Privacy Policy

Information you provide directly:

• Business name, category, description, address, phone, email, and website
• Business owner name, date of birth, and ownership percentage
• Account email address and password (stored as a secure hash)
• Photos, videos, and promotional content you upload for your listing
• Customer reviews and ratings you submit
• Contact form messages and support requests

Information collected automatically:

• IP address, browser type, and operating system
• Pages visited, time spent, and referring URLs
• Device identifiers and general geographic location (city/region level)
• Cookies and similar tracking technologies (see Cookies section)

To verify Black ownership, we collect the following documents during the listing application process:

• Government-issued photo ID (driver's license, passport, state ID, military ID, or tribal ID)
• Business ownership documentation (business license, articles of incorporation, LLC operating agreement, DBA certificate, EIN letter, or equivalent)
• Identity selfie — a photo of you holding your ID next to your face

How verification documents are handled:

• All documents are encrypted using AES-256 encryption at rest and TLS 1.3 in transit
• Access is restricted to authorized verification staff only — no third parties, no automated systems
• Documents are reviewed solely to confirm identity and Black ownership status
• Documents are permanently deleted from our systems within 90 days of verification completion
• We do not use documents for any purpose other than verification
• We do not share, sell, or transfer verification documents under any circumstances

We use the information we collect to:

• Create and display your business listing in the directory
• Verify Black ownership status and maintain directory integrity
• Process subscription payments and manage your account
• Send transactional emails (application status, approval, account updates)
• Respond to your support requests and inquiries
• Improve our platform, features, and user experience
• Detect and prevent fraud, abuse, and policy violations
• Comply with legal obligations

We do not use your information to:

• Sell or rent your personal data to third parties
• Send unsolicited marketing emails without your consent
• Build advertising profiles or sell data to advertisers
• Share your verification documents with any external party

We do not sell, trade, or rent your personal information. We may share limited information only in these circumstances:

• Service providers: Payment processors (Stripe), email delivery services, and cloud hosting providers — only the minimum data necessary for the service
• Legal compliance: When required by law, court order, or to protect the rights and safety of our users and community
• Business transfer: In the event of a merger or acquisition, with notice to affected users
• With your consent: For any other purpose, only with your explicit permission

Public listing information (business name, category, location, photos, tagline, reviews) is visible to all directory visitors by design. Contact information visibility depends on your plan level.

We implement industry-standard security measures to protect your information:

• TLS 1.3 encryption for all data transmitted between your browser and our servers
• AES-256 encryption for sensitive data and documents stored at rest
• Passwords stored as bcrypt hashes — we never store plaintext passwords
• Role-based access controls limiting staff access to only what is necessary
• Regular security audits and vulnerability assessments
• Secure, redundant cloud infrastructure with automated backups

While we take every reasonable precaution, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated personal data
• Portability: Request your data in a portable, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction: Request that we limit how we process your information

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. Verification documents are automatically deleted within 90 days of verification — you may request earlier deletion at any time.

California residents have additional rights under the CCPA, including the right to know what personal information is collected and the right to non-discrimination for exercising privacy rights.

We use cookies and similar technologies to:

• Keep you logged in to your account (essential cookies)
• Remember your preferences and settings
• Analyze how visitors use the directory (analytics)
• Measure the effectiveness of our features

We do not use third-party advertising cookies or sell cookie data. You can control cookies through your browser settings. Disabling essential cookies may affect your ability to log in and manage your listing.

The Black Business Directory is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the "Last updated" date at the top of this page. Your continued use of the directory after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

For general support or listing questions, visit our About page or use the contact form.