Privacy Policy

Effective Date: January 1, 2025

1. Overview

ExitVantage M&A Intelligence (“ExitVantage,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, phone number, and role (broker or owner).

Business Intake Information

To generate your deal package, we collect detailed information about your business, including financial data, operational details, deal structure preferences, and contact information. This information is used solely to generate your report.

Payment Information

We do not store your credit card numbers or full payment details. Payments are processed by Stripe, Inc. We receive only a payment confirmation token and transaction ID.

Usage and Technical Data

We may collect IP addresses, browser type, device information, and usage logs to operate, secure, and improve the platform.

3. How We Use Your Information

To generate and deliver your deal package report
To process payment and manage your account
To send transactional emails related to your order (generation status, delivery)
To provide customer support
To comply with legal obligations
To compile anonymized market intelligence benchmarks (see our Terms of Service, Section 7 for details)

4. Third-Party Service Providers

We share data with the following third-party services as necessary to provide the Service. Each is subject to its own privacy policy:

Supabase

Database and authentication hosting

Account data, order data, business intake data, reports

Stripe, Inc.

Payment processing

Payment information, billing details

AI Processing Provider

AI report generation

Business intake data is processed by our AI processing provider to generate reports. Our provider does not use API inputs to train models.

Resend

Transactional email delivery

Email address, order status information, report download links

Vercel, Inc.

Platform hosting and CDN

IP addresses, request logs, server-side data processing

Upstash

Rate limiting (Redis)

IP-based rate limit counters (no personal data)

5. Data Retention

We retain your account information and order data for as long as your account is active. If you request account deletion, we will delete your account and associated data within 30 days, subject to any legal obligations to retain certain records.

Anonymized transaction intelligence data (which contains no PII or business names) may be retained indefinitely for platform improvement purposes.

6. Data Security

We implement industry-standard security measures, including:

Encryption in transit (TLS/HTTPS) for all data
Encryption at rest for stored data via Supabase
Row-level security policies restricting data access
Signed, time-limited URLs for report PDF access (7-day expiry)
Service-role API keys never exposed to client-side code

No security system is impenetrable. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and associated personal data
Object to or restrict certain processing
Data portability

To exercise these rights, contact us at privacy@getexitvantage.com. You can also delete your account from your Dashboard > Settings > Account > Delete Account.

8. Cookies

We use only essential cookies required for authentication (session management via Supabase Auth). We do not use tracking, advertising, or analytics cookies. No third-party cookies are set.

9. Children's Privacy

The Service is intended for business owners and professionals aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by updating the Effective Date and, where appropriate, by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions, requests, or concerns, please contact us at privacy@getexitvantage.com.