This Privacy Policy explains how TeknoSense Solutions LLC, a Texas limited liability company operating the BrokerFolder product and website ("BrokerFolder," "we," "us"), collects, uses, shares, and protects information. It covers the website at brokerfolder.com and the BrokerFolder application (together, the "Service").
BrokerFolder is built for business brokers to manage confidential business-sale transactions. Because of that, this policy is written for three audiences, and we encourage you to read the section that applies to you:
- Brokers — our subscribing brokerages and the principals and agents they add to their accounts.
- Buyers — prospective business buyers invited by a broker to view a listing, qualify, sign an NDA, or access deal documents.
- Sellers and business owners — whose business information a broker may store in the Service. We handle that information on the broker's behalf.
The Service is offered in the United States and this policy is written for U.S. users.
1. The Short Version
- We collect the information needed to run a deal platform: broker account details, buyer contact and qualification information, NDA acknowledgment records, uploaded deal documents, and activity logs.
- Buyer activity inside the Service — opening the documents page, and viewing and downloading documents — is logged and shown to the broker managing the deal. Activity is recorded against the documents link issued to a buyer, not against a person we have identified. This engagement tracking is a core feature of the product, not passive analytics — and we tell you about it here so it is never a surprise.
- We do not sell personal information. We do not use your deal documents for advertising or to train AI models.
- Confidential seller financials uploaded by a broker are the broker's (and seller's) data. We process them only to operate the Service.
- After a brokerage cancels, its data is kept for 30 days so it can return or request an export, then permanently deleted.
2. Information We Collect
From Brokers (account holders)
- Account information: name, email address, brokerage name, role (principal or agent), buyer reply address and phone, and password (stored hashed — we cannot read it). When you set a password, part of a one-way hash of it is checked against the public Have I Been Pwned list of breached passwords; the password itself is never sent. If you turn on two-factor sign-in, we store the setting and your recovery codes in protected form.
- Billing information: handled by our payment processor, Stripe. We receive payment status and limited payment metadata (such as card brand and last four digits); we do not store full card numbers.
- Content you upload: listings, teaser photos, deal documents, financial records, buyer records, notes, tasks, and qualification-question configurations ("Customer Content"). We remove all metadata from teaser photos, including location data, before storing them. Teaser photos are public to anyone with the teaser link.
- Terms acceptance records: when you accept our Terms of Service and this Privacy Policy in the application, we record the version accepted, the date and time, your IP address, and your browser/device information.
- Usage information: actions taken in the application, log data, IP address, and browser/device information.
From Buyers
When a broker invites you into a deal through a secure link, we collect:
- Contact and inquiry information: name, email address, and any message you submit when inquiring about a listing. Inquiries that our spam protection blocks are not added to the listing; we may keep a limited record of them for support and abuse review.
- Qualification information: your answers to qualification questions set by the brokerage, which may include financial-capacity information and documents you choose to upload (for example, proof of funds).
- NDA acknowledgment records: when you acknowledge a non-disclosure agreement in the Service, we record your typed legal name, the date and time, your IP address, and your browser/device information. These records exist to document that the acknowledgment occurred and are shared with the brokerage.
- Terms acceptance records: when you accept our Terms of Service and this Privacy Policy to enter a deal, we record the version accepted, the date and time, your IP address, and your browser/device information.
- Document activity: every time the documents page is opened, or a document is viewed or downloaded, through the documents link issued to you, we record what was accessed and when. We also record each email we send you about the deal. This activity log is visible to the broker managing the deal, and is recorded against the documents link issued to you. If you share that link with someone else — for example your accountant, attorney, or lender — their activity is recorded against the same link. We do not identify who actually opened the file, and the record will read as activity on your link. Sharing a documents link is not prohibited by us, but you remain responsible under the non-disclosure agreement you signed with the brokerage.
- Technical information: IP address, browser/device information, and link usage.
From Sellers and business owners
We do not collect information from sellers directly. Brokers upload business and financial information about businesses for sale — which may include information about the owner personally, such as tax and financial records. We process this information solely as a service provider to the broker, under the broker's direction. If you are a seller with questions about how your information is handled in BrokerFolder, please contact your broker first, as they control what is stored and who may access it; you may also contact us at the address below.
From website visitors
- Analytics and cookies: the brokerfolder.com website uses Google Analytics to understand site traffic (pages visited, approximate location, device type). See Section 7.
- Demo scheduling and contact: if you book a demo or we email you about BrokerFolder, we use scheduling and email service providers, which process your name, email and any details you provide. If we contact you, it is at a business contact address you or a professional listing has made public. Reply "no thanks" and we will not email you again.
3. How We Use Information
We use information to:
- Provide and operate the Service — including the access-control, NDA, qualification, and engagement-logging features that are the product's purpose;
- Scan uploaded documents for malware before they are made available to anyone;
- Set up accounts, perform included migration, and provide support;
- Process subscription payments through Stripe;
- Send transactional notifications (for example, inquiry received, NDA sent, NDA signed);
- Communicate with you about demos, onboarding, and — for brokers and people who request it — product updates;
- Maintain security, investigate abuse, and enforce tenant isolation between brokerages;
- Improve the Service using aggregated, de-identified usage information;
- Comply with legal obligations.
We do not: sell personal information; share it for cross-context behavioral advertising; use Customer Content or deal documents for marketing; or use Customer Content to train artificial-intelligence models.
4. How Information Is Shared
- Within a deal, by design. The Service exists to share information between a broker and the buyers they admit into a deal. Buyer contact details, qualification responses, NDA records, and document-activity logs are shared with the brokerage managing that deal. Deal documents are shared with buyers only as the broker grants access.
- Within a brokerage. A principal can see all of the brokerage's listings, deals and buyers. An agent sees only the listings and deals assigned to him, the buyers on those deals, and the documents on those listings. General notes on a buyer are visible to everyone in the brokerage who works with that buyer.
- Between brokerages: never. Each brokerage's data is isolated. One brokerage cannot see another brokerage's listings, buyers, or documents. Buyer information collected for one brokerage's deal is not shared with any other brokerage.
- Service providers. We share information with vendors who process it on our behalf, currently: Stripe (payments); U.S.-based cloud hosting and infrastructure; U.S.-based cloud document storage; a third-party malware-scanning provider, to which uploaded documents are transmitted for scanning and by which they are not retained; our transactional email provider (buyer emails may come from a sending address we operate for buyer mail, separate from broker mail, and buyer links may use a separate domain we operate); scheduling and email service providers for our own sales and demo communications; Have I Been Pwned (breached-password check — receives only part of a one-way hash, never a password); Sentry (error monitoring — receives no document content; error reports may occasionally include limited technical detail such as a file name, tied to an internal user ID rather than your name or email); and Google Analytics, used only on the brokerfolder.com marketing website (not the application). Each is bound to use the information only to provide services to us. All primary hosting and storage is located in the United States. The BrokerFolder application (app.brokerfolder.com) does not use any third-party analytics or third-party tracking scripts.
- Contractors. Contractors may support development, testing, and operations under written confidentiality obligations. Contractors work in non-production environments with test data by default; any access to production data is granted deliberately and on a least-privilege basis.
- Legal and safety. We may disclose information if required by law, subpoena, or legal process, or to protect the rights, safety, or property of BrokerFolder, our users, or others. Where legally permitted, we will notify the affected broker before disclosing their Customer Content in response to legal process.
- Business transfers. If BrokerFolder or TeknoSense Solutions LLC is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy's commitments.
5. Data Retention
- Active accounts: we retain information as long as the account is active and as needed to provide the Service.
- After cancellation: a brokerage's Customer Content is kept for 30 days after cancellation takes effect, so the brokerage can request an export or reactivate. After 30 days, we permanently delete the brokerage account and everything stored under it, including documents, teaser photos, NDA versions and signed NDA certificates, qualification answers and files, buyer records, and activity history. Copies in backups are removed as those backups expire in the ordinary course.
- Records retained longer: only billing records and records we are required by law to keep. NDA acknowledgment records and document-activity history are deleted with the brokerage.
- Buyer information is retained as part of the relevant brokerage's Customer Content and follows the same lifecycle. Buyers who want information corrected or removed from an active deal should contact the brokerage that invited them, since the brokerage controls that record; we will support brokers in honoring such requests.
6. Security
We use commercially reasonable administrative, technical, and physical safeguards designed to protect information, including encryption of data in transit, private (non-public) document storage that is never publicly readable, files served only through the application after an access check, malware scanning of uploads before they can be served, a breached-password check on new passwords, optional two-factor sign-in, access logging, per-brokerage data isolation enforced at multiple layers of the application, per-user access limits within a brokerage, and least-privilege access for the people operating the Service. No system is perfectly secure, and we cannot guarantee absolute security — but protecting confidential deal information is the core of what this product does, and we treat it accordingly. Users also play a role: brokers are responsible for safeguarding their login credentials, buyers for keeping the documents link issued to them under their control, and brokers for the access decisions they make within their deals. If we learn of a breach affecting your personal information, we will notify affected users as required by applicable law.
7. Cookies and Analytics
The brokerfolder.com marketing website uses cookies and similar technologies for essential site functions and for Google Analytics. You can control cookies through your browser settings, and you can opt out of Google Analytics using Google's browser opt-out tools. The BrokerFolder application (app.brokerfolder.com) uses cookies necessary for authentication and session security only; it carries no third-party analytics and no third-party tracking scripts of any kind.
We do not use third-party advertising cookies and do not engage in cross-site behavioral advertising.
8. Your Choices and Rights
- Access, correction, deletion. You may request access to, correction of, or deletion of your personal information by emailing [email protected]. Brokers can edit most account and content data directly in the Service. For information held inside a brokerage's deal records, we may direct the request to, or coordinate with, that brokerage, which controls the record.
- Marketing emails. You can stop marketing email at any time by using the unsubscribe link or by replying "no thanks." Transactional messages (billing, security, deal notifications) will still be sent as needed to operate the Service.
- State privacy rights. Depending on your state of residence, you may have rights under state privacy laws (such as the Texas Data Privacy and Security Act or the California Consumer Privacy Act), including rights to know, correct, delete, and to non-discrimination for exercising rights. We honor such requests as required by the law applicable to you, and we do not sell personal information or process it for targeted advertising regardless of jurisdiction. To exercise rights, email [email protected]; we will verify your identity before acting on a request and respond within the time required by applicable law. If we decline a request, you may appeal by replying to our decision, and we will review it.
9. Children
The Service is for business use by adults. It is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
10. Users Outside the United States
The Service is operated from and hosted in the United States and is intended for U.S. users. If you access it from elsewhere, your information will be transferred to and processed in the United States.
11. Changes to This Policy
We may update this policy from time to time. For material changes, we will notify brokers by email and post notice on the site before the change takes effect. The "Last updated" date above reflects the current version.
12. Contact Us
TeknoSense Solutions LLC (operating BrokerFolder)
Registered Agent: Registered Agents Inc., 5900 Balcones Drive, Suite 100, Austin, TX 78731
Email: [email protected]