USA BZ HUB · YOUR INFORMATION
Privacy Policy
Effective September 25, 2026
USA Bz Hub is the legal business operating this website. This policy describes how USA Bz Hub handles information at usabzhub.com, a website for exploring businesses, commercial properties, franchise opportunities, brokers, and business services.
Current service and demonstration features
The marketplace currently contains fictional sample listings, profiles, and messages. Listing management, messaging, subscriptions, and payment screens are demonstration features, not completed live transactions. When account authentication is enabled, information entered into the secure sign-in flow is real account data handled by Supabase and the relevant verification provider. Do not enter confidential business documents into demonstration forms.
Information we collect and why
- Account and verification information: email address, phone number, account identifier, verification status, authentication factors, and session records. These support sign-in, account security, and prevention of unauthorized access.
- Social sign-in information: when you choose an enabled provider, its account identifier, name, email address, profile image if supplied, and authentication information are processed to create or authenticate your account.
- Technical information: hosting and authentication providers process requests, IP addresses, browser/device information, timestamps, errors, and security logs to deliver and protect the service.
- Optional analytics: with your choice to allow analytics, Google Analytics processes usage events, cookie identifiers, browser/device information, and network information to help us understand website use.
Professional profile photos and verification
Brokers, administrators and moderators may upload a public profile photo. Their display name, professional or staff role, photo and USA Bz Hub verification badge may appear on listings and in conversations. Buyers do not need a profile photo. Photos are resized for display. We retain an internal record of administrator verification decisions for account security. You can remove your photo in My Account; previously cached copies may take time to disappear.
Google account data
Google sign-in, when enabled, requests basic identity scopes: OpenID, email, and profile. We use this information for account creation, authentication, and identification within the service. We do not request access to Gmail messages, contacts, calendars, or Google Drive files. Google account information is stored with the account in Supabase; session information is also held in your browser. We do not sell Google account data, use it for personalized advertising or AI model training, or publish your Google profile as a marketplace listing.
Access to account information is limited to service operation, authorized support, security investigations, and legal obligations. USA Bz Hub’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. You can revoke access through your Google Account connections. Revoking Google access does not automatically delete an existing USA Bz Hub account.
Email and phone verification
Supabase manages authentication. Email verification messages are configured through Resend and phone verification through Twilio Verify. These services receive the email address or phone number and delivery information required for the requested verification. You may sign in with an email code, SMS code for an existing account, or an enabled social provider. New accounts must verify a phone number. An authenticator app is not currently required. If you select Remember this browser, authentication tokens are stored in this browser’s persistent storage; otherwise they use tab-scoped session storage. Browser session restoration may retain tab storage. Sign out on shared devices. Verification messages are for account access; requesting one does not subscribe you to marketing. Never share a verification code with another person.
Service providers and disclosures
Netlify hosts the website; Supabase provides account and database infrastructure; Resend and Twilio deliver verification messages; and Google Analytics provides optional usage measurement. Enabled social providers process sign-in under their own policies. Google Fonts requests and embedded OpenStreetMap content may disclose network and browser information to their providers. Listing stock images are served by this website.
We share information needed for these services and may disclose information where required by law or necessary to investigate abuse and protect accounts. Account details are not supplied to brokers or advertisers simply because you browse a listing. Inquiries on active listings are delivered to the listing owner. Messages are available to conversation participants and authorized administrators. Optional email notifications contain a link to the inbox; enabling calls shares your verified phone number with conversation partners.
Browser storage and analytics choices
Authentication uses browser storage to maintain sessions. We also save your analytics preference. Separate development demo builds can save fictional marketplace changes locally. You can clear browser storage through your browser settings; doing so may sign you out and reset preferences but does not delete server-side account records.
The Google tag G-1CP8RJLC5G loads after you allow analytics. Our page-view events omit URL queries and fragments, use a generic page title, and exclude login and dashboard pages. We do not deliberately send email addresses, phone numbers, authentication codes, or account identifiers as analytics event fields. Advertising personalization and Google signals are disabled in our tag configuration. Use the Analytics choices section on this page to change your choice; declining stops future collection through this tag and clears accessible Google Analytics cookies. Previously collected information is subject to the analytics property’s retention settings.
Storage, retention, and security
Account data remains in the authentication system until removed through an account deletion process. Operational logs and backups follow the retention settings of the configured services; deleting an active record may not immediately remove backup copies. Data may be processed in the United States and other locations used by our service providers. We use HTTPS, access controls, and database security policies. No system can guarantee absolute security.
Your choices and deletion requests
You may decline analytics, stop using social sign-in, revoke access in your social provider’s account settings, and request access, correction, or deletion of account information. For support, access, correction, and deletion requests, email usabzhub@gmail.com. Include enough information to identify your account, but do not send passwords, one-time codes, or authenticator secrets. We may need to verify your identity before acting on a request, and certain records may need to be retained for security or legal obligations.
Children and policy changes
The service is intended for adults exploring business opportunities and is not directed to children. We will update this policy as live features and data handling change, and revise the effective date. Material changes affecting account data will be communicated through the service before the new use begins.