BridgeView™

1. Introduction

Company Sellers ("we," "us," or "our") operates BridgeView™ at app.companysellers.com. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Account Information: Name, email address, phone number, and mailing address when you create an account or update your profile.

Business Information: Business name, industry, revenue ranges, employee count, location, and other business details you provide through the BFA and dashboard tools.

Assessment Data: Your responses to the Business Foundation Assessment (BFA), including scores, short-answer responses, and qualifying questions.

Tool Data: Information you enter into Action Plan tools (financial data, scorecards, SOPs, team rosters, strategic plans, etc.).

Payment Information: Payment processing is handled entirely by Stripe. We do not store credit card numbers, bank account details, or other payment credentials on our servers.

Financial Account Information (via Plaid): If you choose to connect a financial account through our Plaid integration, we receive from Plaid: account type (checking, savings, credit card, loan, or investment), account name and institution, a masked account number (typically the last four digits), current and available balances, transaction history, and — where applicable — loan terms (APR, minimum payment) and investment holdings. We do not receive your online banking username, password, or other login credentials; Plaid handles authentication with your financial institution directly. See Section 7 below for details on our Plaid integration.

Usage Data: We may collect anonymized data about how you interact with the Service (pages visited, features used, time spent).

3. How We Use Your Information

We use your information to:

Provide and maintain the Service
Generate your BridgeView™ dashboard and personalized action plan
Process subscription payments
Send you relevant communications (assessment results, account updates, drip email sequences)
Provide coaching services when subscribed
Improve the Service

4. How We Protect Your Information

We take the security of your data seriously:

Encryption: All data is transmitted over HTTPS (TLS encryption)
Authentication: User accounts are protected by Supabase Auth with encrypted passwords
Payment Security: All payment processing is handled by Stripe (PCI DSS Level 1 compliant). We never see or store your payment details.
Access Control: Row-level security policies restrict data access to authorized users
Infrastructure: The Service is hosted on Vercel and Supabase, both of which maintain SOC 2 compliance

No system is 100% secure. While we implement commercially reasonable safeguards, we cannot guarantee absolute security.

5. Data We Do NOT Collect

Full credit card numbers (handled entirely by Stripe)
Full bank account or routing numbers — where Plaid returns account data, we receive only a masked identifier (typically the last four digits)
Online banking usernames, passwords, or other financial-institution credentials — Plaid authenticates directly with your bank
Social Security numbers or tax IDs
Login credentials for your other business tools (QuickBooks, CRM, etc.)

6. Third-Party Services

We use the following third-party services:

Supabase: Database and authentication
Vercel: Application hosting
Stripe: Payment processing
Plaid: Financial account data aggregation — see Section 7 for details
Resend: Transactional email delivery
Kit (ConvertKit): Email subscriber management
Anthropic: AI-powered categorization of transaction data (data sent is limited to anonymized merchant names and amounts for the purpose of mapping to accounting categories)

Each of these services has its own privacy policy governing their handling of your data.

7. Plaid Integration — Financial Data

BridgeView™ uses Plaid, Inc. to connect to your financial institution and retrieve account and transaction data. This section explains how that integration works and what it means for your data.

How the connection works. When you initiate a bank connection, Plaid Link opens inside the Service. You enter your banking credentials directly into Plaid's interface — we never see, receive, or store your banking username or password. Plaid authenticates with your financial institution on your behalf and returns an access token to us; we use that token to retrieve account data.

What Plaid receives. By using the Plaid integration, you authorize Plaid to receive from your financial institution the data needed to provide the Service, which may include: account identifiers and metadata, balance information, transaction history (typically up to 24 months), loan terms (for liability accounts), and investment holdings (for investment accounts). Plaid's collection and use of your data is governed by the Plaid End User Privacy Policy.

What we receive from Plaid. Plaid transmits to us a subset of the data described above so that we can provide the BridgeView™ service. We use this data to: display your account balances and transactions in your dashboard; categorize transactions against a Profit First allocation model and a GAAP chart of accounts; forecast debt payoff timelines; and produce cash-flow, net-worth, and profitability analyses for you.

How long we keep it. We retain financial data pulled via Plaid for as long as your account is active and the connection remains authorized. See Section 9 (Data Retention).

Your control. You may disconnect a linked financial account at any time from within the Service. Upon disconnection, we will stop requesting new data from Plaid for that account and, upon your written request to eric@companysellers.com, delete previously retrieved data from that account subject to Section 9.

No sale of financial data. We do not sell, rent, or share Plaid-sourced financial data with advertisers, data brokers, or any third party not necessary to operate the Service.

8. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share data only:

With service providers necessary to operate the Service (listed above)
If required by law (subpoena, court order, legal process)
With your explicit consent

9. Data Retention

We retain your data for as long as your account is active. If you cancel your account, you may request deletion of your data by contacting us. We will delete your data within 30 days of a verified request, except where retention is required by law.

10. Your Rights

You have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Opt out of marketing communications

To exercise any of these rights, contact us at eric@companysellers.com.

11. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

12. Children

The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service.

14. Contact

Questions about this policy? Contact us at eric@companysellers.com.

Company Sellers, LLC