Canales Franchise LLC · Training Platform
Privacy Policy
Last updated: April 30, 2026
Canales Franchise LLC ("we", "the company") respects the privacy of employees, salespeople and leadership team members who use this internal training platform. This notice describes what data we collect, how we use it, and what rights you have over it.
1. Information we collect
To operate the platform we collect: (a) account data — name, corporate email, role (salesperson, manager, administrator) and optional phone number; (b) usage data — completed courses, exam scores, accumulated points, session time; (c) technical data — IP address, browser type, login date and time; (d) generated content — answers to evaluations, conversations with the AI language assistant.
2. How we use your information
We use your data exclusively to: (a) authenticate your platform access; (b) record your training progress and award points/certificates; (c) generate reports for your direct manager and leadership; (d) send notifications via email (Resend) and SMS (Twilio) about relevant activity; (e) prevent fraud, abuse and maintain security. We do NOT share your data with third parties for marketing purposes and we do NOT sell personal information.
3. SMS Notifications
The platform sends transactional SMS messages exclusively to three (3) pre-authorized phone numbers belonging to the Canales Franchise LLC leadership team. SMS are triggered automatically when: (1) an employee logs in, (2) an employee completes a training course, (3) an employee reaches a points milestone (every 100 points). Recipients explicitly consented to receive these alerts through internal company agreement. Messages are 100% transactional — they do NOT contain advertising or promotional content. Recipients can opt out by replying STOP to the SMS at any time, or by asking the administrator to remove them from the list at /admin/sms. Estimated frequency: 5-15 messages per recipient per business day.
4. Sharing with third parties
We share minimal, strictly operational information with the following service providers: (a) Resend (transactional email delivery); (b) Twilio (SMS delivery); (c) Anthropic / Google / OpenAI via Emergent LLM (AI text processing, no training on your data); (d) MongoDB (data storage on secure infrastructure). Each operates under its own privacy terms and only receives the data necessary to fulfill its role.
5. Data retention
Account data is kept while your account remains active. Login sessions (cookies and tokens) expire automatically between 7 and 90 days. SMS and email logs are retained for 12 months for audit purposes. Upon account deactivation you may request full deletion of your personal data (except training records the company is required to retain for compliance reasons).
6. Your rights
You have the right to: (a) access your stored data; (b) correct it if outdated or inaccurate; (c) request deletion of your account; (d) opt out of SMS (reply STOP or ask the administrator to remove you). To exercise any right contact: antonio@canalesfranchise.com.
7. Security
We apply reasonable technical measures: bcrypt-hashed passwords, HttpOnly + Secure cookies, mandatory HTTPS, rate-limiting against brute-force attacks, audit logs for sensitive events. Despite these efforts, no online system is 100% impenetrable. In the event of a material breach we will notify affected users without undue delay.
8. Changes to this notice
We may periodically update this privacy notice. The date at the top reflects the latest revision. If changes are significant we will notify you by email or in-platform.
9. Contact
If you have questions about privacy or wish to exercise your rights, write to: Canales Franchise LLC · antonio@canalesfranchise.com