Privacy Policy

We collect information you provide directly when you create an account, list a business, or communicate with buyers or sellers. This includes:

• Account information: name, email address, and password when you register.
• Listing information: business name, category, location, asking price, revenue figures, financial documents, and photos you upload.
• NDA data: name and email address collected when a buyer submits an NDA request.
• Payment information: billing details processed securely through Stripe. We do not store full card numbers on our servers.
• Usage data: IP address, browser type, pages visited, and referring URLs collected automatically when you use our platform.

We use the information we collect to:

• Create and manage your account and listings.
• Process payments and issue receipts via our payment processor, Stripe.
• Facilitate NDA requests and controlled access to confidential listing documents.
• Send transactional emails such as listing confirmations, NDA approvals, and payment receipts.
• Send optional marketing communications if you have opted in. You may unsubscribe at any time.
• Monitor platform activity for fraud, abuse, and security purposes.
• Improve and develop our platform based on aggregated, anonymized usage data.

We do not sell your personal information. We share your data only in the following limited circumstances:

• With buyers who sign an NDA: If you are a seller, your contact information and financial documents are shared only with buyers who have executed a valid NDA through our platform.
• Service providers: We use trusted third-party services including Stripe (payments), Resend (email delivery), Cloudinary (file storage), and Neon (database infrastructure). Each provider is bound by appropriate data processing agreements.
• Legal requirements: We may disclose information when required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify affected users in advance.

We use cookies and similar technologies to maintain your session, remember preferences, and analyze platform usage. Specifically:

• Session cookies: Required for authentication and keeping you logged in.
• Analytics cookies: Help us understand how users interact with the platform. We use anonymized, aggregated data only.
• Error tracking: We use Sentry to capture technical errors. Error reports may include limited session context to help diagnose issues.

You may disable cookies through your browser settings, though some features of the platform may not function correctly without them.

We retain your account information and listing data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or fraud prevention.

NDA records and associated communications may be retained for up to 7 years to support potential legal proceedings related to confidentiality agreements.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request your data in a structured, machine-readable format.
• Opt-out: Unsubscribe from marketing communications at any time using the link in any email we send.

To exercise any of these rights, contact us at the address below.

We implement industry-standard security measures including encrypted connections (TLS/HTTPS), hashed password storage, and role-based access controls. Financial documents uploaded to our platform are stored in access-controlled cloud storage and are only accessible to parties who have executed a valid NDA. Despite these measures, no system is completely secure. We encourage you to use a strong, unique password for your account.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

SellMyBiz.us
Email: privacy@sellmybiz.us

We will respond to all legitimate requests within 30 days.