What we hold, and who sees it

What we collect

Your account email, and whatever you enter about your business: its name and location, the earnings figures and add-backs you supply, your description of the operation, and the contact details you want buyers to use. We do not ask for bank credentials, tax identification numbers, or customer records, and you should not enter them.

Who it is shared with

We do not sell your information, and we do not share it with buyers, brokers, or marketplaces. It is processed by these services on our behalf:

Processor	What reaches them	Why
An AI language service (currently OpenRouter, routing to Anthropic)	The descriptive fields only — what the business does, its operations and growth notes. Your financial figures are inserted by our own document system afterwards and are not sent.	To draft the narrative sections of the memorandum. Sent under commercial API terms that prohibit training on the content.
Stripe	Your email and payment details, which go directly to Stripe.	Payment processing. We never see or store card numbers.
Amazon Web Services (SES)	Your email address and message content.	Sending you email.

Everything else stays on our own server. Generated documents are stored outside the public web root and served only to your logged-in account.

How long it is kept

Your document room stays open for twelve months from purchase. Ninety days after it closes, the kit's answers and generated files are purged automatically and your account row is anonymised.

One honest caveat that most privacy policies omit: the server takes encrypted weekly backups, and a purged record can persist in those backups until they age out of the retention window. Deletion from the live system is immediate; deletion from history follows the backup cycle.

Deleting your data sooner

Ask us at any time via the contact form and we will purge your kits and anonymise your account. You do not have to give a reason, and it does not affect any refund you are owed.

Cookies

One session cookie to keep you logged in. No advertising cookies, no third-party trackers, no cross-site profiling.

Confidentiality of a sale

Selling a business is sensitive, and word getting out early can cost you staff and customers. We never publish your listing, never contact your buyers, and never identify you publicly. The blind memorandum and listing copy are built specifically so you can approach buyers without naming the business until you choose to.