Privacy
How BizScore handles your data.
Last updated: this page is under counsel review. The technical posture below is what BizScore already does in code today; the formal Privacy Policy will replace this text once our attorney has signed off.
What we collect
When you create an account we collect your email address (for sign-in and transactional emails). When you create a deal we collect the seller's asking price, business type, and location, plus the financial documents you choose to upload. We do not collect anything you don't hand us directly.
How your documents are stored
Uploaded financial documents are encrypted in storage. Every document and report row is locked to your account, which means even another BizScore user signed into their own account cannot see your files. Documents are automatically deleted 90 days after upload.
How AI analysis works
Your documents are sent to our AI analysis provider solely to produce your report. Under our agreement, the provider is contractually prohibited from training any model on the documents you upload, and does not retain them for any purpose other than producing the response we requested. We never share your documents with anyone outside the sub-processors listed at the bottom of this page.
Your rights
You can request a copy of everything we have on you, or ask us to delete it. Email support@bizscoreapp.com and we'll respond within seven days. Note that backups may retain your data for up to 7 additional days after deletion before final expiry.
Questions
Email support@bizscoreapp.com. We treat every privacy question as transactional, not marketing — you'll only hear back about the answer.
Sub-processors
The following third-party services process data on our behalf to deliver BizScore. Each operates under a Data Processing Agreement and is bound by its own privacy policy.
- Supabase — database, encrypted file storage, and authentication.
- Anthropic — AI model used to produce the BizScore Report.
- Stripe — payment processing and PCI-compliant card handling.
- Resend — transactional email delivery (receipts, login links, report-ready notifications).
- Sentry — error monitoring; we send error metadata, not your documents.
- Vercel and Railway — hosting providers that run the BizScore website and API.
We'll update this list at least 30 days before any new sub-processor begins handling user data. If you have objections to a listed provider, email support@bizscoreapp.com.