Biz List Privacy Policy

Effective Date: October 15, 2026 — Last Updated: October 15, 2026

This Privacy Policy explains what information JOIN BIZ LIST LLC, d/b/a Biz List, 3908 Perrier Street, New Orleans, LA 70115 ("Biz List," "we," "us") collects, how we use and share it, how we protect it, and the choices you have. It applies to https://joinbizlist.com and our related services (the "Platform"). Capitalized terms not defined here have the meaning in our Terms of Service.

The short version: we collect sensitive financial information, including business tax returns and buyer financial details, only to run the Platform. We do not sell your personal information. We share seller details with buyers only after the seller has opted in, and only with buyers who are verified, have signed our confidentiality agreement, and are not on the seller's exclusion list. We use carefully selected service providers, including AI providers, under contract.

1. Information We Collect

1.1 Information you give us

Account information: name, email, phone, password, company name, role, and location.

Seller information: business tax returns (for example IRS Forms 1120, 1120-S, 1065, or Schedule C) and any attachments, which may include owner names, addresses, Social Security numbers or EINs, ownership percentages, compensation, and other details; optional financial statements, bank or revenue data, photos of the business, and answers to questionnaires.

Buyer verification information: government-issued ID (which may include photo, date of birth, ID number, and address), bank or lender letters, proof of funds or financing capacity, and self-reported or documented financial information such as credit score, net worth, liquid assets, and income; acquisition criteria; and entity or fund information for family offices and private equity firms.

Financing readiness inputs: information you enter into the readiness tool, such as credit range, cash available, experience, and target deal size.

Payment information: handled by our payment processor. We receive limited details (for example, the last four digits of a card and billing ZIP), not full card numbers.

Communications: messages you send us or other users through the Platform, and support requests.

1.2 Information we collect automatically

Device and log data (IP address, browser type, pages viewed, time stamps), cookies and similar technologies, and approximate location derived from IP. See Section 9.

1.3 Information from others

Identity and document verification results from our verification providers; information from co-owners or advisors you invite; and publicly available business information.

2. How We Use Information

To create and run your account and provide the Platform.

To extract, organize, and display data from your uploads, and to let you confirm or correct it.

To produce indicative valuation ranges, readiness scores, anonymized teasers, and due diligence packets.

To verify buyers and help prevent fraud, misuse, and security incidents.

To match opted-in sellers with verified buyers and make introductions.

To process payments, send transactional messages, and provide support.

To improve and develop the Platform, including using de-identified or aggregated data.

To comply with law, enforce our agreements, and protect rights and safety.

With your consent, for marketing. You can unsubscribe at any time.

3. AI Processing

We use artificial intelligence and machine-learning services from our AI service providers to read documents, extract data, summarize information, generate teasers and due diligence packets, and support valuations. When we do this:

your information is sent to the AI provider only to perform the task for us, under contract terms that prohibit the provider from using your data to train its models;

AI outputs are reviewed by you (for extraction) or labeled as AI-generated (for packets and teasers);

we do not use AI to make decisions that produce legal or similarly significant effects about you without human involvement. Buyer verification decisions involve human review.

4. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

With other users, in stages, for sellers who opt in: (1) an anonymized teaser (for example industry, region, revenue range, valuation range) to verified buyers; (2) identifying and detailed information (limited to documents the seller marked shareable) to any verified buyer who has accepted the Buyer Confidentiality and Non-Circumvention Agreement and is not on the seller's exclusion list, under the seller's one-time authorization and without further seller approval; and (3) due diligence packets to those buyers who purchase them. Sellers are notified when a buyer accesses their full details or buys a packet.

Buyer information shared with sellers: a buyer's name, entity, verification status, and a summary of financial capacity (for example, "proof of funds verified"). We do not share a buyer's ID images, bank letters, credit score, or detailed financial documents with sellers.

Service providers that process data on our behalf under contract, including: Supabase (database hosting, Postgres); Amazon Web Services (file storage in private S3 buckets); our AI service providers; our identity verification providers; our payment processor; our email service providers; our analytics service providers; and our error monitoring providers.

Professional advisors such as lawyers, accountants, and insurers, under confidentiality duties.

Legal and safety: when required by law, subpoena, or court order, or to protect rights, property, or safety, or to investigate fraud.

Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

With your consent or at your direction.

5. Data Retention

We keep information only as long as needed for the purposes in this Policy, then delete or de-identify it. Our planned schedule:

Information a buyer received before a seller's withdrawal remains subject to the buyer's confidentiality obligations.

6. Security

We use administrative, technical, and physical safeguards designed to protect your information, including: encryption in transit (TLS) and at rest; private AWS S3 buckets with public access blocked and short-lived signed URLs for downloads; Postgres row-level security and role-based access in Supabase; least-privilege employee access with multi-factor authentication; access logging; vendor security review; and an incident response plan. No system is perfectly secure, and we cannot guarantee security. If a breach affects your personal information, we will notify you and regulators as required by law, including the Louisiana Database Security Breach Notification Law (La. R.S. 51:3071 et seq.).

7. Your Choices and Rights

Access and correction: review and update most information in your account settings, or contact us.

Deletion: ask us to delete your account and information. We may keep some records as required by law or to resolve disputes and enforce agreements.

Withdraw from matching: sellers may turn off matching at any time.

Marketing: unsubscribe using the link in any marketing email.

Cookies: control cookies through your browser.

To make a request, email ryan@joinbizlist.com. We will verify your identity before acting on a request.

8. State Privacy Rights — CCPA-Style Notice

If you are a resident of California or another state with a comprehensive privacy law, you may have the right to: (a) know the categories and specific pieces of personal information we collect, use, and disclose; (b) delete personal information; (c) correct inaccurate personal information; (d) opt out of the "sale" or "sharing" of personal information (we do not sell or share as defined); (e) limit use of sensitive personal information (we use sensitive personal information, such as government ID numbers, financial account information, and precise financial details, only for purposes permitted by law); and (f) not be discriminated against for exercising these rights. You may use an authorized agent. You may appeal a denied request by emailing ryan@joinbizlist.com with "Appeal" in the subject line.

Categories collected in the last 12 months: identifiers; customer records (Cal. Civ. Code 1798.80(e)); commercial information; internet activity; geolocation (approximate); professional information; sensitive personal information (government ID, financial information); and inferences (readiness scores). Sources, purposes, and recipients are described in Sections 1–4. Retention is described in Section 5.

9. Cookies and Analytics

We use necessary cookies to run the Platform and analytics cookies from our analytics service providers to understand usage. We do not use advertising cookies.

10. Children

The Platform is not for anyone under 18. We do not knowingly collect information from children.

11. Where Data Is Stored

We are based in the United States, and our hosting providers store data in the United States. If you access the Platform from outside the U.S., your information will be processed in the U.S.

12. Financial Privacy Notice — GLBA

13. Changes

We may update this Policy and will post the new version with a new "Last Updated" date. For material changes, we will notify you by email or in-app notice before the change takes effect.

14. Contact

JOIN BIZ LIST LLC d/b/a Biz List, 3908 Perrier Street, New Orleans, LA 70115. Privacy questions: ryan@joinbizlist.com.