Privacy Policy

1.1 Information You Provide

• Account Information: Name, email address, phone number, company name, billing address, and payment information
• Business Data: Information you upload, input, or generate through our tools including business listings, financial documents, tax returns, valuations, client information, and other proprietary business data
• Communications: Messages, feedback, support requests, and other correspondence with us
• Profile Information: Professional credentials, preferences, settings, and customizations

1.2 Automatically Collected Information

• Usage Data: Pages viewed, features accessed, time spent, click patterns, session recordings, and interaction with our AI tools
• Device Information: IP address, browser type and version, device type, operating system, unique device identifiers, mobile network information
• Cookies and Tracking: We use cookies, web beacons, pixels, local storage, and similar tracking technologies to collect information about your browsing behavior and preferences
• Location Data: General geographic location derived from IP address
• Performance Metrics: Error logs, crash reports, system performance data, and diagnostic information

1.3 Third-Party Information

We may receive information about you from third-party sources including analytics providers, advertising partners, payment processors, data enrichment services, and public databases. We may combine this information with data we collect directly from you.

1.4 Google Account Information

We interact with Google user data in two separate and distinct ways, each described in detail in Section 2:

• Authentication (All Users): When you create an account or log in using Google, we collect your basic Google profile information (name, email address, and profile picture) solely for account authentication.
• Email Hub (Optional): If you choose to connect your Gmail account within our Email Hub feature, we request additional Gmail scopes to allow you to send emails to your professional contacts and optionally auto-import buyer inquiry leads. This is entirely optional and is not required to use BizBrokerAITools.

2.1 Google Authentication (Login)

BizBrokerAITools allows users to create an account and log in using their Google account through Google's standard OAuth 2.0 authentication flow.

What we access:

• Your Google account email address (via the userinfo.email scope)
• Your basic profile information such as your name and profile picture (via the userinfo.profile scope)
• A unique account identifier (via the openid scope)

How we use it:

• ✓To create and authenticate your BizBrokerAITools account
• ✓To display your name and email address within the platform
• ✓To communicate with you about your account (transactional emails such as billing confirmations and account notifications)

What we do NOT do with your login data:

• ✕We do not access your Gmail inbox, contacts, calendar, or any other Google service through the login flow
• ✕We do not use your Google login information for advertising, retargeting, or custom audience creation
• ✕We do not sell, share, or transfer your Google login data to third parties for any purpose other than providing our Services

2.2 Email Hub — Optional Gmail Integration

BizBrokerAITools includes an optional feature called Email Hub that provides two capabilities for business brokers. This feature requires the user to explicitly choose to connect their Gmail account through a separate authorization flow.

Capability 1: Sending Emails

Email Hub allows brokers to send emails to their professional contacts (prospective business buyers and business seller clients) directly from within our platform.

Capability 2: Lead Auto-Import (Optional)

With the user's explicit approval, Email Hub can scan incoming emails for buyer inquiries originating from business listing marketplaces (such as BizBuySell.com). When a matching inquiry email is detected, the platform automatically parses the relevant lead information (buyer name, contact details, and the listing they inquired about) and imports it into the broker's pipeline. This scanning feature is optional and can be enabled or disabled by the user at any time within the platform settings. When disabled, no email scanning occurs.

What we access (via the gmail.compose and gmail.modify scopes):

• The ability to compose and send emails from your connected Gmail account
• The ability to read incoming emails for the sole purpose of identifying and importing buyer inquiry leads from business listing marketplaces, when you have enabled this feature

How we use it:

• ✓To send emails that you manually compose and initiate within Email Hub to your professional business contacts
• ✓To allow you to respond to multiple buyers who have inquired on the same business listing in a single action
• ✓To scan incoming emails and automatically import buyer inquiry leads from business listing marketplaces into your broker pipeline, only when you have explicitly enabled this feature

What data we extract and store from scanned emails:

• Buyer name, email address, phone number (if provided), and the business listing they inquired about
• This extracted lead data is stored in your BizBrokerAITools account as part of your buyer pipeline
• We do not store the full email message body, attachments, or any email content beyond the specific lead information described above

What we do NOT do with your Gmail data:

• ✕We do not scan or read emails for any purpose other than the lead auto-import feature described above, and only when you have enabled it
• ✕We do not store full email content, message bodies, or attachments
• ✕We do not send automated, bulk marketing, or unsolicited emails on your behalf — every outgoing email is manually initiated by you, and all recipients are contacts with whom you have an existing professional relationship
• ✕We do not use your Gmail data for advertising, retargeting, custom audiences, AI training, or any purpose other than the two capabilities described above

2.3 How We Store Google User Data

• Login data: Your Google account email, name, and profile information are stored securely as part of your BizBrokerAITools account record using encryption at rest.
• Email Hub data: Your Gmail OAuth authentication tokens are stored securely using encryption at rest. We do not store email content. Tokens are retained only for as long as your Gmail account remains connected.
• Lead data: Buyer inquiry information extracted through the lead auto-import feature is stored as part of your account's buyer pipeline using encryption at rest.

2.4 How We Share Google User Data

We do not sell, rent, share, transfer, or disclose any Google user data — whether from login or Email Hub — to any third party for any purpose. The only exceptions are:

• When required by applicable law, regulation, or valid legal process
• When necessary to protect the safety, rights, or property of our users or the public

2.5 Google API Services Limited Use Compliance

BizBrokerAITools' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• ✓We only use Google user data to provide and improve user-facing features of BizBrokerAITools
• ✓We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising
• ✓We do not use Google user data for training artificial intelligence or machine learning models
• ✓We do not sell Google user data to third parties
• ✓We do not use Google user data to determine creditworthiness or for lending purposes
• ✓We do not transfer Google user data to third parties unless necessary to provide user-facing features (with user consent), for security, or as required by law
• ✓We do not allow humans to read Google user data unless the user has given affirmative consent, it is necessary for security purposes, or it is required by law

2.6 Data Retention and Deletion for Google User Data

• Login data: Retained as part of your account for as long as your BizBrokerAITools account is active. Upon account deletion, all Google-related profile data is permanently deleted within 30 days.
• Email Hub data: Gmail OAuth authentication tokens are retained only for as long as you keep your Gmail account connected within Email Hub. You may disconnect at any time through your account settings, which immediately revokes our access and triggers deletion of stored tokens. No email content is ever retained.
• Lead data: Buyer inquiry information imported through the lead auto-import feature follows the same retention policies as other platform data described in Section 5.

• Service Delivery: To provide, operate, maintain, and improve our Services including AI-powered analysis, report generation, and business intelligence tools
• Account Management: To create and manage your account, authenticate users, process payments, and provide customer support
• Personalization: To customize your experience, remember preferences, and provide tailored recommendations
• AI Training and Improvement: To train, test, and improve our artificial intelligence models using aggregated and anonymized platform usage data. Google user data is never used for AI training.
• Product Development: To develop new features, conduct research, analyze trends, and enhance our platform functionality
• Marketing and Advertising: To send promotional materials, newsletters, product updates, and targeted advertisements. This applies only to platform data — Google user data is never used for marketing or advertising.
• Custom Audiences: To create custom audiences and retargeting campaigns using platform data such as email addresses you provide when creating your account. Google user data is never used for custom audiences or retargeting.
• Analytics: To measure effectiveness of our Services, understand user behavior, track conversions, and generate business intelligence
• Communications: To respond to inquiries, send transactional messages, provide technical support, and communicate important updates
• Security and Fraud Prevention: To detect, prevent, and respond to security incidents, fraudulent activity, and violations of our Terms of Service
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests

4.1 Service Providers

We engage third-party service providers to perform functions on our behalf, including cloud hosting, data storage, payment processing, email delivery, analytics, customer support, marketing, and advertising services. These providers have access to your platform information only to perform specific tasks and are obligated to protect your data. Google user data is not shared with service providers except as described in Section 2.

4.2 Advertising Partners

We share platform data (not Google user data) with advertising platforms including Facebook/Meta, Google Ads, LinkedIn, Reddit, and others to display targeted advertisements, create custom audiences, and measure advertising effectiveness. This may include hashed email addresses from your account registration, device identifiers, and behavioral data. Google user data obtained through login or Email Hub is never shared with advertising partners.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, your information may be transferred to the successor entity. You will be notified via email or prominent notice. Any successor entity will be bound by the Google user data restrictions in Section 2.

4.4 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government agencies), or to protect our rights, privacy, safety, or property.

4.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

4.6 Aggregated and De-identified Data

We may share aggregated, anonymized, or de-identified platform data that cannot reasonably identify you for research, analytics, or business purposes. Google user data is excluded from any such sharing.

We retain your platform information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on data type and purpose. Even after account deletion, we may retain certain platform information in backup systems for legal compliance, fraud prevention, or legitimate business purposes. De-identified or aggregated platform data may be retained indefinitely.

We use cookies, pixels, web beacons, local storage, and similar technologies to:

• Remember your preferences and settings
• Authenticate and maintain your session
• Analyze usage patterns and measure performance
• Deliver targeted advertising and track ad performance
• Create custom audiences for remarketing campaigns

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Services. We also use third-party analytics and advertising services (such as Google Analytics, Facebook Pixel, and similar tools) that use their own tracking technologies. These tracking technologies apply to your use of our platform and website. They do not access or interact with Google user data obtained through login authentication or Email Hub Gmail scopes.

We implement reasonable administrative, technical, and physical security measures designed to protect your information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data at rest and in transit, access controls, regular security assessments, and secure infrastructure. Google OAuth tokens are stored using encryption at rest.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. You acknowledge and accept the inherent security risks of providing information online.

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to certain exceptions
• Opt-Out: Unsubscribe from marketing communications via the unsubscribe link or by contacting us
• Data Portability: Request a copy of your data in a portable format (where applicable)
• Object to Processing: Object to certain types of data processing (where applicable)
• Disconnect Gmail (Email Hub): You may disconnect your Gmail account from Email Hub at any time through your account settings. This immediately revokes our ability to send emails on your behalf, stops all email scanning, and deletes stored authentication tokens.

To exercise these rights, contact us using the information in Section 13. We will respond to verified requests in accordance with applicable law.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information. If you believe we have collected information from a child, please contact us immediately.

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States, where data protection laws may differ. By using our Services, you consent to the transfer of your information to these countries. We take steps to ensure appropriate safeguards are in place, but cannot guarantee the same level of protection as in your jurisdiction.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we have collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out of Sale: Opt out of sharing that could constitute a "sale"
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, contact us at the information provided in Section 13.

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting the updated policy on our Services. The "Last Updated" date at the top will reflect when changes were made. We may notify you of material changes via email or prominent notice on our Services. Your continued use of our Services after changes constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

IMPORTANT LEGAL PROTECTIONS:

By using our Services, you consent to our collection, use, and sharing of your platform information for marketing purposes, including but not limited to: sending promotional emails and SMS messages; displaying targeted advertisements on third-party platforms; creating custom audiences and lookalike audiences for advertising campaigns using your account registration data; tracking your interactions across devices and platforms; and analyzing your behavior to improve our marketing effectiveness. You may opt out of marketing communications at any time, but this will not affect our use of your data for other purposes described in this policy.