Privacy Policy

1. Introduction

DBE Source ("we," "our," or "us") operates dbesource.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and company name (optional). If you sign up via Google or LinkedIn OAuth, we receive your name and email from those services.

Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card number, bank account, or other financial information on our servers. We retain your Stripe customer ID to manage your subscription.

Usage Data

We collect information about how you interact with the Service, including searches performed, pages visited, companies viewed, and features used. This data helps us improve the Service.

Business Directory Data

Our directory contains publicly available information about certified businesses sourced from government databases (FAA, SBA, state DOTs) and public certification programs. If you claim a business listing, any information you add (description, photos, contact details) is voluntarily provided.

3. How We Use Your Information

• To provide and maintain the Service
• To process your subscription and payments via Stripe
• To personalize your experience (search history, favorites, projects)
• To send transactional emails (account confirmation, billing receipts)
• To improve our search algorithms and AI-powered features
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

4. Third-Party Services

We use the following third-party services:

• Supabase — Database hosting and authentication. Data is stored in the United States.
• Stripe — Payment processing. Subject to Stripe's Privacy Policy.
• Resend — Transactional email delivery.
• Arcjet — Security and rate limiting (processes IP addresses for bot detection).
• Anthropic (Claude) — AI-powered search query parsing. Search queries are processed but not stored by Anthropic.

5. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Business directory data sourced from public government databases is retained independently of user accounts.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, contact us at legal@dbesource.com.

7. Cookies

We use essential cookies for authentication session management (Supabase auth tokens). We do not use advertising or tracking cookies.

8. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure authentication, rate limiting, bot detection, and regular security monitoring. However, no method of electronic transmission or storage is 100% secure.

9. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at legal@dbesource.com.