Privacy Policy

Effective date: July 27, 2026
Last updated: July 27, 2026

Fitzgerald Growth Partners LLC ("Fitzgerald Growth Partners," "we," "us," or "our") operates milliondollarhurdle.com (the "Site") and provides the Million-Dollar Scorecard and the Million-Dollar Deep Diagnostic (collectively, the "Services"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over it.

By using the Site or purchasing the Services, you consent to the practices described here.

1. Who We Are and How to Contact Us

Fitzgerald Growth Partners LLC
Glen Allen, Virginia
Email: reports@fitzgeraldgrowthpartners.com

For any question, request, or complaint about your personal information, email us at the address above.

2. Information We Collect

We collect three categories of personal information.

a. Information you give us directly

• Contact information: your first name, business name, email address, and (optionally) phone number.
• Scorecard responses: if you take the free Million-Dollar Scorecard, your answers to its 25 statements, together with the email address you provide to receive your results.
• Intake responses: if you purchase the Deep Diagnostic, your answers to its 84 questions, including any free-text comments you write about your business. These may describe your revenue range, headcount, industry, operations, staffing, financial practices, and other business details.
• Payment information: billing name, billing address, and payment card details. Full card numbers are processed and stored by Stripe, not by us. We receive only a transaction identifier, the last four digits of your card, the card brand, and the transaction status.
• Correspondence: the content of emails and other messages you send us.

We store your answers at the individual-question level. This is deliberate: it is what allows your free 90-day retake to show you a before-and-after comparison on every single answer.

b. Information we collect automatically

When you visit the Site, we and our infrastructure providers automatically collect:

• Device and technical data: IP address, browser type and version, operating system, device type, referring URL, and language settings.
• Server and security logs: requests made to the Site, timestamps, and error records, used to operate the Site and to enforce rate limits that protect it from abuse.

c. Information from third parties

• Payment confirmation from Stripe (transaction identifier, amount, status).
• Email deliverability data from our email provider (deliveries, bounces, unsubscribes).

We do not knowingly collect information from children under 18. The Services are intended for adult business owners and operators only.

3. How Your Report Is Produced — Use of Artificial Intelligence

Your Deep Diagnostic Report is generated with the assistance of artificial intelligence. We want you to understand exactly what that means before you answer 84 questions about your business.

• Your scored answers and your free-text responses are transmitted to Anthropic PBC, the provider of the AI model we use, in order to generate the written narrative of your Report.
• Anthropic processes this information solely to return the generated text to us. Under the commercial terms governing our use of its service, Anthropic does not use inputs submitted through that service to train its models.
• Your Report is reviewed against automated quality and accuracy controls before delivery, and the scoring, the section structure, and the dollar-figure calculations are produced by our own software rather than by the AI model.
• If you would prefer that your free-text answers not be processed this way, please do not submit free-text answers you consider confidential. The scored questions alone will still produce a complete Report.

We do not use your responses to train any AI model of our own, and we do not permit any third party to use them for model training.

4. Why We Collect It (Purposes)

We use your personal information to:

• Provide the Services — deliver your Scorecard results, process your purchase, generate and deliver your Report, provide your 90-day retake, and respond to support requests
• Improve the Diagnostic — analyze aggregated, de-identified patterns across responses to refine our scoring and recommendations
• Communicate with you — send transactional email (purchase confirmation, the link to your Intake, Report delivery, retake reminder) and, if you opt in, occasional educational content
• Comply with law — meet our tax, accounting, and other legal obligations
• Protect the Services — detect and prevent fraud, abuse, and security incidents
• Enforce our agreements — investigate violations of our Terms of Service and defend legal claims

We do not sell your personal information.

5. How We Share Your Information

We share personal information only in the following circumstances:

a. Service providers (processors)

We share information with third-party vendors who help us run the Services. Each is contractually required to protect your information and use it only for the purposes we specify. Our current service providers are:

(We will update this list when providers change.)

b. Professional advisors

Our accountants, lawyers, and insurance providers may receive limited information as needed to advise us or to comply with law.

c. Business transfers

If we merge, sell, restructure, or transfer assets, personal information may transfer as part of the transaction. We will notify you and require the recipient to honor this Privacy Policy or provide equivalent protection.

d. Legal and safety

We may disclose information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or security incidents.

e. With your consent

We will share information in other ways if you direct us to or explicitly consent.

We do not sell personal information for money, and we do not "share" personal information for cross-context behavioral advertising as those terms are defined under California, Virginia, or other US state privacy laws.

6. How Long We Keep Your Information

We retain personal information for as long as needed to provide the Services and to meet our legal obligations. Specifically:

• Scorecard and Intake responses: retained for 3 years from the date you submit them, so that your 90-day retake comparison and your historical Reports remain available to you.
• Transaction records: retained for 7 years to comply with tax and accounting requirements.
• Correspondence: retained for 3 years after the last interaction.
• Marketing email list: retained until you unsubscribe.
• Server and security logs: retained for the period set by our infrastructure providers, typically no more than 12 months.

After the applicable period, we delete or de-identify the information.

7. How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards, including:

• Encryption in transit (HTTPS/TLS) across the Site
• Encryption at rest for stored responses and contact data
• Access controls limiting who at Fitzgerald Growth Partners can view personal information
• Access to your Diagnostic secured by a unique, unguessable link sent to your email address
• Rate limiting on Site endpoints to deter automated abuse
• Payment card data handled exclusively by PCI-DSS-compliant processors (Stripe)
• Regular software updates and security patches

No system is perfectly secure. If we experience a data breach affecting your personal information, we will notify you and applicable regulators as required by law.

A note on your access link. The Services do not use passwords or user accounts. Access to your Diagnostic is controlled by a unique link we email to you. Anyone who obtains that link can access your Intake and your Report, so please do not forward it.

8. Your Rights

Depending on where you live, you have some or all of the following rights regarding your personal information:

• Right to know / access — request a copy of the personal information we hold about you
• Right to correct — ask us to correct inaccurate information
• Right to delete — ask us to delete your personal information (subject to legal exceptions such as tax-record retention)
• Right to portability — receive your information in a portable, machine-readable format
• Right to opt out — of sale of personal information or targeted advertising (we do not sell or share for targeted advertising, so this right is honored by default)
• Right to non-discrimination — we will not discriminate against you for exercising these rights
• Right to withdraw consent — where we rely on consent, you may withdraw it at any time

How to exercise your rights

Email reports@fitzgeraldgrowthpartners.com with the subject line "Privacy Request." Please describe:

1. The right you want to exercise
2. The email address you used with the Services
3. Enough detail for us to verify your identity

Response time. We will acknowledge your request within 10 business days and respond substantively within 45 calendar days (extendable by an additional 45 days if reasonably necessary, with notice to you).

Verification. We may ask for additional information to verify your identity before fulfilling a request, particularly for deletion or portability requests. We will not use this information for any other purpose.

Appeals (Virginia residents). If we deny your request, you may appeal by replying to our decision email within 60 days. We will respond to your appeal within 60 days. If the appeal is denied, you may contact the Virginia Attorney General at oag.state.va.us to submit a complaint.

Authorized agents. You may designate an authorized agent to make a request on your behalf. We will require written proof of the agent's authority and may require you to verify your identity directly.

9. Email Communications

Transactional email. When you take the Scorecard or purchase the Diagnostic, we send email necessary to deliver what you asked for — your results, the link to your Intake, your Report, and your 90-day retake notice. These are part of the Service.

Marketing email. If you opt in, we may send occasional educational content. Every marketing email includes an unsubscribe link, and unsubscribing takes effect promptly. Unsubscribing from marketing email does not stop transactional email relating to a purchase you have made.

10. Cookies and Similar Technologies

We use only strictly necessary cookies and similar technologies — those required for the Site to function, including session handling, security, and abuse prevention. These cannot be disabled without breaking parts of the Site.

We do not use advertising, retargeting, or cross-site tracking cookies, and we do not currently run third-party web analytics on the Site.

If we introduce non-essential cookies or analytics in the future, we will update this Policy and present a cookie banner allowing you to opt in.

Do Not Track and Global Privacy Control (GPC). We honor Global Privacy Control (GPC) signals sent by your browser as an opt-out of any "sale" or "sharing" (though as noted, we do neither).

11. Information for Specific US States

Because state privacy laws differ, this section clarifies how the general rights above apply where you live.

a. California residents (CCPA/CPRA)

• Categories of personal information we collect: identifiers (name, email, phone, IP), commercial information (purchases), internet activity (server logs), and inferences drawn from your responses. We do not collect sensitive personal information as defined by the CPRA.
• We do not sell or share personal information as defined by the CCPA/CPRA.
• Right to limit use of sensitive PI: not applicable (we do not use sensitive PI).
• California residents also have the "Shine the Light" right (Cal. Civ. Code § 1798.83) to request information about disclosures to third parties for their direct-marketing purposes. Email us to request this.

b. Virginia residents (VCDPA)

You have the rights described in Section 8, including the right to appeal a denied request. Contact us at reports@fitzgeraldgrowthpartners.com.

c. Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other US state privacy law residents

We honor the access, correction, deletion, and opt-out rights granted under your state's comprehensive privacy law. To exercise these rights, follow the process in Section 8.

12. International Users

The Site is operated from the United States. If you access the Site from outside the US, your information will be transferred to, stored in, and processed in the United States. By using the Site, you consent to that transfer.

EU/UK residents: the Services are marketed to US-based business owners, and we do not target EU or UK residents. If you nonetheless purchase from within the EU or UK, we rely on the lawful bases of contract performance (to provide the Services you purchased) and legitimate interests (to improve and secure the Services). You may exercise GDPR/UK-GDPR rights by emailing reports@fitzgeraldgrowthpartners.com.

13. Third-Party Sites and Services

The Site and your Report may link to third-party sites. We are not responsible for the privacy practices of those sites. Review each third party's privacy policy before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy on the Site and update the "Effective date" above. For material changes affecting how we use previously collected information, we will make reasonable efforts to notify you by email.

15. Complaints

If you have a complaint about how we handle your personal information, please contact us first at reports@fitzgeraldgrowthpartners.com — most issues can be resolved quickly. You also have the right to lodge a complaint with your state attorney general or, if outside the US, your local data-protection authority.

By using milliondollarhurdle.com or purchasing the Million-Dollar Deep Diagnostic, you acknowledge that you have read and understood this Privacy Policy.