Privacy Notice

Information we collect

We collect the email address and authentication records used for your account; the phone number you provide at checkout; listing details, seller notes, answers, and files you submit; reports, exports, and shares you create; service activity, audit, security, and diagnostic records; and billing identifiers and entitlement status received from Stripe. BuyerNotes does not receive your full payment-card number.

Public-source research may be collected to provide market and business context. Reports keep evidence labels and source references so public context is distinguishable from seller-provided or buyer-provided material.

How we use information

We use information to authenticate you, provide and improve the service, process documents, generate reports, fulfill purchases, maintain security and reliability, answer support requests, prevent misuse, and comply with legal obligations.

BuyerNotes uses submitted deal context and document text to generate AI-assisted output. Reports can be incomplete or wrong and are not legal, tax, accounting, financing, investment, or other professional advice.

Service providers and disclosure

We use service providers for hosting and isolated processing (Vercel), database infrastructure, email delivery (Resend), payments (Stripe), and AI processing (OpenAI). They receive only the information needed to perform their services under their own terms and data-processing commitments.

We may also disclose information when required by law, to protect users or the service, in connection with a corporate transaction, or with your direction. We do not sell personal information or export raw third-party licensed datasets through BuyerNotes.

Retention and deletion

Magic links expire after 10 minutes and signed-in sessions after 7 days. Shared public-research cache entries expire after 7, 14, 21, or 30 days depending on the research type. Queue rehearsal receipts are deleted after 30 days.

Account, deal, source-document, report, export, billing, security, audit, and deletion records are otherwise retained while needed to provide the service, preserve transaction and deletion evidence, meet legal or dispute obligations, and protect the service. Deal, document, and generated-export deletion controls are available in the application. Account deletion is not currently self-service; contact us for an owned review.

Deletion from active systems may not immediately remove data from provider backups. Backup copies age out under the approved provider schedule and are subject to post-restore deletion reconciliation.

Your choices

You can avoid submitting optional deal information, revoke public report shares, and request deletion through available workspace controls. You may ask for access, correction, deletion, or other privacy help by contacting us. We may need to verify your identity and may retain limited records when legally or operationally required.

Security, age, and changes

We use access controls, private storage, bounded signed links, audit records, and isolated document parsing, but no system can guarantee absolute security. Do not upload data you are not authorized to provide or regulated personal information that is unnecessary for acquisition review.

BuyerNotes is for adults and is not directed to children under 18. If this notice materially changes, we will publish a new version and require renewed acceptance through the sign-in flow.