Legal

Privacy Policy

Last updated: Draft, pending legal review

This policy explains what information BuyerPass collects, how we use and share it, and the choices you have. BuyerPass is a technology platform for business acquisitions that supports buyer profiles, opportunity matching, and, when requested for a specific opportunity, Proof of Funds Verification.

This page is provided for general information and transparency. It is not legal advice. Sections marked in the highlighted style below are still being finalized with counsel before launch.

Overview

BuyerPass is a technology platform for business acquisitions. It supports BuyerPass Profiles, Acquisition Criteria, opportunity matching, interest management, Unveils, opportunity-specific invitations, and Proof of Funds Verification.

Proof of Funds Verification is completed only when a deal owner requests financial readiness for a specific opportunity. When it is, a deal owner receives a limited verification outcome rather than a buyer's underlying account balances.

Information we collect

  • Account information you provide when you register, such as your name, email address, role (buyer, broker, or seller), and organization.
  • Profile and Acquisition Criteria you choose to share, such as target industries, deal size, and location preferences.
  • Opportunity and interest information such as the opportunities deal owners list and the interest, Unveils, and responses buyers record on them.
  • Invitation information such as the contact details a deal owner provides to invite someone to a specific opportunity.
  • Communications you send us, such as messages submitted through the contact form or to our support and security inboxes.
  • Financial connection data obtained through our verification partner, Plaid, when you connect an account to complete a verification (see below).
  • Payment information processed by a third-party payment processor when a deal owner subscribes to a paid plan. BuyerPass does not store full card numbers.
  • Usage and device information such as log data and device information generated as you use the platform.

To be finalized before launch: Confirm the payment processor and exactly which payment or billing fields BuyerPass stores versus what the processor retains, and reference the processor as a sub-processor where required.

Financial data and Plaid

To complete a Proof of Funds Verification, you connect one or more financial accounts through Plaid. Plaid retrieves the balance information needed to evaluate your eligible liquidity against an opportunity's requirement. BuyerPass uses this information to produce a verification outcome.

In some cases, verification may also involve reviewing supplemental documentation you provide (for example, to substantiate funds held at institutions that cannot be connected through Plaid). You choose what to submit, and any such documents are used only to evaluate the verification.

Your bank login credentials are handled by Plaid and are not stored by BuyerPass. Brokers and sellers receive a limited verification outcome, not your account numbers, specific balances, institution details, or the underlying documents you submit.

To be finalized before launch: Confirm the exact Plaid product scopes used (e.g., Balance, Assets), whether any balance snapshots are stored by BuyerPass, and reference Plaid's end-user privacy policy as required by your Plaid agreement.

How we use information

  • To create and maintain your BuyerPass Profile and Acquisition Criteria.
  • To match buyers with relevant opportunities and to manage interest and Unveils.
  • To deliver opportunity-specific invitations and related reminders.
  • To complete Proof of Funds Verification when a deal owner requests it for an opportunity.
  • To operate, secure, and improve the platform.
  • To communicate with you about your account, support requests, and security matters.

When a broker or other authorized deal owner invites you to a specific opportunity, BuyerPass processes the contact information provided for that invitation to deliver the invitation, related reminders, and the opportunity-specific workflow. BuyerPass does not use an invited buyer's contact information as a generic marketing list solely because it was provided by a broker.

If you provide contact information for another person, you represent that you have the authority to provide it and that your use of BuyerPass complies with applicable privacy, marketing, and anti-spam laws.

How information is shared

BuyerPass limits how information is shared and shares it based on the workflow:

  • With the relevant deal owner or organization for an opportunity you engage: the profile information you choose to share and, when applicable, the limited Proof of Funds Verification outcome needed for that opportunity, not your underlying account balances.
  • With service providers such as Plaid, who process data to provide the service under contract.
  • For legal reasons where required to comply with law or protect rights and safety.

BuyerPass does not sell your personal information.

To be finalized before launch: Confirm the complete list of sub-processors and whether any data-processing or data-sharing agreements must be referenced here.

Analytics and attribution

To understand how people discover BuyerPass and where our product experience can improve, we use a small, deliberately limited set of measurement tools. We designed this to answer product and marketing questions, not to profile you.

  • Attribution cookies. When you arrive from a link or campaign, we store first-party information in your browser about how you got here (such as campaign tags, the referring site, the page you landed on, and ad click identifiers). We keep the first and most recent touch for up to 30 days. This information is only ever written to our records if you go on to create an account, and it is visible solely to BuyerPass staff, never to other users or deal owners.
  • Product analytics. We use Google Analytics 4 and PostHog to measure a fixed, published list of non-sensitive events (for example, that a signup completed or an opportunity was published) together with coarse dimensions such as account type. We do not record session replays, we do not use broad automatic event capture, and we never attach your email, name, organization, financial data, or verification outcomes to these events. Analytics identifiers are pseudonymous.
  • No advertising use. These tools are configured with United States data collection only and with advertising features turned off, including Google Signals, ad personalization, remarketing, and Google Ads linking. We do not sell your personal information or use it to target you with ads.
  • Your browser signals. Where our tools support it, we honor the Global Privacy Control (GPC) signal and treat it as a request to disable non-essential analytics. You can also block cookies through your browser settings.

To be finalized before launch: Confirm final analytics data-retention windows in GA4 and PostHog, list these providers as sub-processors alongside Plaid and the payment processor, and specify the exact opt-out mechanism and jurisdictional obligations (for example, U.S. state opt-out-of-sale/share and, if in scope, ePrivacy/consent-banner requirements).

Your controls and choices

  • You control which deal owners can see your BuyerPass Profile through the Unveil process.
  • You can update your profile and Acquisition Criteria at any time.
  • You can request deletion of your account and associated data, subject to information we are required or permitted to retain.

How we protect information

We use encryption for data in transit and at rest, limit internal access, and design the product so that counterparties receive a limited verification outcome rather than your underlying financial details. No method of transmission or storage is completely secure, but we work to protect your information. See our Security & Privacy overview for more detail.

Data retention

A completed Proof of Funds Verification reflects a point in time and includes a freshness indicator, so a deal owner can request a more recent verification for their opportunity. We retain account and verification records for as long as your account is active and as needed to operate the service.

To be finalized before launch: Specify the verification validity window and exact retention periods for each data category, plus post-deletion backup handling, per your legal and compliance requirements.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing.

To be finalized before launch: Detail the specific rights and request process for applicable jurisdictions (for example, U.S. state privacy laws and, if relevant, GDPR/UK GDPR), including any verification and response-time commitments.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page and, where appropriate, notify you.

Contact us

Questions about this policy or your data? Email us at privacy@buyerpass.com or use our contact form.

Prefer to call? Reach us at (404) 236-9149.