Back

Privacy Policy for BuyMicroStartups

This Privacy Policy explains how Marc-Etienne Dartus, an individual sole trader (auto-entrepreneur) operating from Levallois-Perret, France ("BuyMicroStartups", "we," "us," or "our"), collects, uses, and protects information when you use https://buymicrostartups.com/ (the "Website") and the marketplace service it provides (the "Service"). We act as the data controller for the personal data described below.

By using the Website, you agree to this Privacy Policy. If you do not agree, please do not use the Website.

1. Information We Collect

1.1 Account Data

When you sign up (by email/password or Google sign-in via Supabase Auth), we collect your name and email address. If you sign up via Google, we receive the basic profile information Google shares with sign-in.

1.2 Listing Data

If you list a startup, we collect the details you submit: business name, description, category, technology stack, asking price, revenue/profit figures, website URL, competitors, reasons for selling, and a contact email for Buyer inquiries. This information is published on your live listing.

1.3 Payment Data

Listing fees are processed by Stripe. We do not receive or store your card number or full payment details — Stripe handles this directly and shares with us only what is needed to confirm and, if applicable, refund a payment (e.g. a payment intent identifier).

1.4 Revenue Verification Data (Optional)

If you choose to connect a Stripe account for the "Revenue Verified" badge, we use a read-only Stripe Connect OAuth grant to periodically read aggregate figures from your connected account: trailing-30-day charge volume and normalized monthly recurring revenue. We store only these aggregate numbers and your connected account identifier — never your raw transaction history, customer data, or Stripe credentials, and we cannot move money on your account. You can revoke this connection at any time via Stripe; we detect the revocation and remove the badge.

1.5 Buyer Preferences

If you are a Buyer, you may save search preferences (business types, price range, revenue thresholds, technology, etc.) so we can notify you by email about matching Premium listings.

1.6 Support and Communications

If you contact support, we use Crisp to power the chat widget, which processes your messages and basic session/browser information. Transactional emails (listing status updates, Buyer-interest forwarding, match notifications, refund confirmations) and any newsletter you opt into are sent through Brevo.

1.7 Usage Data and Cookies

We use PostHog to collect product analytics (pages viewed, features used, listing status transitions) associated with your account or an anonymous identifier, and cookies from PostHog and Crisp to support these features. We do not use this data to build advertising profiles for third parties.

1.8 Automated Content Review

When you submit a listing, its content (description, category, figures, and — if provided — a fetch of your website's public title/description for reachability) is sent to a third-party AI/LLM provider (via OpenRouter) to produce an automated moderation decision. Listings that the automated review cannot confidently decide on are reviewed by a human. You may appeal any rejection, in which case a human reviews the appeal.

2. How We Use Your Information

We use your information to: operate your account and listings; process and refund listing fees; run automated and human content moderation; verify and display revenue data you've chosen to connect; match Buyer preferences to relevant listings and notify you; provide customer support; send transactional emails and, if you opt in, marketing emails; monitor and improve the Service; and detect fraud or Terms violations.

3. Legal Bases for Processing (EEA/UK Users)

We process your data to perform our contract with you (account, listings, payments, matching), based on our legitimate interest (fraud prevention, service analytics, content moderation), based on your consent (marketing emails, optional revenue verification, non-essential cookies), and to comply with legal obligations where applicable.

4. Automated Decision-Making

Listing approval uses an automated (AI-assisted) review as a first pass. This can result in a listing being approved, sent back for changes, held for human review, or rejected without a prior human review. You have the right to contest an automated rejection: contact us or use the in-app appeal, and a human will review the decision.

5. Data Sharing and Sub-Processors

We do not sell your personal data. We share it only with the service providers needed to run BuyMicroStartups, each acting under their own privacy terms:

  • Stripe — payment processing and (with your consent) read-only revenue verification.
  • Supabase — account authentication and database hosting.
  • Brevo — transactional and marketing email delivery.
  • PostHog — product analytics.
  • Crisp — customer support chat.
  • OpenRouter / underlying AI model providers — automated listing content review.

Some of these providers may process data outside the European Economic Area (e.g. in the United States). Where this occurs, we rely on the provider's standard contractual clauses or equivalent safeguards.

6. Data Retention

We retain account and listing data for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, or dispute-resolution obligations (typically up to the applicable statutory limitation period). Revenue-verification aggregates are retained only while the badge is active and removed once you disconnect Stripe or delete your listing.

7. Your Rights

Subject to applicable law (including the GDPR for EEA/UK users), you have the right to access, correct, delete, restrict, or export your personal data, and to object to or withdraw consent for certain processing (e.g. marketing emails, at any time via the unsubscribe link). To exercise these rights, contact us at the email below. You also have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

8. Security

We rely on our providers' industry-standard security controls (encryption in transit, access controls) to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.

9. Children's Privacy

BuyMicroStartups is not directed at, and we do not knowingly collect data from, individuals under 16. If you believe a minor has provided us with personal data, contact us and we will delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be notified by email or a notice on the Website; the "Last Updated" date below always reflects the current version.

11. Contact

For any question or request regarding this Privacy Policy or your personal data, contact us at:

By using BuyMicroStartups, you acknowledge this Privacy Policy.

Last Updated: July 17, 2026