FindSBAQoE Privacy Policy

Last updated: October 12, 2026

1. Who we are

FindSBAQoE.com (the "Site") is operated by Synchay LLC, a Utah limited liability company ("FindSBAQoE," "we," "us"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

This policy works together with our Terms of Service. If you have questions, contact us at findsbaqoe@synchay.com.

2. The short version

• Lenders and visitors do not need an account. You can browse, search, and use the matching tool without signing in.
• We do not intentionally store lender matching criteria as a saved transaction record. The criteria are used to calculate and display results. Our service providers may temporarily process limited technical request information to operate and secure the Site.
• We do not want borrower or client information. The Site is built to hold information about provider firms only.
• Only providers have accounts, and provider accounts are by invitation.
• We do not sell personal information, and we do not use it for cross-context behavioral advertising.
• We may collect aggregate information about page views and interactions with provider contact links. We do not use this information to identify individual visitors or track them across unrelated websites.
• We use cookies and similar browser storage needed for provider authentication, account setup, password recovery, security, and operation of the Site. We do not use them for cross-site behavioral advertising.
• Our database and file storage are configured in Canada. The Site is hosted through Vercel, which may process technical request information through infrastructure in the United States and other locations where it operates.

3. Information we collect

3.1 Provider accounts

When a provider account is created and used, we collect:

• Account information: email address and password. Passwords are stored by our authentication provider in a protected, hashed form. We cannot see your password.
• Account role: which firm your account belongs to and your role for that firm (for example, owner or editor).
• Account activity: basic records such as when an account was created, when a profile was updated, and when a profile was published.

3.2 Firm profiles and provider content

Providers submit information about their firm, which may include:

• Firm name, description, locations, and service area
• Services offered, industries served, transaction sizes, experience, availability, turnaround times, and fee ranges
• Business contact details, such as a firm email address, phone number, and website
• Names and credentials of team members the firm chooses to list
• Logos
• Sample reports

Published profile information is public by design. See Section 5.

Providers must only list team members who work with the firm and have agreed to be listed. Providers must have permission to publish all materials they submit. Providers must not upload client or borrower information (see Section 3.6).

3.3 Lenders and other visitors

Lenders and other visitors do not create accounts, and we do not ask for their names or contact details.

• Matching tool: what you enter (such as industry, transaction size, complexity, timing, and budget) is used to calculate and display results. We do not intentionally store lender matching criteria as a saved transaction record. Our service providers may temporarily process limited technical request information to operate and secure the Site.
• Aggregate page views and contact interactions: We may collect aggregate information about page views and interactions with provider contact links so we can understand Site usage and provide providers with general information about activity on their listings. We do not use this information to identify individual visitors or track them across unrelated websites.
• If you contact a provider, that communication happens directly between you and the provider, outside the Site, and is governed by the provider's own practices.

3.4 Information collected automatically

Like most websites, our hosting and database providers automatically record basic technical information when the Site is used, such as IP address, browser type, device type, pages requested, and the date and time of the request. This information is used to operate the Site, keep it secure, prevent abuse, and fix problems. We do not use it to build profiles of individual visitors.

3.5 When you contact us

If you email us, we receive your email address, your name if you include it, and whatever you write. We use it to respond and keep a record of the request.

3.6 Information we do not want

The Site is not built to receive borrower, client, or transaction information. Please do not enter or upload:

• Borrower or client names, financial statements, tax returns, bank records, or account numbers
• Client deliverables, workpapers, or prior reports, unless fully fictional or sanitized
• Any information you are required to keep confidential

Lenders using the matching tool should describe transactions only in general terms. If we learn that prohibited information was submitted, we may restrict access to it and delete it as appropriate. We may retain limited records when reasonably needed for security, legal, or incident-response purposes.

4. How we use information

We use information to:

• Create and manage provider accounts, including sending invitation and password reset emails
• Display provider profiles and run the matching tool
• Collect aggregate information about page views and provider contact-link interactions so we can understand Site usage and provide providers with general information about activity on their listings
• Respond to questions and requests
• Keep the Site secure, prevent fraud and abuse, and enforce our Terms of Service
• Operate, maintain, and improve the Site
• Send service-related messages to providers, such as security notices or important changes to our terms
• Comply with legal obligations

We do not sell personal information or use it for cross-context behavioral advertising.

5. What is public

When a provider publishes its profile, the following are visible to anyone using the Site, including search engines:

• Firm profile details and business contact information
• Names and credentials of listed team members
• Logos
• Sample reports made available to the public through the provider's published profile

Published sample reports are available to the public through the provider profile. The sample-storage bucket may remain private even though published samples are made publicly accessible through short-lived links. Providers must have permission to list team members and publish all submitted materials.

Provider account email addresses and passwords are never shown publicly. Unpublished profiles are not visible to the public.

6. How we share information

We share information only as described below.

Service providers. We use trusted companies to run the Site. They process information on our behalf and only as needed to provide their services:

We may add service providers for email delivery, security, analytics, spam prevention, or payments. We will update this Privacy Policy as appropriate when we do.

Legal and safety reasons. We may disclose information if we believe it is required by law, legal process, or a government request, or to protect the rights, safety, or property of FindSBAQoE, our users, or others.

Business transfers. If FindSBAQoE is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will require the recipient to honor this Privacy Policy, or notify you of any change.

With your direction. We may share information when you ask us to.

We do not sell personal information, and we do not share it for cross-context behavioral or targeted advertising.

7. Cookies

We use cookies and similar browser storage needed for provider authentication, account setup, password recovery, security, and operation of the Site. Their duration depends on their purpose and the authentication settings in effect. We do not use them for cross-site behavioral advertising.

Lenders and visitors who do not sign in do not receive provider sign-in cookies.

We do not sell personal information or use it for cross-context behavioral advertising. We honor legally required privacy preference signals where applicable.

If we change how usage information is collected or add additional tools, we will describe the applicable collection and choices in this Privacy Policy.

8. Where information is stored

Provider account information, profile data, and uploaded files are stored with Supabase on servers configured in Canada. The Site is hosted through Vercel, which may process technical request information through infrastructure in the United States and other locations where it operates.

By using the Site, you understand that your information may be stored and processed in Canada, the United States, and other locations where our service providers operate, and may be subject to the laws of those countries, including lawful access by courts and authorities there.

9. How long we keep information

When an account closes, we remove the associated public profile and public access to its sample reports within a reasonable period. We delete or de-identify account information according to our operational retention practices. Limited information may remain longer in backups or when reasonably needed for legal, security, fraud-prevention, or dispute-resolution purposes.

10. How we protect information

We use safeguards designed to protect information, including:

• Access controls designed to restrict each provider to its authorized firm, together with periodic security reviews and testing
• Private storage for sample reports, shared only through short-lived links once a profile is published
• Encrypted connections (HTTPS) between your browser and the Site
• Passwords stored in a protected, hashed form by our authentication provider
• Invitation-only provider accounts, with no public sign-up

No system is perfectly secure, and we cannot guarantee that information will never be accessed, lost, or disclosed without authorization. If we learn of a security incident that affects your personal information, we will notify you and any required authorities as required by law.

Providers help protect their accounts by keeping passwords private and telling us right away at findsbaqoe@synchay.com if they suspect unauthorized access.

11. Your choices and rights

Wherever you live, you can ask us to:

• Access the personal information we hold about you
• Correct information that is inaccurate
• Delete your personal information, or close your provider account
• Receive a copy of your information in a commonly used format

Providers can update most profile information directly in their dashboard. To close an account, email us.

Listed team members who no longer want to appear on a firm's profile can ask the firm to remove them, or contact us directly and we will remove the listing.

To make a request, email findsbaqoe@synchay.com. We may request information reasonably necessary to confirm your identity and your relationship to the information involved. The verification method will depend on the request. We will respond to verified privacy requests within the time required by applicable law and will try to respond sooner when practical. If we cannot fully meet a request, for example because we must keep certain records by law, we will explain why. If you disagree with our response, you may reply to ask us to reconsider it.

We will not treat you differently for exercising any of these rights.

Since lenders and visitors do not have accounts and we do not intentionally store lender matching criteria as a saved transaction record, we usually hold little or no personal information about them beyond the technical logs described in Section 3.4.

12. Additional information for certain locations

United States residents. Some states give residents specific privacy rights, such as the rights described in Section 11 and the right to opt out of the sale of personal information or targeted advertising. We do not sell personal information or use it for cross-context behavioral advertising. We honor legally required privacy preference signals where applicable. We honor the requests in Section 11 for everyone, regardless of state.

Canada residents. You may access and request correction of your personal information, and withdraw consent to our use of it, subject to legal and contractual limits. Withdrawing consent may mean we can no longer provide a provider account. Questions or concerns can be sent to our privacy contact at findsbaqoe@synchay.com. You may also contact the Office of the Privacy Commissioner of Canada.

Visitors from other countries. The Site is intended for lenders and providers involved in U.S. SBA transactions. If you use it from elsewhere, your information will be handled as described in this policy and may be stored or processed in Canada, the United States, and other locations where our service providers operate.

13. Children

The Site is intended for business use and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy as the Site changes. We will post the new version here with a new "Last updated" date. For material changes, we will notify provider account holders by email or on the Site before the change takes effect.

15. Contact us

Privacy questions or requests: findsbaqoe@synchay.com

Synchay LLC, a Utah limited liability company