Privacy Policy - Forensic Deal Screener

Privacy Policy

Effective Date: June 1, 2025

Last Updated: November 25, 2025

1. Introduction

Welcome to the Forensic Deal Screener. This Privacy Policy explains how Conduit Catalyst LLC ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our Service.

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy applies to all users of the Forensic Deal Screener.

🔒 Privacy-First Design: We intentionally collect minimal data. We do NOT store your Confidential Information Memorandums (CIMs), business names, or proprietary deal information. Your analysis data is processed in real-time and not retained on our servers.

2. Information We Collect

2.1 Information You Provide Directly

When you purchase or use the Service, we collect:

Data Type Purpose Required?
Email Address Account access, license delivery, support communications Yes
License Code Access authentication, preventing unauthorized use Yes
Payment Information Processing your purchase (handled by Stripe, not stored by us) Yes
Name (Optional) Personalization, invoicing No

2.2 Analysis Data (12 Data Points)

When you run a forensic analysis, you provide 12 financial data points (Revenue, SDE, Customer Concentration, etc.). Here's how we handle this data:

  • Processing: Data is processed in real-time to generate your report
  • Storage: We do NOT store these data points after analysis is complete
  • Retention: Zero retention. Once your report is generated, the input data is discarded
  • Confidentiality: We never see business names, owner names, or other identifying information (unless you choose to include them)

Why Zero Retention? We understand that deal information is highly confidential. By not storing your analysis inputs, we eliminate the risk of data breaches exposing your deal pipeline.

2.3 Automatically Collected Information

Like most websites, we automatically collect certain technical information:

  • Device Information: Browser type, operating system, device type
  • Usage Data: Pages visited, time spent on site, features used
  • IP Address: For security, fraud prevention, and geographic analytics
  • Cookies: Small text files stored on your device (see Section 6 for details)

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

  • Authenticate your access to the Service
  • Process your analysis requests and generate reports
  • Deliver license codes and account credentials
  • Provide customer support and respond to inquiries

3.2 Business Operations

  • Process payments and prevent fraud
  • Send transactional emails (purchase confirmations, license codes, etc.)
  • Maintain and improve the Service (bug fixes, feature enhancements)
  • Monitor usage patterns to identify issues and optimize performance

3.3 Marketing Communications (Optional)

  • Send product updates, educational content, and promotional offers
  • You can opt out of marketing emails at any time (unsubscribe link in every email)
  • We will NEVER sell your email address to third parties

3.4 Legal and Compliance

  • Comply with legal obligations (tax reporting, court orders, etc.)
  • Enforce our Terms of Service and detect violations
  • Protect against fraud, abuse, and security threats

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We only share your data in the following limited circumstances:

4.1 Service Providers (Third-Party Processors)

We use trusted third-party services to operate our business. These providers have access to your data only to perform specific tasks on our behalf and are obligated to protect it:

Service Provider Purpose Data Shared
Stripe Payment processing Email, payment card details (PCI-compliant, not stored by us)
GoHighLevel CRM, email delivery (via Mailgun backend) Email, name (if provided), license code
MindStudio AI analysis engine The 12 data points you enter (processed in real-time, not stored)
Google Analytics (if applicable) Website analytics Anonymized usage data, IP address (anonymized)

All third-party providers are contractually required to comply with data protection laws (GDPR, CCPA, etc.).

4.2 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders, subpoenas, or legal processes
  • Government or regulatory requests
  • Investigations of fraud, security breaches, or Terms of Service violations

4.3 Business Transfers

If Conduit Catalyst LLC is acquired, merged, or sold, your information may be transferred to the new owner. We will notify you via email before any such transfer and provide you with options to delete your account.

5. Data Retention

5.1 Account Data

  • Email and License Codes: Retained as long as your account is active or as needed to provide the Service
  • Payment Records: Retained for 7 years (IRS tax compliance requirements)

5.2 Analysis Data

  • The 12 Data Points You Enter: NOT retained. Processed in real-time and discarded immediately after report generation
  • Generated Reports: Delivered to you via email or download. We do not store copies on our servers

5.3 Deletion Requests

You may request deletion of your account data at any time by emailing [email protected]. We will delete your information within 30 days, except where retention is required by law.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze usage patterns.

6.1 Types of Cookies We Use

  • Essential Cookies: Required for the Service to function (e.g., authentication, session management). Cannot be disabled.
  • Analytics Cookies: Help us understand how users interact with the Service (e.g., Google Analytics). You can opt out via browser settings.
  • Marketing Cookies: Track conversions from ads (if applicable). You can disable these via browser settings or ad preference tools.

6.2 Managing Cookies

Most browsers allow you to control cookies through their settings. Note that disabling essential cookies may prevent you from using certain features of the Service.

To opt out of Google Analytics: Google Analytics Opt-Out

7. Data Security

We take data security seriously and implement industry-standard measures to protect your information:

  • Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS)
  • Payment Security: Payment information is processed by Stripe, a PCI-DSS Level 1 certified provider. We never see or store your full credit card number.
  • Access Controls: Only authorized personnel have access to user data, and access is logged and monitored
  • Regular Audits: We regularly review our security practices and update them as needed

However: No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. Use the Service at your own risk.

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

8.1 General Rights (All Users)

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your account and associated data
  • Opt-Out: Unsubscribe from marketing emails at any time

8.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Data Portability: Receive your data in a machine-readable format
  • Restriction: Request restriction of processing in certain circumstances
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent for data processing (where consent is the legal basis)

8.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: What personal information we collect, use, and disclose
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: We do not sell personal information, so this does not apply
  • Non-Discrimination: We will not discriminate against you for exercising your privacy rights

8.4 How to Exercise Your Rights

To exercise any of these rights, email us at [email protected] with the subject line "Privacy Request." We will respond within 30 days.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it immediately.

If you believe we have inadvertently collected information from a minor, please contact us at [email protected].

10. International Data Transfers

Conduit Catalyst LLC is based in the United States. If you are accessing the Service from outside the U.S., your information will be transferred to and processed in the United States.

By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

For users in the EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your data during international transfers.

11. Third-Party Links

The Service may contain links to third-party websites or services (e.g., educational resources, industry reports). We are not responsible for the privacy practices of these third parties.

We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features.

When we make changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Notify you via email if the changes are material (e.g., changes to data retention or sharing practices)
  • Post a notice on our website for 30 days

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Conduit Catalyst LLC
Email: [email protected]
Website: https://revmri.xyz

For Privacy-Specific Inquiries:
Subject Line: "Privacy Request"
We will respond within 30 days of receipt.