Privacy Policy

Overview

BuyerPass is a technology platform for business acquisitions operated by BuyerPass LLC, a Georgia limited liability company. It supports BuyerPass Profiles, Acquisition Criteria, opportunity matching, interest management, matched buyer profiles, opportunity-specific invitations, and Proof of Funds Verification.

Proof of Funds Verification is completed only when a deal owner requests financial readiness for a specific opportunity. When it is, a deal owner receives a limited verification outcome rather than a buyer's underlying account balances.

You can reach us about this policy at privacy@buyerpass.com. Our mailing address is listed at the end of this policy.

Information we collect

• Account information you provide when you register, such as your name, email address, role (buyer, broker, or seller), and organization.
• Profile and Acquisition Criteria you choose to share, such as target industries, deal size, geography, and financing approach.
• Opportunity and listing information such as the opportunities deal owners create and the details, documents, and financial information they include.
• Interest information such as the opportunities you save, express interest in, or respond to, and related activity.
• Invitation information such as the contact details a deal owner provides to invite someone to a specific opportunity.
• Communications you send us, such as messages submitted through the contact form, the support chat, or to our support, privacy, and legal inboxes.
• Financial connection data obtained through our verification partner, Plaid, when you connect an account to complete a verification (see below).
• Verification information generated during Proof of Funds, name, or institutional verification, including the limited outcome and supporting materials you choose to provide.
• Payment information processed by Stripe when an organization subscribes to a paid plan or incurs verification charges. BuyerPass does not store full card numbers.
• Usage and device information such as log data and device information generated as you use the platform, and limited first-party attribution information about how you arrived.

Financial data and Plaid

To complete a Proof of Funds Verification, you connect one or more financial accounts through Plaid. Plaid handles your bank login credentials directly; BuyerPass does not receive or store them.

Through Plaid, BuyerPass receives:

• Account details for the accounts you connect, such as the account name, the last few digits of the account number, and the account type and subtype.
• Balance information (current and available balances), which we use to classify which funds count as eligible liquidity and to produce a verification outcome for a specific opportunity.
• Name-match results: Plaid compares the name on your BuyerPass profile with the account-holder name on your connected accounts and returns a match score to BuyerPass (described below).

BuyerPass does not request transaction history, investment holdings, or loan and liability details from Plaid.

BuyerPass stores the account details and balances it receives so it can show you your connected accounts and produce verification outcomes. The credentials that let BuyerPass reach your connection through Plaid are stored in encrypted form. We retain this information only as needed to provide and administer the feature, subject to our account and deletion processes and applicable recordkeeping needs. When an account is deleted, BuyerPass asks Plaid to remove the associated connections and deletes the stored account records. Your use of Plaid is also governed by Plaid's own end-user privacy policy.

Brokers and sellers receive a limited verification outcome, not your account numbers, specific balances, institution details, or the underlying documents you submit.

Name verification

When your connected accounts meet an opportunity's Proof of Funds requirement, BuyerPass sends the name on your profile to Plaid, which compares it with the account-holder name on those accounts and returns a match score. BuyerPass records the outcome of that check. A mismatch is not an automatic rejection; it can move into a short human review for common reasons such as a maiden name, nickname, or joint account.

When a name review occurs, BuyerPass may also retrieve the account-holder name(s) from your connected account solely to evaluate the review. That identity evidence is stored in encrypted form and is purged approximately 30 days after the review is closed. Limited, non-identifying audit information about the outcome may be retained to support the verification reuse mechanism. Brokers and sellers only ever see the final outcome.

Institutional verification

Funds, companies, and other institutional buyers can complete verification through an alternative review path handled by the BuyerPass team. You provide institution information and supporting documents, which BuyerPass uses only to evaluate the review.

BuyerPass retains supporting documentation only as reasonably necessary for verification, security, dispute handling, legal and compliance, and service purposes, subject to our deletion processes. Unreferenced or orphaned uploaded files are swept on a recurring basis. Brokers and sellers receive the outcome only; your supporting documents are never handed to them as raw files.

Billing and payments

Payments for paid plans and verification charges are processed by Stripe. Stripe collects and processes your payment details directly and acts as our payment processor. BuyerPass receives limited billing records (such as plan, status, and transaction metadata) needed to administer your subscription and charges, but does not store full card numbers.

Analytics

To understand how people discover BuyerPass and where our product experience can improve, we use a small, deliberately limited set of measurement tools. We designed this to answer product and marketing questions, not to profile you.

• Attribution. While analytics is permitted, when you arrive from an outside link or campaign we store first-party information in your browser about how you got here: campaign tags (UTM parameters), advertising click identifiers where present (such as Google, Meta, or Microsoft click IDs), a campaign reference, the referring site, and the page you landed on. We keep the first touch and the most recent outside visit for up to 30 days, shared across buyerpass.com and its subdomains. This information is written to our records only if you go on to create an account. It is used by BuyerPass and our analytics providers on our behalf, and is never shown to other users or deal owners.
• Product analytics. We use PostHog and Google Analytics 4 to measure a fixed, defined list of non-sensitive events (for example, that a signup completed or an opportunity was published) together with coarse dimensions such as account type. Some of these events are recorded in your browser; others are recorded by our servers when you take an action, such as requesting a verification or viewing a buyer profile. We do not use broad automatic event capture, and we never attach your email, name, organization, financial data, or verification outcomes to these events. Analytics identifiers are pseudonymous.
• Server-recorded events follow your analytics choice. An event our servers record because of something you did is sent only if analytics is permitted for the browser you used, under the same regional defaults, choices, and GPC and Do Not Track signals that apply in your browser. For a paid subscription, the analytics permission in effect when you start checkout is saved with the subscription and used when Stripe later confirms the purchase; a choice you make afterward does not change that saved value.
• Session replay.In the BuyerPass application only (not our marketing site), and only while analytics is permitted, we use Microsoft Clarity to record how pages are used (session replay and heatmaps) so we can find and fix usability problems. Recording is limited to a defined set of general pages, such as sign-in, sign-up, home, and opportunity lists. Pages involving bank linking, proof of funds, verification, supporting documents, billing, account settings, individual buyer and opportunity details, and staff administration are excluded. On recorded pages, Clarity is configured to mask page text and form inputs. If you turn analytics off, recording stops and Clarity's first-party cookies are deleted. Microsoft processes this data as our service provider and retains it according to its configurable retention settings.
• No advertising use. Our analytics tools are configured with advertising features turned off, including Google Signals and ad personalization. We do not use them to target you with ads.

Analytics providers retain data according to their own configurable retention settings. We retain analytics data only as long as needed for product and traffic analysis. See our Cookie Notice for how consent controls analytics.

Cookies and local storage

BuyerPass uses a small number of cookies and similar browser storage to keep you signed in, remember your consent choice, and (where permitted) measure product analytics. Analytics and session replay may operate by default, and you can turn them off through Cookie preferences, except where we apply prior-consent requirements: if your connection is identified as coming from the European Economic Area, the United Kingdom, or Switzerland, they stay off until you accept them. Advertising technologies are separately controlled and off by default everywhere. We honor the Global Privacy Control (GPC) and Do Not Track signals as a request to keep non-essential analytics, session replay, and advertising off. Your choice is stored in the browser you use, so it applies in that browser and is not automatically carried to your other devices or browsers. For the full breakdown of categories, default states, and how to change your choices, see our Cookie Notice.

Communications and marketing

BuyerPass sends transactional, account, security, and verification communications that are necessary to provide the service. These are sent using email service providers, including Resend. Optional emails, such as the new-opportunity digest for buyers and a one-time reminder to complete your BuyerPass, include an unsubscribe link, and you can also manage them in Settings. Required transactional, account, security, and verification messages do not carry an unsubscribe option.

BuyerPass may also send marketing or outreach communications and may use service providers, including Smartlead, to manage them. When you confirm a new BuyerPass account, we check your email address against our outreach campaigns in Smartlead. If you are in an active campaign, we stop that outreach and mark you as a customer so you do not keep receiving prospecting messages. Marketing messages include an unsubscribe or opt-out path as applicable. Opting out of marketing does not stop transactional, account, security, or verification communications needed to operate the service.

When a broker or other authorized deal owner invites you to a specific opportunity, BuyerPass processes the contact information provided for that invitation to deliver the invitation, related reminders, and the opportunity-specific workflow. BuyerPass does not use an invited buyer's contact information as a generic marketing list solely because it was provided by a broker. If you provide contact information for another person, you represent that you have the authority to provide it and that your use of BuyerPass complies with applicable privacy, marketing, and anti-spam laws.

Support and chat

BuyerPass offers a support chat in the application, powered by Chatwoot. When you use it, the messages you send and basic session information are processed to answer your request and improve support. If you are signed in, BuyerPass also shares your account identifier, your name, and your email address (once confirmed) with Chatwoot so your conversations are linked to your account and our team knows who they are helping. Please do not include account credentials or sensitive financial information in a support message.

How we use information

• To create and maintain your BuyerPass Profile and Acquisition Criteria.
• To match buyers with relevant opportunities and to manage interest and matched buyer profiles.
• To deliver opportunity-specific invitations and related reminders.
• To complete Proof of Funds, name, and institutional verification when requested for an opportunity.
• To process payments, subscriptions, and verification charges.
• To operate, secure, support, and improve the platform.
• To communicate with you about your account, support requests, security matters, and, where permitted, marketing.
• To comply with legal obligations and enforce our terms.

How information is shared

BuyerPass limits how information is shared and shares it based on the workflow:

• With the relevant deal owner or organization for an opportunity you engage: the profile information you choose to share and, when applicable, the limited verification outcome needed for that opportunity, not your underlying account balances or documents.
• With service providers that process data to provide the platform under contract, such as hosting, database, verification, payment, email, analytics, and support providers. See our Subprocessors list.
• For legal reasons where required to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the service.
• In a business transfer such as a merger, acquisition, or sale of assets, subject to this policy.

A data processing agreement is available to organization customers on request. BuyerPass does not sell your personal information.

What deal owners see, and what they do not

When you express interest in an opportunity, the deal owner first sees an anonymous buyer summary. Your full matched buyer profile becomes available to that deal owner once the applicable access, consent, and Match Score requirements are met.

Deal owners never see your bank balances, dollar amounts, institutions, account numbers, statements, connected-account credentials, or the raw documents you submit for verification. For verification they receive only a limited qualification outcome, such as whether verified liquidity met the opportunity's requirement.

Public listings

A deal owner may choose to make an opportunity public. Public listings are visible to anyone and may be indexed by search engines. Deal owners control what appears in a public listing, and BuyerPass presents public listings without exposing confidential seller identity or exact-location details that the deal owner has not chosen to publish. Private and draft opportunities are not publicly accessible.

Data retention

We retain account, profile, and service records for as long as your account is active and as needed to operate the service, and afterward as needed for the purposes described in this policy. Specific categories are handled as follows:

• Proof of Funds Verification reflects a point in time and includes a freshness indicator. After 90 days a verification is not automatically expired, failed, or deleted; a deal owner may simply request a more recent verification for their opportunity.
• Name review evidence. Encrypted raw identity evidence is purged approximately 30 days after the review closes. Limited non-identifying audit information may remain to support verification reuse.
• Institutional supporting documents are retained only as reasonably necessary for verification, security, dispute, legal and compliance, and service purposes, subject to our deletion processes; unreferenced uploads are swept on a recurring basis.
• Connected-account (Plaid) information, including account details and balances, is retained only as needed to provide and administer connected-account functionality, subject to our account and deletion processes and applicable recordkeeping needs. Connection credentials are stored in encrypted form.
• Billing, tax, and legal records may be retained for up to seven years, or longer where required by applicable law.
• Analytics data is retained according to provider configuration and only as long as needed for product and traffic analysis.

Account deletion

You can request account deletion from Settings. Deletion is handled as a reviewed, support-assisted process rather than an instant one-click removal, so it may not take effect immediately. If you are the sole owner of an organization, you will be asked to transfer ownership to another active member first, so the organization is never left without an owner.

When your account is deleted, personal account data is deleted or anonymized according to our implemented deletion process. Certain anonymized verification or audit records may remain, and billing, tax, security, fraud-prevention, dispute, or legally required records may be retained where applicable. We do not promise complete erasure of every record.

How we protect information

We use encryption for data in transit and at rest, encrypt sensitive verification information at the application layer, limit internal access, and design the product so that counterparties receive a limited verification outcome rather than your underlying financial details. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your information. See our Security & Privacy overview for more detail.

Your privacy rights and choices

Depending on where you live and the applicable law, you may have rights to access, correct, delete, or port your personal information, and to opt out of certain processing. Where a right depends on applicable law, it applies to the extent that law provides.

• You control which deal owners can see your full BuyerPass Profile by choosing which opportunities you express interest in.
• You can update your profile and Acquisition Criteria at any time.
• You can request access to or deletion of your account and associated data, subject to information we are required or permitted to retain.
• You can manage cookie and analytics choices through our Cookie Notice and your browser settings.

Where our tools support it, we honor the Global Privacy Control (GPC) and Do Not Track signals and treat them as a request to disable non-essential analytics. To exercise a privacy right, contact us at privacy@buyerpass.com. We may need to verify your identity before responding.

No sale of personal information

BuyerPass does not sell your personal information and does not share it for cross-context behavioral advertising. Advertising features in our analytics tools are turned off, and advertising pixels are not currently active on our site.

Minimum age

BuyerPass is intended for users who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the date at the top of this page and, where appropriate, notify you.

Contact us

Questions about this policy or your data? Email us at privacy@buyerpass.com or use our contact form.

Prefer to call? Reach us at (404) 236-9149.

You can also write to us at:
BuyerPass LLC
3343 Peachtree Rd NE
Ste 145-1286
Atlanta, GA 30326
USA