Privacy Policy

Steward Market (“we,” “us,” or “our”) operates stewardmarket.com (the “Platform”), a marketplace connecting business owners, buyers, and advisors around values-aligned ownership transitions. We understand that the information shared on our Platform—business financials, ownership structures, succession plans, personal circumstances—is among the most sensitive information a founder or firm can share. This policy explains what we collect, how we use it, and the rights you have over your data.

By using the Platform, you agree to the practices described below. If you do not agree, please do not use the Platform.

1. Information We Collect

We collect information you provide directly, information collected automatically through your use of the Platform, and information from third-party services you authorize.

1.1 Account Information

When you create an account, we collect your name, email address, and password. Passwords are stored using industry-standard hashing and are never accessible to us in plain text.

1.2 Profile and Listing Information

Depending on your role on the Platform, you may provide the following information as part of your profile or listing:

Sellers:

• Business details: Headline, industry, location, asking price, transaction type, revenue, EBITDA, employee range, preferred deal structures, business snapshot, transaction readiness, target transaction timeline, and founder/leadership transition plan.
• Qualitative context: Including impact exit goals, certifications, core business values, ownership identities, stewardship objectives, origin and purpose, culture and people, hopes and vision, what you seek in a steward, and non-negotiables in selecting a buyer.

Buyers:

• Acquirer details: Headline, industries of interest, location, buyer type, impact exit criteria, stewardship path, core business values, ownership identities, certifications, business snapshot.
• Mission and vision: Details about your culture and people, intent as stewards, experience, capital readiness, and stewardship models you support.
• Acquisition criteria: Including preferred transaction type, deal structures, target revenue and EBITDA ranges, target employee range, transaction timeline, and preferred hold period.

Partners:

• Company details: Name, website, service provider types, business snapshot and who you serve, deal size supported, location.
• Qualitative information: Including impact exit focus, certifications, core business values, ownership identities, stewardship objectives and models supported, role in ownership transitions, typical engagement point, outcomes optimized for, and intent as stewards.

1.3 Communications and Support

If you contact us or communicate with other users through the Platform, we may collect the contents of those messages along with metadata such as timestamps and recipient information.

1.4 Payment Information

We use Stripe to process payments. When you make a payment, Stripe collects your payment card details, billing address, and related information directly. We do not store full payment card numbers on our servers. We receive limited information from Stripe such as the last four digits of your card, card brand, and transaction status. Stripe's handling of your payment data is governed by Stripe's privacy policy.

1.5 Automatically Collected Information

When you visit the Platform, we and our analytics providers automatically collect certain information, including:

• Device and browser information (browser type, operating system, device type)
• IP address and approximate location derived from it
• Pages visited, links clicked, time spent, referring sites
• Cookies and similar technologies (see Section 6)

We use Google Analytics to understand how the Platform is used. Google Analytics uses cookies and processes data according to Google's privacy practices. You can opt out of analytics tracking through our cookie banner or by using the Google Analytics Opt-Out Browser Add-on.

1.6 Email Communications

If you subscribe to our newsletter or opt in to receive marketing communications, we collect your email address and preferences. We use email service providers to send these communications and track engagement (opens, clicks) to improve relevance. You can unsubscribe at any time using the link in any marketing email.

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Platform
• Create and manage your account, profile, or listing
• Facilitate connections between sellers, buyers, and partners based on stated criteria and values alignment
• Process payments and manage subscriptions or listing fees
• Communicate with you about your account, transactions, and updates to the Platform
• Send marketing communications you have opted in to receive
• Understand how users interact with the Platform and improve features
• Detect, prevent, and respond to fraud, abuse, security issues, and violations of our Terms
• Comply with legal obligations and enforce our agreements

3. How We Share Your Information

We do not sell your personal information. We share information only as described below.

3.1 With Other Platform Users

The core function of the Platform is to connect sellers, buyers, and partners. Information you include in your public profile or listing is visible to other authenticated users of the Platform according to the visibility controls available to you at the time of submission. You control what appears in your profile and listing. We encourage you not to include information in your listing or profile that you are not prepared to share with the Platform's user base.

3.2 With Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Payment processing: Stripe
• Analytics: Google Analytics
• Email delivery: our email service provider for transactional and marketing emails
• Hosting and infrastructure: cloud hosting providers who store Platform data

These providers are only permitted to use your information to perform services for us.

3.3 For Legal Reasons

We may disclose information when we believe in good faith that disclosure is required by law, to respond to valid legal process, to protect the rights, property, or safety of Steward Market, our users, or others, or to investigate fraud or violations of our Terms.

3.4 Business Transfers

If Steward Market is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

3.5 With Your Consent

We will share your information for other purposes when you direct us to do so or when you consent to the sharing.

4. Data Security

We take the sensitivity of the information shared on our Platform seriously and have implemented administrative, technical, and physical safeguards designed to protect it. These include:

• Encryption of data in transit using TLS
• Encryption of data at rest for sensitive fields
• Access controls limiting internal access to those with a business need
• Secure password storage using industry-standard hashing
• Regular review of our security practices

No method of transmission or storage is completely secure. We cannot guarantee absolute security. If you become aware of a security issue, please contact us immediately.

5. Data Retention

We retain your personal information for as long as your account is active and as needed to provide the Platform. We may retain information after account closure to comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes such as fraud prevention. When information is no longer needed, we delete or anonymize it.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Platform, remember your preferences, analyze usage, and understand how users interact with our pages. Categories of cookies we use include:

• Strictly necessary: required for the Platform to function (login, security)
• Analytics: help us understand usage (Google Analytics)
• Preferences: remember your settings and choices

You can manage cookie preferences through the cookie banner presented when you first visit the Platform. You can also control cookies through your browser settings. Blocking strictly necessary cookies may affect the Platform's functionality.

7. Your Rights and Choices

You have choices about how your information is collected and used. Rights vary by jurisdiction.

7.1 All Users

• Access and update: you can access and update most profile information directly through your account settings.
• Deletion: you can request deletion of your account and associated personal information by contacting us.
• Email preferences: you can unsubscribe from marketing emails through the unsubscribe link in any marketing email or by updating your account preferences. Transactional emails related to your account cannot be opted out of while your account remains active.
• Cookies: you can manage cookies through our cookie banner or your browser.

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Access a copy of your personal information
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of your personal information (we do not sell personal information)
• Limit the use of sensitive personal information
• Be free from discrimination for exercising these rights

To exercise these rights, contact us using the information in Section 10. You may designate an authorized agent to make a request on your behalf.

7.3 Residents of the European Economic Area, United Kingdom, and Switzerland (GDPR/UK GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to:

• Access, correct, or delete your personal data
• Restrict or object to our processing of your personal data
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority

Our legal bases for processing your personal data include: performance of a contract (to provide the Platform); your consent (for marketing communications and non-essential cookies); our legitimate interests (to operate, secure, and improve the Platform); and compliance with legal obligations.

8. International Data Transfers

Steward Market is based in the United States. If you access the Platform from outside the United States, your information will be transferred to, stored, and processed in the United States. The United States may have data protection laws that differ from those in your country. Where required, we use appropriate safeguards such as standard contractual clauses to protect your information when it is transferred internationally.

9. Children's Privacy

The Platform is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete it. If you believe we have collected information from a child, please contact us.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you would like to exercise your rights, please contact us at:

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If we make material changes, we will notify you by email or through a prominent notice on the Platform before the changes take effect. Your continued use of the Platform after the changes become effective means you accept the updated policy.