Service
What It Is How It Works Six Focus Areas Sample Report
Your Score
What Your Score Means What You Receive
Resources
Case Studies Research & Methodology For Advisors Pricing FAQ Privacy Contact Request a Report
Privacy
What we do with what you tell us

We would rather be specific
than reassuring.

You are thinking about handing a stranger the name of your company, roughly what it earns, and how many people depend on it. You are entitled to know exactly where that goes. This page names every place it travels, including the ones most companies leave out.

Last updated26 July 2026
Applies todealfax.io and every form on it
Cookies set by this siteNone
The Short Version
If you read nothing else
Only what you type into a form
We set no cookies, run no analytics, and carry no advertising trackers. If you never fill in a form, we have nothing about you at all.
No third party handles the send
Every form on this site posts to a DealFax server and is stored in a DealFax database. We used to route submissions through an outside form service; we do not any more. Explained in full below.
We introduce owners to advisors — only if you tick the box
That is a real disclosure to a real third party, and it is how our business works. It is opt-in, unticked by default, and declining it does not stop us replying to you.
Ask and it is gone
Reply to any email from us with "delete my information" and we remove it from our records within 30 days. No conditions, no exit interview.
On this page
What we collect Where it goes first The advisor introduction What we do not do The technical footnotes How long we keep it Getting it back or deleted What we cannot promise Changes to this page

What we collect

Only what you type into one of the three forms on this site. There is no hidden collection, no profile built in the background, and nothing gathered from your visit if you never submit anything.

Request a Report — the contact form
Your name and email address. Your legal business name as registered, and the city and state you operate in. Your industry, annual revenue range, employee count, year founded, and whether you hold contractor or professional licences. Which service you are interested in, roughly where you are in an exit process, and anything you write in the free-text box.
Sample report request
Your name and email address, optionally your business name, and your role.
Advisor inquiry
Your name and email address, your firm or practice, your role, the nature of your inquiry, and anything you write in the free-text box. If you describe a client situation in that box, you are giving us information about someone who has not agreed to this notice — please keep it general, and leave the client unnamed until they have agreed to be introduced.
Cohort access (dealfax.io/unlock)
Your email address and which program's link you arrived from, stored with a timestamp when you request an access link. The link we email you carries a signed copy of that same email address and program tag — nothing else — and expires after a couple of hours (staying signed in on your own device lasts up to 30 days). Inside the cohort area, each record you build is saved to your history so you can reopen it later, and cohort accounts include a set number of record builds. The public record page works differently: no account, and nothing you enter there is stored.

The revenue and employee figures are ranges, not exact numbers, and we ask for them because an assessment is meaningless without knowing the size and trade of the business it describes. Nothing on the form is a credit application. We never ask for a bank account, a tax ID, a social security number, or a financial statement through this website.

Where it goes the moment you press send

To us. Your submission goes to a DealFax server, over an encrypted connection, and is stored in a DealFax database. No form-handling company sits in between, and no copy of your enquiry is created anywhere outside our own systems.

One thing does leave that server, and only for the purpose of reaching a human: an email telling us your enquiry arrived, sent to our own info@dealfax.io mailbox. That mailbox is hosted by our email provider, the way every company's email is hosted by someone. Nobody else receives it, and nothing about your enquiry is passed to any other company unless you tick the advisor box described below.

Why this matters more here than elsewhere

Until 2026 this site posted every submission to a third-party form service while telling owners their information was "never shared with brokers, buyers, or third parties." That was not true. Rather than soften the sentence, we removed the third party: the form endpoint is now ours. A company that sells independent verification does not get to be loose with its own claims.

The advisor introduction — the one disclosure that is the point of the business

DealFax works through advisors. Certified Exit Planning Advisors, CPAs, M&A advisors and business brokers are the people who take an owner from "I am thinking about it" to a transaction, and a DealFax assessment is commissioned and administered through them. That means the natural next step after your enquiry is often an introduction to one.

An introduction is a disclosure of your information to a third party. We are not going to call it a "trusted partner" and hope you do not notice. So it is opt-in:

  • The consent box on the form is unticked. Submitting the form does not tick it, and there is no fine print underneath the button that ticks it for you.
  • If you leave it unticked, we still reply to you. You get your answer, your quote, or your sample report exactly as you would otherwise. We simply do not pass your details to anyone.
  • If you tick it, we may share your name, your email, your business name and location, your industry, and your size and stage with one advisor whose practice fits your situation. We tell you who they are and which firm when we make the introduction.
  • You can withdraw at any time by replying to any email from us. Withdrawing stops future introductions; it cannot pull back an introduction already made, which is why we ask before rather than after.

We do not receive a fee from you for making an introduction. Advisors in our network may hold a paid DealFax licence, so we do have a commercial relationship with some of them — you should know that when you weigh the recommendation.

What we do not do

These are commitments, not descriptions of the law. Each one is something we could do and have decided not to.

  • We do not sell or rent your information, to anyone, for any price.
  • We do not put you on a marketing list. We email you about the enquiry you made. We do not run a newsletter you did not ask for.
  • We do not market your business to buyers. DealFax is not a brokerage and does not list, shop, or advertise your company. If you did not tick the introduction box, no one outside DealFax learns you contacted us.
  • We do not feed client information to AI systems. No information you give us is sent to a large language model or used to train one. Nothing generative sits anywhere in our scoring — that is a standing engineering rule, because a score a lender or buyer might rely on has to be reproducible.
  • We do not publish your business in an example. The companies in our sample report and case studies are fictional composites, labelled as such on those pages. Real client work is only ever published with written permission.
  • We do not track you across the internet. No advertising pixels, no remarketing tags, no analytics of any kind on this site.

The technical footnotes

Small, true, and usually omitted. We would rather you find them here than in a network inspector.

Hosting

This site is served by Vercel. Like every web host, their servers process the connection itself — your IP address and browser type appear in ordinary server logs. We do not read those logs to identify visitors and we do not join them to form submissions.

Typefaces

The fonts on this page load from Google Fonts. That means your browser makes a request to Google's servers, and your IP address is visible to Google in that request. This happens on almost every website on the internet; it is still a third party seeing something, so we are naming it.

Cookies

None. This site sets no cookies and stores nothing in your browser. There is no consent banner here because there is nothing to consent to.

How long we keep it

  • An enquiry that does not become an engagement: kept for 24 months after we last hear from you, then deleted from our records.
  • A sample report request: same — 24 months, then deleted.
  • A client engagement: the assessment file and the working papers behind it are kept for seven years after the engagement ends. An assessment is a professional record; if someone challenges a finding years later, the evidence for it has to still exist. This is the one category we will not delete on request while that period runs, and we would rather say so than surprise you with it.

Emails live in our mail system for as long as the corresponding record does, and are deleted on the same schedule.

Getting your information back, corrected, or deleted

You do not need to cite a regulation and you do not need a reason.

  • Reply to any email we have sent you and say what you want — a copy of what we hold, a correction, or deletion. That reply reaches the same person who read your enquiry.
  • Or use the contact form and write your request in the message box. Put "delete my information" at the top and you can leave the optional business fields empty.

We act on it within 30 days and confirm in writing when it is done. Deletion covers our own records, which is now the only place your enquiry exists. If we have already made an advisor introduction, tell us and we will ask the advisor to delete their copy too — we will pass the request on and tell you what they say, but once information has reached another firm we cannot compel them, and we are not going to pretend otherwise.

Depending on where you live, you may have statutory rights beyond these — several US states and the UK and EU give residents rights of access, correction, deletion, and objection. We apply the process above to everyone regardless of where they live, because operating two standards would be worse than operating one good one.

What we cannot promise

Read this part twice

We cannot promise that no one will ever breach a system that holds your information. We use reputable providers and keep the amount we collect small, which is the only genuinely effective protection, but anyone claiming a guarantee here is selling you something.

We cannot control what a third party does once information has legitimately reached them. If you consent to an advisor introduction, that advisor's own privacy practices govern their copy, not ours.

We cannot refuse a lawful court order, subpoena, or regulatory demand. If one arrives, we will tell you unless we are legally barred from doing so.

We cannot undo a disclosure. That is precisely why the introduction consent is a separate, unticked box rather than a line of small print — the decision has to be yours before it happens, not a complaint afterwards.

Changes to this page

If we change what we do with your information, we change this page and move the date at the top. If a change is material — a new third party, a new purpose, a longer retention period — we will say what changed rather than quietly reissuing the document. Anyone we hold an active enquiry for will be told by email before it takes effect.

Questions about any of this are welcome and we would rather answer them before you submit a form than after. Reply to any email from us or use the contact form.

Still want to talk?

Now you know exactly what happens to what you send. The consent box on the form is unticked, and leaving it that way still gets you an answer.

Request a Report