Privacy Policy

• Account information. When you create an account, we collect your email address and a password, which are handled by our authentication and database provider.
• Deal information you enter. Details you provide about a business you are evaluating — such as a listing link or pasted listing text, and fields like business name, location, type, asking price, and earnings — so the Service can analyze the deal.
• Documents you upload. Business documents you add to a workspace (for example profit & loss statements, tax returns, bank statements, or payroll records) so the Service can extract and analyze their contents.

When you use the Service we collect limited usage and technical information, including a device identifier stored in your browser (used to apply free-usage limits) and product-analytics events about how the Service is used. In production we use a privacy-focused analytics tool to measure aggregate usage. Standard technical information such as your IP address and browser type may be processed by our hosting and infrastructure providers to deliver and secure the Service.

• to provide the Service — analyzing the deals and documents you submit and returning results;
• to create and maintain your account and save your deals so you can reopen them;
• to apply usage limits and prevent abuse;
• to understand aggregate usage and improve the Service; and
• to comply with legal obligations and enforce our Terms.

To produce analysis, the documents, listing text, and relevant deal inputs you submit are sent to OpenAI, which performs automated extraction and analysis on Mainstreet’s behalf. The structured results are returned to and stored in the Service so you can reopen them. Some of Mainstreet’s calculations may also use deterministic application logic rather than automated analysis.

We share information with vendors who process it on our behalf so we can operate the Service, including:

• Supabase for authentication, database, and storage;
• OpenAI for automated document and listing analysis;
• Vercel for hosting and infrastructure; and
• [ANALYTICS PROVIDER TO BE CONFIRMED] for product analytics.

We do not sell your personal information. Beyond the service providers described here, we do not share your information except as needed to comply with the law, enforce our Terms, or protect our rights and users.

Account and deal data is stored with our database provider under access controls that restrict each account’s data to that account. Some information — such as your current deal and a device identifier — is also stored locally in your browser so the Service keeps working across refreshes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain account and saved-deal information while your account remains active and for as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes and enforce our agreements. When you delete your account, we delete active account and saved-deal data promptly. Limited residual copies may remain temporarily in secure backups or provider systems before being overwritten under their ordinary retention processes.

You can delete an individual saved deal and delete your account directly through the Service. You can also clear locally stored data from your browser. To request access to, correction of, or deletion of your information, contact Mainstreet at [PRIVACY CONTACT EMAIL TO BE ADDED BEFORE PUBLIC LAUNCH].

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and material changes will be reflected on this page.

For privacy questions or requests, contact [PRIVACY CONTACT EMAIL TO BE ADDED BEFORE PUBLIC LAUNCH]. The data controller/operator is [LEGAL ENTITY NAME TO BE ADDED BEFORE PUBLIC LAUNCH]. See also our Terms of Use.