Privacy Policy

Big Shot Data is a product of 3TAI LLC (“we,” “us,” or “our”), located at 5900 Balcones Drive, Austin, TX 78731. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit https://bigshotdata.com (the “Site”) and use our competitive intelligence report services (the “Services”).

By using our Site or Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Site or Services.

2.1 Information You Provide

• Free Snapshot: First name (optional), last name (optional), email address, and company website URL.
• Report Builder: Business name, location, type, revenue range, years in business, top competitors, primary challenge, ideal customer description, differentiator, and specific questions.
• Account Creation: Email address and password when you create a dashboard account.
• Communications: Any information you provide when contacting us via email.

2.2 Information Collected from Your Website

When you submit your company URL, our automated crawler visits your publicly accessible website to extract business information including: hours of operation, pricing, menu or product listings, events, location data, and general page content. We only crawl the website URL you provide and limit crawling to five pages per submission.

2.3 Information from Third-Party Sources

To generate your competitive intelligence report, we aggregate publicly available data from third-party sources including:

• U.S. Census Bureau (demographic and economic data)
• Bureau of Labor Statistics (employment and wage data)
• Alcohol and Tobacco Tax and Trade Bureau (TTB) data
• OpenBreweryDB (brewery locations and information)
• Web research services (Tavily, Perplexity) for market and competitor analysis using publicly available information

2.4 Information Collected Automatically

• Cookies & Session Data: We use essential cookies to maintain your authenticated session. We do not use third-party advertising or tracking cookies.
• Email Engagement: We track whether emails we send are opened and whether links are clicked.
• Referral Data: UTM parameters, referring URL, and campaign identifiers when you arrive at our Site.

2.5 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not collect, store, or have access to your credit card number, bank account number, or other financial account information. Stripe provides us with a transaction identifier and confirmation of payment. Stripe’s collection and use of your information is governed by Stripe’s Privacy Policy.

We use the information we collect to:

• Generate your free competitive snapshot and paid intelligence reports using AI-powered analysis
• Process payments through Stripe
• Deliver your reports via email and through your dashboard account
• Send transactional emails (snapshot delivery, report ready notifications)
• Send marketing emails with business insights and offers (you may opt out at any time)
• Improve our Services and develop new features
• Respond to your inquiries and provide support
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations and enforce our Terms of Service

We process personal data only where we have a lawful basis to do so. The following legal bases apply to our processing activities:

• Performance of a contract: We process your data to deliver the competitive intelligence report you purchased and to provide the free snapshot you requested.
• Legitimate interests (B2B marketing): We send follow-up emails and competitive insights to business owners who have requested a free snapshot, as we have a legitimate interest in marketing our services to businesses that have already engaged with us. We balance this against your interests — you may opt out at any time.
• Consent (optional communications): Where we rely on your consent for marketing communications, you may withdraw that consent at any time by clicking “Unsubscribe” in any email.
• Legal obligation: We retain payment records for 7 years to comply with applicable tax and accounting laws.

Data Processing Agreement (DPA): If you are a business subject to GDPR or similar data protection legislation and require a Data Processing Agreement, please contact us at reports@bigshotdata.com with the subject line “DPA Request.” A DPA is available upon request.

Our reports are generated using artificial intelligence models. The data you provide (including your business information and questionnaire responses) is sent to third-party AI service providers for processing. These providers include OpenRouter (which routes requests to models such as Claude by Anthropic and Kimi by Moonshot AI). These providers process your data solely to generate your report and are contractually prohibited from using your data for their own purposes, including model training.

We do not sell your personal information. We share your information only with the following categories of service providers, solely to operate the Services:

We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We use the following categories of cookies:

• Essential / Authentication Cookies: Required to maintain your logged-in session. These cannot be disabled.
• Email Tracking Pixels: Small transparent images embedded in emails to track opens and clicks. You can disable image loading in your email client to prevent this.

We do not use third-party advertising cookies, social media tracking pixels, or cross-site tracking technologies.

• Free snapshot data: Retained for 24 months after creation, then automatically deleted.
• Paid reports and account data: Retained for the life of your account plus 90 days after account deletion.
• Payment records: Retained for 7 years to comply with tax and accounting obligations.
• Email engagement data: Retained for 12 months.

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS/HTTPS on all pages)
• Encryption at rest for stored data
• Row-level security ensuring users can only access their own data
• Server-side request forgery (SSRF) protection on our web crawler
• Webhook signature verification for payment processing
• Idempotency protections to prevent duplicate transactions

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9.1 All Users

• Unsubscribe from marketing emails: Click the “Unsubscribe” link at the bottom of any email. We will honor your request within 10 business days. Transactional emails (purchase confirmations, report delivery) are not affected.
• Access your data: Email us at reports@bigshotdata.com to request a copy of all personal information we hold about you.
• Delete your data: Email reports@bigshotdata.com to request deletion of your account and associated data. We will process your request within 45 days, except where retention is required by law.
• Correct your data: Email us to correct inaccurate personal information.

9.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know what personal information we collect and how we use it
• Right to delete your personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information. We do not sell or share your personal information as defined under the CCPA/CPRA.
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, email us at reports@bigshotdata.com with the subject line “California Privacy Request.” We will verify your identity before processing your request.

9.3 Residents of Other U.S. States

Residents of Virginia, Colorado, Connecticut, Texas, Oregon, and other states with comprehensive privacy legislation may have similar rights. To exercise your rights under your state’s privacy law, contact us at reports@bigshotdata.com.

We do not sell or share your personal information, so there is no data sale or sharing activity to opt out of. We recognize Global Privacy Control (GPC) browser signals and treat them consistently with this policy. We do not currently respond to “Do Not Track” browser signals as there is no industry consensus on how to interpret them.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at reports@bigshotdata.com and we will promptly delete it.

Our Services are operated in the United States. If you access our Services from outside the United States, your information will be transferred to and processed in the United States. By using our Services, you consent to this transfer.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective date” at the top of this page and, where appropriate, notify you by email. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at: