Privacy Policy

1. What we collect

• Account data — your name, email address and a bcrypt hash of your password (we never store the password itself).
• Listing content — the structured financial figures, description and risk-profile answers a seller enters, plus asking price history.
• Uploaded financial documents — income statements, balance sheets, tax returns and similar files a seller uploads as sale evidence. These often contain confidential business and personal financial information; treat your uploads accordingly.
• NDA acceptance records — which buyer accepted the confidentiality terms for which listing, when, and which version of the terms they agreed to.
• Deal activity — offers, counter-offers, negotiation messages and deal milestone progress between a buyer and a seller.
• View analytics — page-view counts per listing, deduplicated with a SHA-256 hash of the viewer's IP address + user agent per UTC day. The raw IP is never stored; the hash cannot reasonably be reversed into an identity.
• Operational logs — standard hosting logs (requests, errors) kept by our infrastructure providers for security and debugging.

2. Who can access it

• The public sees only the anonymous parts of a listing: industry, region, headline, financial figures and the asking price against an independent estimate. Company names never appear.
• Buyers who accepted the NDA on a listing see that listing's full financial detail, valuation audit trail and uploaded documents — and nothing beyond it.
• Counterparties in a deal: when an offer is accepted, the buyer and the seller are shown each other's name and email address so they can close. Nothing is revealed before acceptance.
• Sellers see aggregate interest stats on their own listings (views, saves, NDA counts, offers) — not the identity of individual viewers.
• Our team accesses data only for moderation (the listing approval queue, broker verification) and support.
• Infrastructure providers (hosting, database and file storage, currently Vercel and its storage partners) process data on our behalf to run the service.

We do not sell personal data and we do not share it with advertisers.

3. Retention

Account and listing data is kept while your account is active. Uploaded documents are kept until the listing owner deletes them (owners can delete individual documents at any time) or the account is closed. View analytics are stored as per-day hashes, not identities. NDA acceptance records and the deal record (offers, messages, milestones) are retained as contractual records even after an account closes — they are the evidence of who agreed to what, and the counterparty may rely on them.

4. Deletion

You can delete your own uploaded documents from the listing page at any time. Account deletion is self-serve from your dashboard (Account section — password confirmation required): your name, email address and password are immediately anonymized (the address becomes a deleted+…@deleted.invalid tombstone) and you are signed out. Because sign-in tokens are stateless, a token issued before deletion remains technically valid until it expires — but the destroyed password means the account cannot be used or recovered.

Records the other party in a deal relies on are retained as contractual evidence, as noted above: executed NDAs (including the terms version you accepted), offers, negotiation messages, deal milestones and uploaded financial documents. Your personal watchlist (saved businesses) is deleted with the account. Prefer we handle it? Email hello@successionmarketplace.com from your account address.

5. Security

Passwords are bcrypt-hashed, sessions use signed tokens, uploaded files are validated by content (not just file type) and served only through an authorization check, and sensitive API endpoints are rate-limited. No system is perfectly secure; if you believe your account or a listing's confidentiality has been compromised, contact us immediately at hello@successionmarketplace.com.

6. Changes

If this policy changes materially we will note it here with a new revision date. The current version is the one dated August 2026 above.