Privacy Policy

1.1 Information You Provide Directly

• Create an account — name, email address, password (hashed), and profile details.
• Submit a business listing — business name, industry, revenue, asking price, location, and supporting documents.
• Use Deal Rooms — messages, offers, counter-offers, documents, and communications exchanged between parties.
• Complete identity verification — government-issued ID processed by our identity verification partner.
• Contact us — name, email, and the content of your communication.
• Set scheduling preferences — Calendly URL or other scheduling links added to your account settings.

1.2 Information Collected Automatically

• IP address, browser type and version, operating system, and device identifiers.
• Pages visited, time spent on pages, referring URLs, and clickstream data.
• Authentication tokens and session identifiers.
• Cookies and similar tracking technologies (see Section 6).

1.3 Information from Third Parties

If you sign in using Google OAuth, we receive your name, email address, and profile photo from Google. We do not receive your Google password.

• Create and manage your account and authenticate your identity.
• Facilitate business listing creation, discovery, and the deal process between buyers and sellers.
• Enable Deal Room communications, document sharing, offer submission, and milestone tracking.
• Send transactional emails such as NDA notifications, deal room invitations, and offer alerts.
• Provide customer support and respond to your inquiries.
• Monitor and improve the security, integrity, and performance of the Service.
• Comply with legal obligations, resolve disputes, and enforce our Terms of Service.
• Analyze usage trends and develop new features using aggregated or de-identified data.

We do not sell your personal information to third parties. We do not use Deal Room communications or confidential business financials for advertising purposes.

3.1 With Other Users

When you enter a Deal Room, your name and messages are visible to the other deal party. Public listing information is visible to all registered users. Confidential financial data is only accessible within a Deal Room after an NDA is executed.

3.2 With Service Providers

• Supabase — database hosting and authentication.
• Vercel — application hosting and deployment.
• Postmark — transactional email delivery.
• Google — OAuth-based authentication.
• Calendly — meeting scheduling (you provide your own link).
• DocuSign — electronic signature processing (when integrated).
• Escrow.com — escrow and funds management for acquisition transactions.

3.3 For Legal Reasons

We may disclose your information if required by law or valid legal process, to protect the rights and safety of Clozur or our users, or to detect, prevent, or address fraud or security issues.

3.4 Business Transfers

If Clozur is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

We retain your personal information for as long as your account is active. If you close your account, we will delete or anonymize your personal data within 90 days, except where required for legal or compliance purposes. Deal Room transaction records may be retained for up to 7 years.

We implement security measures including encrypted data transmission (TLS), hashed password storage, row-level security policies on our database, and role-based access controls. No method of electronic storage is 100% secure.

If you believe your account has been compromised, contact us immediately at ops@clozur.io.

We use cookies to maintain your authenticated session, remember your preferences, and analyze how the Service is used. Essential cookies are required for the Service to function. You may disable non-essential cookies through your browser settings. We do not use third-party advertising cookies or sell data to advertising networks.

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of inaccurate or incomplete information.
• Deletion — Request deletion of your personal data, subject to legal retention obligations.
• Portability — Request a machine-readable export of your data.
• Withdraw Consent — Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, email ops@clozur.io with subject line Privacy Request. We will respond within 30 days. California, Virginia, Colorado, and Connecticut residents may have additional rights under applicable state privacy laws.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. Contact us at ops@clozur.io if you believe we have collected such information.

Clozur is based in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States. We take steps to ensure your data receives adequate protection wherever it is processed.

The Service may contain links to third-party websites or services such as Calendly, DocuSign, or Escrow.com. We are not responsible for their privacy practices.

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 14 days before the change takes effect. Continued use of the Service constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact us: