Privacy Policy

SellYourSMB ("we," "our," or "us") operates the website located at sellyoursmb.com and provides the SellYourSMB Audit™ service (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Personal Information

We may collect personally identifiable information that you voluntarily provide when using our Service, including:

• Full name
• Email address
• Phone number (if provided)
• Company name
• Job title or role

Business & Financial Data

When you complete the SellYourSMB Audit™, we collect business information you provide through our questionnaire, including but not limited to:

• Annual revenue, net income, and revenue trends
• Owner salary, distributions, and discretionary add-backs
• Business debt and financial obligations
• Profit margins and financial metrics
• Business structure and operational details
• Employee count and organizational information
• Customer concentration and revenue composition
• Owner involvement and dependence metrics
• Industry and business type

Payment Data

We use Stripe, Inc. as our payment processor. When you make a purchase, your payment information (credit card number, billing address, etc.) is collected and processed directly by Stripe. We do not store your full credit card number on our servers. We may receive limited payment information from Stripe, such as the last four digits of your card, card type, and billing country.

Usage Data

We automatically collect certain information when you access the Service, including:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent, and navigation patterns
• Referring URL
• Date and time of access

2. How We Use Your Information

We use the information we collect to:

• Deliver the Service: Calculate your sellability score, generate AI-powered analysis, estimate a valuation range, and produce your personalized SellYourSMB Report™
• Process payments: Complete your purchase transaction via Stripe
• Personalized video review: Deliver a custom video walkthrough of your scorecard results
• Communicate with you: Send your report, respond to inquiries, and provide customer support
• Send transactional emails: Order confirmations, report delivery, and account-related notifications
• Improve the Service: Analyze usage patterns, diagnose technical issues, and enhance the accuracy and quality of our analysis
• Marketing communications: With your consent, send newsletters and updates related to exit planning and business exit readiness (you may opt out at any time)
• Legal compliance: Fulfill legal obligations and enforce our Terms of Service

3. How We Share Your Information

We do not sell your personal information or business data. We may share your information with the following categories of third parties, solely to operate and deliver the Service:

• Stripe, Inc.: Payment processing. Stripe's privacy policy governs their use of your payment data.
• Anthropic: Your business questionnaire responses are processed through Anthropic's AI models to generate your SellYourSMB Report™. Data sent to Anthropic is used solely for analysis generation — Anthropic does not use your data to train their models. Subject to Anthropic's data processing terms.
• Notion: We use Notion as a CRM to manage customer records and audit submissions for internal operations.
• Supabase: Secure database hosting and authentication services.
• Resend: Transactional email delivery (report delivery, order confirmations).
• Vercel: Website hosting and content delivery.

We may also disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Security

We implement commercially reasonable security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments
• Limited employee access to personal data on a need-to-know basis

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights

You have the following rights regarding your personal information, regardless of where you live:

• Access & Export: Request a copy of all personal and business information we hold about you, delivered in a machine-readable format
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and business data. We'll remove it within 30 days, subject to legal retention requirements
• Opt-out of marketing: Unsubscribe from marketing communications at any time via the unsubscribe link in any email, or by contacting us directly

To exercise any of these rights, email us at support@sellyoursmb.com. We will respond to your request within 30 days. No lawyer needed — just ask.

6. Cookies & Tracking

We use only essential cookies to provide our services. We do not use advertising or third-party tracking cookies. Specifically:

• Session cookies to maintain your authentication state
• Consent tracking to remember your cookie preferences
• Customer identification cookies (set after checkout, expires in 24 hours)

You can control cookies through your browser settings. Disabling cookies may limit certain features of the Service.

7. Data Retention

Survey data and business information are retained for up to 24 months from your submission date. Your SellYourSMB Report™ and associated data are retained to allow you continued access to your results during that period.

Financial data (revenue, income, salary, debt figures) is stored securely and encrypted at rest. We treat your financial information with the same care you would expect from a professional advisor.

If you request deletion of your data, we will remove your personal and business information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution). You can request deletion at any time by emailing support@sellyoursmb.com.

Payment records are retained as required by applicable tax and financial regulations.

8. Third-Party Services

The Service integrates with the following third-party providers. Each has its own privacy policy governing their use of your data:

• Stripe — Payment processing (stripe.com/privacy)
• Anthropic — AI analysis generation. Does not train on your data (anthropic.com/privacy)
• Notion — CRM and internal record-keeping (notion.so/privacy)
• Supabase — Database and authentication (supabase.com/privacy)
• Resend — Email delivery (resend.com/legal/privacy-policy)
• Vercel — Website hosting (vercel.com/legal/privacy-policy)

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page and updating the "Effective Date" above. We may also notify you via email for significant changes. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

• Email: support@sellyoursmb.com
• Website: sellyoursmb.com/contact