Privacy Policy

Effective: October 13, 2026

1. Who we are; what this covers

This Privacy Policy describes how TheBuyerForce Inc., a Wyoming corporation ("we," "us"), collects, uses, shares, and retains personal information when you use thebuyerforce.com, os.thebuyerforce.com, and the related services (the "Services"). Our Terms of Service govern your membership; where this Policy and the Terms conflict about data practices, this Policy controls.

2. What we collect

• Account and profile. When you register with Google, we receive your name, email address, and profile photo from Google. You can add a phone number and update your name and avatar in your profile. We also record your onboarding progress and experience level.
• Payout and bank details. To pay you by ACH we collect your bank account holder name, bank name, account type, account and routing numbers, and a U.S. mailing address. Account and routing numbers are encrypted at the application layer before storage; interfaces show only the last four digits. If we require tax documentation (such as a Form W-9), we collect the information on that form.
• Transactions and logistics. Deal reservations, orders, tracking numbers, package contents and quantities, warehouse receiving records, carrier delivery events (including delivery location and signer name reported by the carrier), your balance ledger, payout requests, and payout receipts.
• Support and submissions. Support tickets and messages, file attachments, package-search requests and the order screenshots you provide, missing-package claims and the proof of purchase (receipt or invoice) you upload with them, and notes you add to reservations and orders.
• Device and usage. Session records for your logged-in devices (IP address and browser user agent; you can review recent sessions and sign them out in Settings); records of when you accepted our Terms or other agreements (the date, version, IP address, and browser user agent); a random device identifier we store in a first-party cookie for up to two years, and a record of the devices you sign in from (that identifier, when we first and last saw it, and the last IP address and browser user agent); notification delivery records; and website analytics collected through cookies and similar technologies (Google Analytics, Vercel Analytics).
• Verification and risk. Where needed to verify identity or investigate suspected fraud, we may collect government-issued photo ID, purchase receipts, bank account confirmation, and related documentation, and we maintain internal risk and verification statuses. To spot duplicate or linked accounts, we also keep a one-way fingerprint of your bank routing and account numbers, which lets us tell whether two accounts use the same bank account without displaying the numbers, and a normalized form of your email address (for example, a Gmail address without dots or "+" tags).
• Referral program. If you take part in our referral program: your referral code; who referred you or whom you referred, and when and how the referral was recorded (link, code, or code added later); the IP address, browser user agent, and device identifier recorded when a referred account is created; a cookie that remembers a referral link you opened, for 60 days; the status of each referral and bonus; and, if your referral bonuses go over the annual limit, your Form W-9. We count clicks on referral links only as daily totals for each code, without recording who clicked.
• How you heard about us. Your answer, if you give one, to "How did you hear about us?" when you register.

We do not collect your payment-card numbers (you pay retailers directly), and we do not collect your home shipping address unless it is part of your ACH billing address.

3. How we use it

• Operating the program: reservations, order matching, warehouse check-in, exception handling, balances, and payouts.
• Sending transactional notifications (in-app and email) about your reservations, orders, exceptions, balance, payouts, account, and legal notices.
• Sending marketing email such as deal announcements, subject to your notification preferences and unsubscribe choices.
• Verifying identity, screening against U.S. sanctions lists, preventing and investigating fraud, and enforcing our Terms.
• Running the referral program: recording referrals, working out qualifying volume, reviewing and paying bonuses, preventing referral abuse, and tax reporting for bonuses.
• Complying with law: tax reporting, responding to lawful requests, unclaimed-property obligations, and record-keeping.
• Improving the Services through aggregate analytics.

4. Who we share it with

• Service providers that operate the platform on our behalf: Supabase (database and authentication), Google (sign-in, analytics), Vercel (hosting and analytics), Resend (email delivery), Mercury and its partner banks (ACH payouts — they receive your name, email, bank account details, and billing address), the carriers FedEx, UPS, OnTrac and Amazon (shipment tracking lookups), and our warehouse operators (who receive the tracking numbers, product identifiers, package details, your name for receiving forecasts, and package-search and missing-package claim documentation, including the proof of purchase you upload, needed to receive and reconcile your shipments).
• The member who referred you. If you join through a referral, the member who referred you sees your first name and last initial, the stage of the referral, and the days left in your qualification window — never your email, volume, Balance, or the reason for any decision.
• Fraud prevention and legal. Where we reasonably suspect fraud, stolen goods, or other unlawful activity, or where required by law or legal process, we may share relevant records with law enforcement, our bank and payment processors, and affected retailers, as described in the Terms.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred with notice to you.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

5. How long we keep it

We keep account, transaction, ledger, and payout records while your account is open and afterward as needed for legal, tax, audit, fraud-prevention, and dispute purposes (generally up to seven years for financial records). Session records are kept until that session ends, for example when you sign out of it. Records of your acceptance of our Terms and other agreements are kept as legal records. Device records are kept while your account is open and for up to two years after your last sign-in, for fraud prevention. Referral and bonus records, and any Form W-9, are kept as financial records. Verification documents are kept only as long as needed for the verification or investigation and applicable legal requirements. When retention is no longer required, we delete or de-identify the data.

6. Your choices

• Marketing email: opt out any time via the unsubscribe link in any marketing email or in notification preferences. Service and account messages continue while you have an account.
• Profile and preferences: update your name, phone, avatar, and notification preferences in Settings; review and revoke logged-in sessions in Settings.
• Cookies and analytics: you can control cookies in your browser settings; blocking essential cookies may break sign-in.
• Account closure and deletion requests: request account closure, or access, correction, or deletion of your personal information, through the in-app Support Center. We will honor verified requests except where we must retain records for the legal and fraud-prevention purposes above (for example, ledger and payout history).

7. State privacy rights

Depending on where you live, you may have rights under state privacy laws (including California, Colorado, Connecticut, Texas, Utah, Virginia, and others) to know, access, correct, and delete personal information we hold about you, and to be free from discrimination for exercising those rights. Submit requests through the in-app Support Center; we will verify your identity via your account and respond within the time your state's law requires. We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of. Authorized agents may submit requests with proof of authorization. California residents: our referral program is a financial incentive. See the Notice of Financial Incentive in the Referral Program Terms.

8. Security

We use commercially reasonable safeguards: encrypted transport, application-layer encryption for bank account numbers, role-based access controls, and audit trails for payout operations. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by law.

9. Children

The Services are for adults 18 and over. We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us information, contact us and we will delete it.

10. Changes; contact

If we make material changes to this Policy, we will notify you by email and in-app notice before the changes take effect and update the date at the top. Questions and requests: support@thebuyerforce.com, the in-app Support Center (Tickets), our community Discord, or by mail to TheBuyerForce Inc., 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801. See also the Terms of Service.