Privacy Notice

Scope

BuyerNotes is currently offered only in the United States. This notice applies to the BuyerNotes website, account, checkout, report, export, sharing, and support experiences.

Before you submit deal material

Submit only information you are authorized to share and that is reasonably needed for the acquisition question you want BuyerNotes to review. BuyerNotes cannot determine whether a seller, employer, customer, or other person gave you permission to provide a record.

Minimize and redact files before upload where practical. Remove unrelated pages and redact Social Security and taxpayer-identification numbers, full bank-account and routing numbers, payment-card details, government-identification numbers, passwords, access credentials, and other secrets that the report does not need.

Remove unnecessary employee and customer personal information. Do not submit health, biometric, children's, or other regulated or especially sensitive information unless it is necessary for the review and you are authorized to provide it. If you need a record but cannot safely minimize it, ask the seller or record owner for a redacted copy.

Information we collect

We collect the email address and sign-in records used for your account; the phone number you provide at checkout; listing details, seller notes, answers, and files you submit; reports, exports, and shares you create; support communications; records of product use, security events, and errors; technical request data such as IP-derived security signals, device or browser type, timestamps, and requested pages; and payment references and paid-access status received from Stripe. BuyerNotes does not receive your full payment-card number.

We use Vercel Web Analytics to understand aggregate use of fixed public marketing pages. Analytics excludes authentication, checkout, dashboard, deal, admin, and unlisted report-share routes, and removes query strings before an event can be sent. Depending on the request, anonymous measurement for an allowed public page may include a timestamp, page path, referrer, coarse location, operating system, browser, and device type. BuyerNotes does not use this analytics service to recognize you across websites.

Public-source research may be collected to provide market and business context. Reports keep evidence labels and source references so public context is distinguishable from seller-provided or buyer-provided material.

How we use information

We use information to authenticate you, provide and improve the service, process documents, generate reports, fulfill purchases, maintain security and reliability, answer support requests, prevent misuse, and comply with legal obligations.

BuyerNotes uses submitted deal context and document text to generate AI-assisted output. Reports can be incomplete or wrong and are not legal, tax, accounting, financing, investment, or other professional advice.

Service providers and disclosure

We use service providers for hosting, storage, separate document processing, service logs, and anonymous web analytics (Vercel); database infrastructure (Neon); email delivery (Resend); payments (Stripe); and AI processing (OpenAI). They receive information only as needed to perform their services for BuyerNotes under applicable service terms and data-processing commitments.

OpenAI is a BuyerNotes subprocessor. BuyerNotes uses a dedicated production API project, requests that model responses are not stored, keeps production traces free of request and response content, and does not opt in to model-training data sharing. Until Zero Data Retention is approved and enabled, OpenAI may retain customer content in abuse-monitoring logs for up to 30 days under its default API controls.

We may also disclose information when required by law, to protect users or the service, in connection with a corporate transaction, or with your direction. We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or export raw third-party licensed datasets through BuyerNotes.

Cookies, browser storage, and analytics

BuyerNotes uses an essential secure cookie to keep you signed in. It also uses local or session browser storage for limited product functions such as preserving an unfinished deal draft or coordinating report-generation status in that browser. Clearing browser data may remove that local state or sign you out.

Vercel Web Analytics is configured as privacy-oriented aggregate measurement on fixed public marketing pages only and does not use cookies or persistent cross-site identifiers by default. BuyerNotes does not currently use advertising cookies.

Retention and deletion

Magic links expire after 10 minutes and signed-in sessions after 7 days. Temporary saved copies of public research expire after 7, 14, 21, or 30 days depending on the research type. Records created while testing background report processing are deleted after 30 days.

When you create a report share link, you choose an expiry from 1 to 30 days and can revoke it sooner. We call these unlisted share links, not public shares: they are not published in a public directory, but they are not restricted to a named recipient, so anyone with the live URL can view the shared report until the link expires or is revoked.

Deal details, source documents, reports, exports, and shares remain available until you delete or revoke them. An accepted deletion request makes the affected material unavailable immediately and targets removal from systems used to provide the product within 24 hours. Proof that deletion completed and limited operational and security records are retained for 12 months, after which identifying links and nonessential metadata are anonymized.

Unpaid or expired checkout records are deleted after payment status has been resolved and 45 days have passed. Billing and tax records may be retained for up to 7 years. Account-wide deletion is not currently available. You can delete eligible deal material and exports, and revoke share links, with the controls in your workspace. Contact us with an account-level privacy request; after verifying your identity, we will explain the actions currently available and any records we must retain.

Deletion from systems used to provide the product may not immediately remove data from provider backups. Backup copies must expire within 30 days under the approved provider schedule. If a backup is restored during that period, BuyerNotes reapplies accepted deletion requests so the material is removed again.

Your privacy rights and choices

You can avoid submitting optional deal information, revoke unlisted report share links, and request deletion through available workspace controls. Depending on applicable law, you may ask to access or know about, correct, delete, or receive a portable copy of personal information associated with you. You may also request any applicable opt-out or limitation right, or appeal our response to a request.

BuyerNotes does not discriminate against you for exercising an applicable privacy right. You or an authorized agent may contact us using the address below. We may need to verify your identity and the agent's authority, and we may retain or decline to delete limited information when legally or operationally permitted. We will explain a denial and any available appeal process.

Security, age, and changes

We use access controls, private storage, protected links limited to a specific purpose and lifetime, activity records, and document processing isolated from the rest of the application, but no system can guarantee absolute security. Authorization and redaction reduce unnecessary exposure but do not eliminate all risk.

BuyerNotes is for adults and is not directed to children under 18. We do not knowingly collect personal information from children.

We may update this notice as the service or law changes. We will post the revised effective date and, for a material change, require renewed acceptance through the sign-in flow or provide another appropriate notice.