Privacy

BuyerPass is operated by Next Bridge Advisors Inc., a Delaware corporation. This notice describes what the software actually does today. It has not been reviewed by counsel and does not yet name a contact address.

What BuyerPass collects

• Your email address, used to sign in.
• The display name you type, and the time you supplied it. BuyerPass does not verify this name against anything and performs no government-ID check, so it collects no identity documents, document numbers or biometric data of any kind.
• From connected financial institutions: institution name, account names, masked account numbers, account type, balances and holdings. The access token used to read them is revoked within the same request and never stored.
• The two computed figures and the timestamp they were computed at.
• For each verification page load: an opaque browser identifier, the user agent, and whether the view counted toward the account holder’s allowance.
• Recipient feedback responses.
• A record of your authorization to retrieve financial data: the version of the wording you agreed to, when, your browser, and a truncated network prefix (the first three groups of your address, not the address itself).

What BuyerPass never collects

• Institution usernames or passwords.
• Identity document images, document numbers, selfies, or biometric templates — none are collected, because no government-ID check is performed.
• Full account numbers.

What recipients see

Recipients see the display name you supplied — labelled as supplied by you and not verified — the verification statuses, the number of institutions connected, the verification timestamp, the names of your connected institutions with each one’s share of your total, and either your verified total or a threshold you chose. Account numbers, individual account balances and holdings are never disclosed.

Sharing

Financial data is shared with the service providers required to operate the product: Plaid (account connections and balances), Stripe (subscription billing only), and the hosting and database providers. It is not sold, and it is not shared with brokers, sellers or marketplaces.

Deleting your account

You can delete your account yourself, at any time, from your dashboard. It is immediate and irreversible, not a request queued for review: your sign-in, every connected institution, every account name and balance, your capacity figures, every share link including ones already sent, your subscription record and your authorization record are all erased. Anonymous counts that cannot be traced back to you — how many accounts reached each step of the product — are kept.

BuyerPass holds no ongoing access to your financial institutions, because each connection is closed as soon as the balances have been read, so there is nothing left at your bank to revoke. Revoking a single link stops it being viewable immediately without deleting anything else.

Retention

Data that has not been deleted by you is deleted or de-identified automatically once it is no longer needed. These periods are maximums, enforced by a scheduled job (scripts/retention.mjs) rather than described and forgotten.

• Account-level balances and holdings — the individual account names, masked numbers and balances behind your figures — are deleted after 400 days. The aggregate totals a link displays are kept for as long as the link exists.
• Recipient browser identifiers are cleared after 90 days. The record that a view occurred is kept, because your free-view allowance is counted from it, but it stops being about a particular browser.
• Recipient feedback identifiers are cleared after 180 days. The responses themselves are retained without them.
• Expired and revoked links, and everything attached to them, are deleted a year after they stopped working.
• Sign-in sessions are deleted as soon as they expire.

Recipients

Recipients do not create accounts. A browser identifier cookie is set on verification pages solely to avoid counting an account holder’s allowance more than once per viewer per day. It is cleared from stored records after 90 days.