Privacy Policy

1.Who we are

BankerBuyerList is a subscription database that helps bankers, business brokers and M&A advisors find the private equity firms, portfolio companies and other acquirers likely to buy a business, and the people who make those decisions. In this policy, “we”, “us” and “our” mean the operator of BankerBuyerList. “You” means a visitor, a subscriber, or a person whose business details appear in the database.

For privacy questions and requests, email jack@bizvalwriters.com.

2.Information we collect about subscribers

When you create an account and use the workspace, we collect:

• Account details: your name, work email address, the name of your organization and your role in it. Passwords are handled by our authentication provider and stored only as a secure hash; we never see them. If you sign in with Google, we receive your name and email address from Google.
• Workspace content: the projects you create, the criteria you set, the companies you pin, notes, and the do-not-contact flags you set. These belong to your organization and are not shown to other organizations.
• Corrections: changes you make to a company or person record, with your account and the time. The corrected value becomes part of the shared database; other subscribers see that it came from a subscriber correction, while only your own organization and our administrators see who made it.
• Recommendations and uploads: messages you send through the recommendations button, the page you sent them from, and any screenshot you attach.
• Billing: payments are processed by Stripe. We receive and store your Stripe customer and subscription identifiers, the plan, its status and its renewal or cancellation dates. We never receive or store your card number; Stripe does.
• Usage and technical data: records of actions such as exports (the time, the number of rows and columns, not the file), and the IP address, browser type, pages requested and errors that our hosting provider logs for security and troubleshooting.
• Messages you send us by email.

3.Where the company and people data comes from

The database describes businesses (private equity firms, their portfolio companies, family offices, search funds and other acquirers) and the professionals who work at them, in their professional capacity: names, job titles and roles, business email addresses, business phone numbers, links to professional profiles, office locations and professional background. It comes from:

• Public websites. Our crawler reads publicly available pages of firms and companies, such as team, portfolio and news pages. It obeys robots.txt, signs in nowhere and fetches nothing behind a login. How the crawler behaves.
• Lists we provide. Lists of firms and professional records that the operator compiles or obtains from public or licensed sources.
• Subscriber corrections. Changes subscribers make when they know a value is wrong or out of date.
• Email verification. Email addresses that subscribers type in, and addresses we infer from a company’s email format (for example first.last@), are checked with MailTester, which tests whether the mailbox exists without sending it a message. Only the email address is sent, never a name, phone number or anything else. Addresses published on a company’s own website are shown as found there and are not sent for verification.

Every value in the database shows where it came from: the source page or list, the date and how it was obtained. Inferred addresses are labelled as inferred until verified. We do not deliberately collect home addresses, personal social media, or sensitive information such as health, religion or political opinions.

4.How we use information

• To provide the service: sign-in, projects, search, exports and support.
• To bill subscriptions and keep accounts in good standing.
• To keep the data accurate: re-checking sources, verifying email addresses and reviewing corrections.
• To keep the service secure: detecting abuse such as shared accounts, automated scraping or attempts to reach another organization’s data.
• To read and act on recommendations and bug reports.
• To meet legal obligations, such as tax records and lawful requests.

5.Why we are allowed to use it

For subscribers, we use account, workspace and billing information to perform our contract with you, and usage data for our legitimate interest in running a secure, reliable service. Some records, such as billing records, we keep because the law requires it.

For people listed in the database, we rely on legitimate interests: helping bankers and business brokers find and contact the right professionals about buying and selling businesses. We limit the data to business contact details and professional information, show where every value came from, never sell it for advertising, and remove anyone who asks. Where the law of your country requires a different basis, we rely on that basis or remove your information.

6.Who we share it with

Subscribers can search and export the company and people data; that is the product. Your organization’s projects, flags and notes are visible only to your organization and, for support, our administrators.

Service providers process data on our behalf, under their own security and privacy commitments:

• Supabase: database, authentication and file storage.
• Vercel: hosting and delivery of the website and application.
• Stripe: payments and subscription billing. Stripe is also responsible for payment data under its own privacy policy.
• MailTester: email address verification (it receives the email address only).
• Google: sign-in, if you choose “Continue with Google”.
• Our email provider: account emails such as sign-up confirmations and password resets, and operational alerts.

We may also disclose information when the law requires it, to protect our rights or others’ safety, or to a buyer of the service, who would be bound by this policy. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7.Cookies and local storage

• Session cookies keep you signed in and protect your account. They are strictly necessary and are cleared when you sign out.
• Preferences such as the colour theme, whether the project list is collapsed and which grid columns you show are kept in your own browser’s local storage. They are not sent to us.

We use no advertising, tracking or third-party analytics cookies, so there is no cookie banner to click. Stripe’s checkout pages, which are hosted by Stripe, set Stripe’s own cookies for fraud prevention.

8.How long we keep it

• Accounts and workspace content: while your account is open. When an account is closed we delete or anonymise its personal information, except records the law requires us to keep, such as billing records.
• Corrections: as part of each record’s history for as long as the record exists, because they explain where a value came from.
• Recommendations and screenshots: until they have been dealt with; deleting a recommendation deletes its screenshot.
• Server logs: for a short period set by our hosting provider.
• Company and people records: while they remain accurate and useful. Sources are revisited on a schedule, and email verification results are cached for a limited time so the same address is not checked again and again.
• Removal requests: we delete the record and keep only what is needed to stop it from being collected again.

9.Your choices and rights

If you are listed in the database you can ask what we hold about you, ask us to correct it, or ask us to remove it. Email jack@bizvalwriters.com with your name, company and the email address or profile we should look for. We complete requests within 30 days, or sooner where the law requires, and keep you from being added back. A removal takes you out of the database for every subscriber, not just one.

If you are a subscriber you can see and change most of your information in the workspace, and ask us for a copy of it or to close your account and delete it.

Depending on where you live, for example in the European Union, the United Kingdom, California or another US state with a privacy law, you may also have the right to data portability, to object to or restrict processing, and to complain to your data protection authority. We may need to confirm your identity before acting on a request, and we will not treat you differently for exercising your rights.

10.Security

Data travels over encrypted connections (TLS) and is encrypted at rest by our providers. Each organization’s workspace data is kept separate by access controls in the application and in the database. Passwords are stored only as hashes by our authentication provider, and card details stay with Stripe. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

11.Where data is processed

We and our service providers process data in the United States and other countries where they operate. When information about people outside the United States is transferred, we rely on the safeguards our providers offer, such as standard contractual clauses.

12.Children

BankerBuyerList is a business service for professionals. It is not directed to anyone under 18, and we do not knowingly collect information about children. If you believe we have, email jack@bizvalwriters.com and we will delete it.

13.Changes to this policy

When we change this policy we update the effective date at the top. If a change is significant, we tell subscribers by email or in the workspace before it takes effect.

14.Contact

Questions, requests and complaints: jack@bizvalwriters.com. We answer every message.