address and password (or your Google account, if you sign in with Google), and an optional display name.
• Questionnaire & narrative content — the business and personal information you enter to generate documents: company name, industry, location, your account of social and economic disadvantage, educational and employment history, and similar narrative details.
• Compliance Vault information — firm details, ownership structure, certification details (UCP, certification number and dates), net-worth statement structure, and documents you upload (e.g., your filed narrative, supporting documents).
• Support communications — messages you send us by email.

Information collected automatically

• Usage & device data — pages visited, actions taken, approximate location, browser and device type, collected through privacy-conscious analytics.
• Cookies and similar technologies — used to keep you signed in and to understand site usage (see Section 8).

We use the information we collect to:

• Generate, review, and edit your DBE narrative and related documents
• Operate your Compliance Vault — store your documents, track your recertification deadline, and send filing reminders
• Create and secure your account and authenticate your sign-ins
• Process payments and deliver the products you purchase
• Send you transactional email (confirmations, password resets, deadline reminders)
• Respond to your support requests
• Maintain security, prevent fraud and abuse, and comply with legal obligations
• Understand and improve how our services are used

Our narrative generation and the AI Narrative Editor use artificial-intelligence technology. To create or refine your documents, the information you enter (such as your narrative answers and the section you are editing) is transmitted to our AI service provider for processing and returned to you.

• Your content is sent only to generate the output you request.
• We instruct our AI to avoid referencing protected characteristics, consistent with the 2025 Interim Final Rule.
• We do not use your private narrative content to train public AI models.

You remain responsible for reviewing and verifying all AI-generated content before submitting it to any certifying agency, as described in our Terms of Service.

We rely on a small set of trusted third-party providers ("subprocessors") to run our service. Each receives only the information needed to perform its function:

• Supabase — authentication, database, and encrypted file storage for your account and documents.
• Lemon Squeezy — our payment processor and merchant of record. They handle your card/billing details; we do not see or store full payment-card numbers.
• Resend — delivery of transactional emails (confirmations, resets, reminders).
• Google — optional "Sign in with Google" authentication, if you choose it.
• Our AI provider — generation and editing of narrative content (see Section 4).
• Analytics & hosting providers — to serve the website and measure aggregate usage.

These providers are bound by their own privacy and security commitments and may process data in the United States or other countries.

Purchases are processed by Lemon Squeezy as our merchant of record. When you pay, you provide your payment details directly to Lemon Squeezy's secure checkout. We receive confirmation of your purchase and limited order details (such as your email, the product purchased, and an order identifier) so we can deliver your documents and unlock your account — but we never receive or store your full card number.

Your documents and account data are stored with our infrastructure provider using encryption at rest and in transit. Files in your Compliance Vault are kept in private storage and served only through short-lived, signed download links. Access to your data is restricted by row-level security so that your records are only accessible to your authenticated account.

• We retain your account and document data for as long as your account is active or as needed to provide the service.
• We may retain certain records (such as purchase records) as required for legal, tax, or fraud-prevention purposes.
• No method of transmission or storage is 100% secure; we cannot guarantee absolute security, and we recommend you keep your own copies of important documents.

We use cookies and similar technologies to keep you signed in, remember your preferences (such as light/dark mode), and understand how our site is used. Essential cookies are required for the service to function. You can control or block cookies through your browser settings, though some features may not work properly if you do.

We do not sell your personal information. We share information only:

• With the service providers listed in Section 5, to operate our service on our behalf
• When you direct us to (for example, generating a document you choose to download and submit)
• To comply with applicable law, legal process, or a valid government request
• To protect the rights, safety, and security of our users, the public, or our service
• In connection with a business transfer (such as a merger or acquisition), subject to this policy

You have control over your information:

• Access & update — view and edit your account details in Account Settings, and your firm and certification details in your Compliance Vault.
• Change your email or password — from the account menu in your dashboard.
• Download your documents — at any time from your vault.
• Delete your data — email us to request deletion of your account and associated data (subject to records we must retain by law).
• Marketing — our emails are primarily transactional; you can opt out of any non-essential email.

Depending on where you live (for example, California and certain other U.S. states), you may have additional rights to access, correct, delete, or restrict the use of your personal information. To exercise any of these rights, contact us at support@dbenarrativepro.com.

Our services are intended for business owners and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us and we will delete it.

We are based in the United States, and our providers may store and process your information in the United States and other countries. By using our services, you understand that your information may be transferred to and processed in countries that may have different data-protection laws than your own.

We may update this Privacy Policy from time to time. Changes take effect when posted to this page with an updated "Last updated" date. If we make material changes, we will take reasonable steps to notify you. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at support@dbenarrativepro.com.