Privacy Policy

1. Introduction

Sell Any Biz USA, LLC ("SellAnyBiz," "we," "us," or "our") operates an AI-powered marketplace that connects buyers, sellers, investors, and brokers of businesses. This Privacy Policy explains what information we collect when you use our App, how we use it, who we share it with, and what rights you have over your data. By creating an account or using the App, you agree to the practices described here.

2. Information We Collect

• Account & Profile Data: Name, email address, phone number, profile photo, role (buyer, seller, broker, investor), workspace affiliation, and authentication credentials (via email magic link or OAuth providers such as Google).
• Business Listing Data: Information you submit when listing a business for sale — financials, descriptions, location, industry, assets, documents, and media uploads.
• Communication Data: Messages, chats, mentions, read receipts, meeting notes, and transcripts generated within the App's inbox and meeting tools.
• AI Interaction Data: Prompts, conversations, and content you share with our AI assistants (Alisha AI, Copilot, Listing Builder, Public Agent) used to generate responses and improve the service.
• Transactional Data: Subscription plan, billing records, payment identifiers (processed via third-party payment providers — we do not store raw card numbers), invoices, and commission records.
• Device & Usage Data: IP address, browser type, operating system, device identifiers, pages visited, click activity, session duration, and diagnostic logs.
• Location Data: Approximate geolocation derived from your IP address for regional listing relevance and compliance.
• Cookies & Similar Technologies: Session cookies, authentication cookies, and analytics identifiers. See Section 8 for details.

3. How We Use Your Information

• Service Delivery: Operate the marketplace, match buyers and sellers, facilitate messaging, and execute in-app contracts.
• AI Features: Process your inputs through large language models to power matchmaking, listing generation, copilot assistance, and automated guidance.
• Account Management: Authenticate sessions, enforce workspace permissions, and prevent unauthorized access.
• Communications: Send transactional emails, WhatsApp notifications, and in-app alerts related to your activity, listings, and account.
• Analytics & Improvement: Monitor platform performance, debug issues, and improve features using aggregated usage data.
• Legal Compliance: Meet regulatory obligations, respond to lawful requests, and enforce our Terms of Service.
• Fraud Prevention: Detect and prevent fraudulent activity, spam, abuse, and security incidents.

4. AI & Automated Processing

SellAnyBiz uses AI assistants to generate listing content, answer questions, and facilitate conversations. When you interact with an AI feature:

• Data Sent to Providers: Your prompts and relevant context may be sent to third-party model providers (e.g., OpenAI, OpenRouter) strictly to generate a response.
• No Training on Your Data: We do not permit model providers to use your conversations to train their base models, subject to each provider's data-use policy.
• AI-Generated Output: Outputs are suggestions only and should be independently verified. SellAnyBiz is not liable for decisions made solely on AI output.
• No Solely Automated Decisions: We do not make legally significant decisions (such as approving a transaction) based only on automated processing without human involvement.

5. How We Share Your Information

• Other Users: Your profile name, photo, listing details, and messages are visible to users you interact with in chats, deals, or public listings.
• Service Providers: We share data with vetted processors — hosting (Supabase, Vercel), email delivery, WhatsApp messaging, payment processing, analytics, and AI model providers — strictly to operate the App.
• Legal & Safety: We may disclose information to comply with law, respond to subpoenas, protect our rights, or investigate fraud.
• Business Transfers: If SellAnyBiz is acquired, merged, or reorganized, user data may be transferred as part of that transaction under the same privacy protections.
• With Your Consent: Any other sharing is done only after we ask you.

We do not sell your personal information to advertisers or data brokers.

6. Data Retention

We retain your account data for as long as your account is active, plus any period required to comply with legal, tax, and audit obligations. Messages, listings, and transactional records may be retained for up to seven years. You may request deletion of your account at any time (see Section 9). Certain data may be retained in backups for a limited period even after deletion, and may persist in aggregated anonymized form.

7. Data Security

We use industry-standard safeguards to protect your data, including TLS encryption in transit, encrypted database storage, row-level security at the database layer, role-based access control, rate limiting, and audit logging. Despite these measures, no system is entirely secure, and you use the App at your own risk. If we become aware of a security incident affecting your data, we will notify you in accordance with applicable law.

8. Cookies & Tracking

We use cookies and similar technologies for the following purposes:

• Strictly Necessary: Authentication, session management, and workspace context. These cannot be disabled.
• Functional: Theme preference, language, and user interface settings.
• Analytics: Understanding aggregate usage to improve the App. You may opt out via browser controls.

You can clear or block cookies through your browser settings, but some features of the App may not function properly without them.

9. Your Rights

Depending on your jurisdiction (including the EU/UK under GDPR, California under CCPA/CPRA, and the UAE), you may have the following rights over your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data, subject to legal retention requirements.
• Portability: Receive your data in a structured, machine-readable format.
• Objection & Restriction: Object to or restrict certain processing activities.
• Withdraw Consent: Withdraw consent for any processing based on consent, without affecting the legality of prior processing.
• Complaint: Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in Section 13. We will respond within the timeframes required by applicable law.

10. International Data Transfers

Our services operate across the United States, United Kingdom, United Arab Emirates, and other regions. Your data may be transferred to and processed in countries outside your own. When we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses or rely on adequacy decisions issued by regulators.

11. Third-Party Services

The App integrates with third-party services including Google (sign-in, calendar, analytics), payment processors, AI model providers (OpenAI, OpenRouter), messaging APIs (WhatsApp), and hosting platforms (Supabase, Vercel). Each third party has its own privacy policy, and we encourage you to review them. We are not responsible for the privacy practices of external websites linked from the App.

12. Children's Privacy

The App is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete it.

13. Contact Us

For privacy questions, data requests, or concerns about this policy, contact us at:

• Email: privacy@sellanybiz.ai
• Entity: Sell Any Biz USA, LLC
• Jurisdiction: State of Florida, United States

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email or a prominent notice in the App before the change takes effect. The "Effective Date" at the top of this page indicates the latest revision. Your continued use of the App after an update constitutes acceptance of the revised policy.