Information you provide when signing up
We collect your email address, your selected intent as a buyer, seller or broker, and any plan choice associated with your signup. We send an email code to confirm control of that email address. We process the code you submit for verification and retain a hashed representation of the code, its expiry and confirmation status rather than storing the usable code as an account password.
If you enter through a search alert or valuation result, the signup also includes the search filters or valuation inputs connected with that request. These may include industry, location, asking price preferences, revenue, SDE or EBITDA, and years in business. We record the signup source, first page visited, referral or campaign details when present, and the time of signup and confirmation.
Account, listing and deal information
We collect the account and profile information you choose to provide, your role, team membership and account permissions. Listings may include the business description, industry, location, asking price, financial summary, photographs and other details you submit. We also process documents placed in a data room, buyer information, messages, notes, tasks, access decisions and activity associated with the features you use.
Business records can contain personal information about owners, employees, customers or other people. Upload only information you have authority to use and share. Remove personal details that are not needed for the review and use the data room rather than public listing fields for confidential material. Do not submit sensitive personal records unrelated to the transaction.
NDA acceptance and document activity
When you accept an NDA, we record the acceptance, the relevant listing and buyer account, the time, the NDA text version, the IP address and the user agent associated with the acceptance. A user agent identifies the browser or device software making the request. We also process data room permissions and access activity, and buyer details used in document watermarks.
These records help the parties understand who accepted which terms and who received document access. They support accountability and are not a guarantee that an NDA is enforceable or that every use of a downloaded document is visible to us.
Technical information and support
We collect IP address, user agent, request timing and service activity needed to deliver pages, maintain sessions, prevent misuse and diagnose errors. Support messages include your email address, the message content and any relevant links or attachments you choose to send. Avoid sending card details, signup codes or confidential financial documents in support email.
For subscriptions, we process plan, billing period, payment status, invoice references and related billing records. Payment providers handle the card information you enter through secure checkout. Do not send full card details to support.
Information from public sources and other users
Broker directory information comes from public license registries and can include the professional name, license details and other public professional information shown in the source record. Public records may be incomplete or out of date. A profile is not an endorsement or a guarantee of current license status.
We may also receive information about you when an authorized team member invites you, a buyer contacts your listing, a seller grants access or another user submits information for a legitimate transaction purpose. The person submitting another individual's information is responsible for having authority to do so. You may contact [email protected] to ask about a directory correction or information linked to you.
How we use personal information
- Create and maintain accounts, verify email control and manage permissions
- Save selected plans, search filters, valuation inputs and requested alerts
- Publish authorized public listings and broker profile information
- Deliver messages and connect buyers with the relevant seller or broker
- Record NDA acceptance and operate document permissions, watermarks and access logs
- Provide buyer pipeline, team and reporting features selected by the account holder
- Process subscription administration, invoices, renewals and cancellation
- Answer support requests, review reported content and investigate misuse
- Maintain service security, diagnose faults and keep necessary operational records
- Meet applicable legal obligations and establish or respond to claims
We use signup context to continue the workflow you selected, such as revealing the full valuation result or saving a search alert. Email confirmation does not by itself authorize a subscription payment. We do not use confidential deal documents as public promotional material.
The basis for processing
Where a legal basis is required, we process information to perform or prepare the service you request, comply with legal obligations, or pursue legitimate operational interests such as account security, fraud prevention and responding to support requests, while considering your rights. Where consent is required, we request it for that purpose and you may withdraw it without affecting processing that was lawful before withdrawal.
Optional communication choices are separate from information needed to operate an account or maintain a transaction record. If you choose not to provide information required for a feature, that feature may not work. You can still make a privacy request without purchasing a subscription.
What is public and what is restricted
Public listings and broker profiles can be viewed by visitors and may appear in search results and listing alerts. Public material may also be found by external search services. Do not put confidential information in a public field merely because you intend to require an NDA later.
Messages and inquiries are shared with their intended seller, broker, buyer or authorized team recipients. The seller or broker can view the buyer information needed to assess an inquiry, NDA acceptance and access request. Account owners and authorized team members can access information allowed by their role. Permissioned data room documents are shared with approved users under the access settings and applicable NDA.
An NDA does not hide public summary fields. A revoked permission cannot recall a document already downloaded or remove a record another party must lawfully keep. Sellers, brokers and buyers are responsible for their own uses of information they receive and any privacy notices or obligations that apply to their business.
Service providers and other disclosures
We share information with providers that support hosting, storage, email delivery, security and card payments, only as needed for those services and subject to appropriate restrictions. A payment provider also processes information under its own applicable terms and privacy practices.
We may disclose relevant information when required by applicable law, to protect the security and rights of the service or its users, or to establish, exercise or defend legal claims. If responsibility for the service transfers as part of a business transaction, relevant information may transfer with it, subject to applicable law and appropriate confidentiality safeguards. We notify users where a material change in handling requires notice.
We do not sell personal information, rent account email lists or share personal information for cross context behavioral advertising. Confidential data room content is not shared for unrelated advertising. Information is not made public simply because you hold a paid subscription.
Minimal cookies and local storage
We keep cookies and similar browser storage limited to functions needed for the service, such as maintaining a session, supporting account security, remembering a billing or search preference and preserving the signup source and first visit context. We do not use advertising cookies or cross site advertising tracking.
You can control cookies and browser storage through your browser settings. Blocking essential storage may interfere with login, saved preferences or a signup flow. We do not interpret an ordinary browser request as permission to expand collection. Where applicable law requires recognition of a privacy preference signal, we honor it for the relevant processing. Our policy against selling personal information and sharing it for behavioral advertising applies regardless of that signal.
Email choices
We send verification codes, requested search alerts and service messages connected with your account or selected workflow. Alert and promotional emails include an unsubscribe link. Unsubscribing from optional messages does not cancel a subscription and does not stop essential account, security or billing messages needed to provide the service.
You can also email [email protected] to change communication preferences. A support request is not consent to unrelated promotional email. If you cancel a subscription, review any separate saved alert preferences you want to change.
How long information is kept
We retain information for as long as reasonably needed for the purpose for which it was collected, including providing an active account, honoring requested alerts, maintaining billing records, preventing misuse and resolving disputes. Verification codes expire after 15 minutes and cannot be used after expiry. Their verification records are kept only as needed for signup security and administration.
Listing and data room information is retained while needed for the authorized service and related records. Removing public content or ending an account does not necessarily erase NDA acceptance logs, access records, invoices or information needed for a legal obligation or a genuine dispute. Those records may be kept for the applicable obligation or claim period with access limited to the relevant purpose.
When information is no longer needed, we delete it or remove its association with an identifiable person. Backup copies may persist until their normal replacement, with restricted use. Other participants may retain copies they are entitled or required to keep under their own obligations. We assess deletion requests against these limits rather than promising immediate deletion of every copy.
Security and processing locations
We use access controls, role permissions and protective measures appropriate to the information and the service, including encryption for protected transmission and storage. Keep account access secure and review data room permissions when circumstances change. No internet service, watermark or access log can guarantee that information will never be lost, accessed improperly or copied.
Information may be processed in the United States or in other locations where our service providers operate. The applicable rules may differ from those where you live. Where cross border processing requires safeguards under applicable law, we apply those safeguards. Contact [email protected] to ask about processing relevant to your account without sending confidential deal documents.
Access, correction, deletion and other requests
Depending on where you live and the law that applies, you may have rights to know whether we process your personal information, obtain access or a portable copy, correct inaccuracies, request deletion, restrict or object to certain processing, and withdraw consent where processing relies on it. Some US state laws also provide rights concerning sales, targeted advertising and certain profiling. We do not sell personal information or use it for cross context behavioral advertising.
Buyer scoring supports review of inquiries and does not decide whether you may purchase a business or receive financing. Sellers and brokers decide how to assess a buyer and whether to grant document access. If you have a concern about profile or scoring information associated with you, include it in your data request.
These rights are subject to applicable conditions and exceptions, including records needed for legal compliance, security and other people's rights. We do not penalize you for exercising a right. Where a legally available choice affects a feature, we explain the practical effect. We do not offer payment in exchange for waiving privacy rights.
How to submit a request or appeal
Email [email protected] from the address associated with your account and state the action you request. For a public broker profile, include its link and identify the information involved. We may need proportionate information to verify your identity, authority or relationship to the record before disclosing or changing personal information. We do not ask you to send signup codes or card information to verify a request.
Where applicable law permits an authorized agent to act for you, we may ask for evidence of authorization and verification of the person concerned. We respond within the time required by the law that applies to the request. If we decline a request, we explain the basis where required. You can ask for a review or submit an appeal to the same email address, identifying the decision and why you believe it should change.
Children and third party services
BizBuyout is intended for adults with legal capacity to participate in business transactions. It is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided information, email [email protected] so we can assess and remove it where appropriate.
Links to third party sites and independent communications with brokers, sellers, lenders or advisers are governed by those parties' own practices. This policy explains the administrator's handling of data and does not replace the privacy obligations of another participant.
Changes and contact
We update this policy when our practices or applicable requirements change and revise the date above. We provide additional notice for material changes where required and seek consent where a new use requires it. For questions, requests or an appeal, contact the administrator of bizbuyout.com at [email protected].