Privacy Policy

Last updated: August 15, 2026

The short version: we collect what we need to run a buying group — your Google sign-in identity, your bank details for ACH payouts (encrypted), your orders and tracking data, and your support tickets. We share it only with the service providers that operate the platform (hosting, bank, email, warehouses) and where the law or fraud prevention requires. We do not sell your personal information.

1. Who we are; what this covers

This Privacy Policy describes how TheBuyerForce Inc., a Wyoming corporation ("we," "us"), collects, uses, shares, and retains personal information when you use thebuyerforce.com, os.thebuyerforce.com, and the related services (the "Services"). Our Terms of Service govern your membership; where this Policy and the Terms conflict about data practices, this Policy controls.

2. What we collect

Account and profile. When you register with Google, we receive your name, email address, and profile photo from Google. You can add a phone number and update your name and avatar in your profile. We also record your onboarding progress and experience level.
Payout and bank details. To pay you by ACH we collect your bank account holder name, bank name, account type, account and routing numbers, and a U.S. mailing address. Account and routing numbers are encrypted at the application layer before storage; interfaces show only the last four digits. If we require tax documentation (such as a Form W-9), we collect the information on that form.
Transactions and logistics. Deal reservations, orders, tracking numbers, package contents and quantities, warehouse receiving records, carrier delivery events (including delivery location and signer name reported by the carrier), your balance ledger, payout requests, and payout receipts.
Support and submissions. Support tickets and messages, file attachments, package-search requests and the order screenshots you provide, and notes you add to reservations and orders.
Device and usage. Session records for your logged-in devices (IP address and browser user agent, kept for the last 30 days and visible to you in Settings), notification delivery records, and website analytics collected through cookies and similar technologies (Google Analytics, Vercel Analytics).
Verification and risk. Where needed to verify identity or investigate suspected fraud, we may collect government-issued photo ID, purchase receipts, bank account confirmation, and related documentation, and we maintain internal risk and verification statuses.

We do not collect your payment-card numbers (you pay retailers directly), and we do not collect your home shipping address unless it is part of your ACH billing address.

3. How we use it

Operating the program: reservations, order matching, warehouse check-in, exception handling, balances, and payouts.
Sending transactional notifications (in-app and email) about your reservations, orders, exceptions, balance, payouts, account, and legal notices.
Sending marketing email such as deal announcements, subject to your notification preferences and unsubscribe choices.
Verifying identity, screening against U.S. sanctions lists, preventing and investigating fraud, and enforcing our Terms.
Complying with law: tax reporting, responding to lawful requests, unclaimed-property obligations, and record-keeping.
Improving the Services through aggregate analytics.

4. Who we share it with

Service providers that operate the platform on our behalf: Supabase (database and authentication), Google (sign-in, analytics), Vercel (hosting and analytics), Resend (email delivery), Mercury and its partner banks (ACH payouts — they receive your name, email, bank account details, and billing address), FedEx and UPS (shipment tracking lookups), and our warehouse operators (who receive the tracking numbers, product identifiers, package details, your name for receiving forecasts, and package-search documentation needed to receive and reconcile your shipments).
Fraud prevention and legal. Where we reasonably suspect fraud, stolen goods, or other unlawful activity, or where required by law or legal process, we may share relevant records with law enforcement, our bank and payment processors, and affected retailers, as described in the Terms.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred with notice to you.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

5. How long we keep it

We keep account, transaction, ledger, and payout records while your account is open and afterward as needed for legal, tax, audit, fraud-prevention, and dispute purposes (generally up to seven years for financial records). Session records are kept for 30 days. Verification documents are kept only as long as needed for the verification or investigation and applicable legal requirements. When retention is no longer required, we delete or de-identify the data.

6. Your choices

Marketing email: opt out any time via the unsubscribe link in any marketing email or in notification preferences. Service and account messages continue while you have an account.
Profile and preferences: update your name, phone, avatar, and notification preferences in Settings; review and revoke logged-in sessions in Settings.
Cookies and analytics: you can control cookies in your browser settings; blocking essential cookies may break sign-in.
Account closure and deletion requests: request account closure, or access, correction, or deletion of your personal information, through the in-app Support Center. We will honor verified requests except where we must retain records for the legal and fraud-prevention purposes above (for example, ledger and payout history).

7. State privacy rights

Depending on where you live, you may have rights under state privacy laws (including California, Colorado, Connecticut, Texas, Utah, Virginia, and others) to know, access, correct, and delete personal information we hold about you, and to be free from discrimination for exercising those rights. Submit requests through the in-app Support Center; we will verify your identity via your account and respond within the time your state's law requires. We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of. Authorized agents may submit requests with proof of authorization.

8. Security

We use commercially reasonable safeguards: encrypted transport, application-layer encryption for bank account numbers, role-based access controls, and audit trails for payout operations. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by law.

9. Children

The Services are for adults 18 and over. We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us information, contact us and we will delete it.

10. Changes; contact

If we make material changes to this Policy, we will notify you by email and in-app notice before the changes take effect and update the date at the top. Questions and requests: support@thebuyerforce.com, the in-app Support Center (Tickets), our community Discord, or by mail to TheBuyerForce Inc., 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801. See also the Terms of Service.