Privacy Policy

PracticeHound — a product of SMB Spark, LLC

Effective date: June 19, 2026

This Privacy Policy explains how SMB Spark, LLC ("SMB Spark," "we," "us," or "our") collects, uses, shares, retains, and deletes information when you use PracticeHound (the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

Information you provide:

• Email address — used to send you a passwordless sign-in link and to identify your account.
• Deal data you enter — the figures and details you input to screen a practice (such as asking price, revenue, cash flow, payer-mix percentages, lease terms, and your buyer assumptions).
• Documents you upload — confidential information memoranda ("CIMs") and similar deal documents, which contain the seller's business and financial information.

Information collected automatically:

• Payment information — collected and processed by Stripe when you purchase access. We do not receive or store your full card number. We retain a payment record (such as a Stripe identifier, the amount, and the payment date) for bookkeeping and tax purposes.
• Usage data — a record of actions within the Service (for example, that a screen was run) so we can operate and improve the tool.
• Session data — a sign-in token stored in your browser so you stay logged in. See our Cookies notice.

Note: The Service is for screening business and financial information about a practice. Do not upload protected health information (PHI) or patient records. The Service is not designed or authorized to process PHI.

2. How we use information

We use your information to:

• authenticate you and provide access to the Service;
• run the screening analysis you request, which involves computing financial metrics from your inputs and generating qualitative analysis and diligence questions;
• process your payment and maintain billing and tax records;
• operate, secure, maintain, and improve the Service; and
• communicate with you about your account or support requests.

We do not sell your personal information or Your Content, and we do not use it for advertising.

3. How we share information — third-party providers

We share information with a small set of service providers strictly to operate the Service. They process data on our behalf:

• Stripe — payment processing. Stripe handles your card details under its own privacy policy.
• Supabase — hosting, authentication, database, and file storage. Your account, deal data, and uploaded documents are stored in our Supabase project.
• Anthropic (Claude) — AI analysis. When you run a screen or upload a CIM, the relevant deal data and document content are transmitted to Anthropic's API to generate the screening analysis. We use Anthropic's API under its Commercial Terms. Under those terms, your inputs and outputs are not used to train Anthropic's models, and Anthropic retains API data only for a limited period to operate the service and monitor for misuse, per its data-retention policy. See Anthropic's terms and data-retention documentation for details: https://www.anthropic.com/legal/commercial-terms and https://platform.claude.com/docs/en/manage-claude/api-and-data-retention
• Resend — email delivery, used to send your sign-in links.

We may also disclose information if required by law, to enforce our Terms, or to protect our rights, safety, or property.

4. Data retention and deletion

• Deal data and uploaded CIMs are permanently deleted approximately thirty (30) days after your access term expires, through an automated process. This includes your screening records, uploaded documents (removed from storage), diligence entries, usage records, and saved assumptions.
• Payment records are retained separately for bookkeeping, tax, and legal-compliance purposes after deletion of your deal data.
• You are responsible for keeping your own copies of anything you want before deletion.
• The third-party providers above retain data only as described in their own policies (for example, Anthropic's limited API retention noted in Section 3).

Residual copies of deleted data may persist in our encrypted database backups for a limited period (up to 30 days) before those backups are automatically overwritten. Backups are used only for disaster recovery and are never used to restore individual accounts or deleted content; if we ever restore from a backup, we will promptly re-apply any deletions that occurred after that backup was taken.

5. Data security

We use reasonable technical and organizational measures to protect information, including server-side handling of credentials and API keys, access controls, row-level data isolation between accounts, and private storage for uploaded files. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your choices and rights

You may request access to, correction of, or deletion of your personal information by emailing support@practicehound.com. Note that deal data and CIMs are in any case deleted automatically about 30 days after your access term ends.

Do Not Track. We do not track you or your use of the Service across third-party websites or services, and we do not serve targeted advertising. Because we do not track users across other sites, we do not respond differently to browser "Do Not Track" (DNT) signals.

California residents. If you are a California resident:

• We do not share your personal information with third parties for those third parties' own direct marketing purposes (California "Shine the Light" law, Civil Code § 1798.83).
• You may have rights under California privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) — such as the right to know what personal information we hold about you, to request its deletion, and not to be discriminated against for exercising your rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

To exercise any right, contact us at support@practicehound.com.

7. Children's privacy

The Service is intended for business users aged 18 and over and is not directed to children. We do not knowingly collect information from anyone under 18.

8. Changes to this Policy

We may update this Policy from time to time. The "Effective date" above reflects the current version; material changes will be posted here.

9. Contact

Questions or requests about this Policy or your data:
support@practicehound.com
SMB Spark, LLC — 221 N 3rd St #189, Burbank, CA 91502

PracticeHound — a product of SMB Spark, LLC.