Privacy Policy

Effective date: May 21, 2026Last updated: May 21, 2026

This Privacy Policy explains how Profit Leap Inc. doing business as Accounting Firm Exchange ("AFX", "we", "us", or "our") collects, uses, discloses, and protects personal information in connection with the website at accountingfirm.exchange and related services (the "Platform"). It is incorporated into our Terms of Service. By using the Platform, you agree to this Policy.

1. Information we collect

Information you provide:

Account and registration: name, work email, phone number, password, and your role (buying, selling, or valuing).
Profile and listing information: professional details, firm characteristics, practice areas, geography, transition preferences, and similar information you choose to provide.
Confidential transaction materials: financial statements, tax and practice data, client- and staff-related information, and other documents you upload to listings or data rooms.
Valuation inputs: information you enter into valuation tools.
Communications: messages you send to other Users, support requests, and inquiries.
Payment information: processed by our payment processor (Stripe); we receive limited details such as subscription status and the last four digits and brand of your card, but we do not store full payment-card numbers.

Information collected automatically: log and usage data (pages viewed, actions taken, timestamps), device and browser information, IP address and approximate location, and information collected via cookies and similar technologies.

Information from third parties: limited information from service providers, such as payment status from our payment processor.

2. How we use information

We use personal information to: operate, provide, and maintain the Platform; create and manage accounts; facilitate confidential matching, the NDA workflow, and tiered data-room access that you initiate or approve; process subscriptions, success fees, and payments; send transactional messages, alerts, and service communications; provide customer support; generate listing imagery and other features using automated tools (see Section 3); secure the Platform and detect, prevent, and address fraud, abuse, and security incidents; analyze and improve the Platform; and comply with legal obligations and enforce our Terms.

3. Automated content generation

Certain features, such as illustrative listing thumbnails, are generated using third-party automated model providers (for example, via OpenRouter and Google's Gemini models). When such features are used, we send only the relevant non-confidential prompt inputs to those providers to generate output. We do not send confidential firm financial statements, client data, or taxpayer information to third-party model providers.

4. How we disclose information

To other Users, as inherent to the marketplace. Listings are first shown to other Users in anonymized form. A firm's identity and confidential details, and your identity as a counterparty, are disclosed to another User only through the matching, NDA, and tiered data-room workflow that you initiate or approve. You control what you upload and when you advance a deal.
To service providers (processors) who perform services on our behalf and are bound to protect the information, including hosting and database infrastructure (Supabase), payment processing (Stripe), automated content generation (OpenRouter/Google), and email delivery.
For legal and safety reasons, including to comply with law or legal process, enforce our Terms, or protect the rights, safety, and property of AFX, our Users, or others.
In a business transfer, such as a merger, acquisition, financing, or sale of assets, subject to this Policy.
With your consent, or as otherwise directed by you.
Aggregated or de-identified information that does not reasonably identify you.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

5. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Platform, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality.

6. Retention

We retain personal information for as long as your account is active and as needed to provide the Platform, and thereafter as necessary to comply with legal obligations, resolve disputes, maintain security, and enforce our agreements. We may retain de-identified or aggregated information indefinitely.

7. Security

We use administrative, technical, and organizational measures designed to protect personal information, including access controls and encryption in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your choices and rights

You may review and update account information in your settings, and you may opt out of non-essential marketing emails using the unsubscribe link (we will still send transactional and service messages).

Depending on where you live, you may have rights under applicable U.S. state privacy laws (for example, California's CCPA/CPRA and similar laws in states such as Virginia, Colorado, Connecticut, and others), including the right to: know/access the personal information we have collected; correct inaccuracies; delete your information; obtain a portable copy; and, where applicable, opt out of sale or targeted advertising. You also have the right not to receive discriminatory treatment for exercising these rights. To exercise any right, contact us at privacy@accountingfirm.exchange; we will verify your request and respond within the timeframes required by law. You may use an authorized agent where permitted, and you may appeal a denial by contacting the same address.

Note: confidential transaction materials you upload may also be subject to professional confidentiality and taxpayer-data rules, and certain deletion or disclosure requests may be limited by our legal obligations or by other Users' rights.

9. Children

The Platform is intended for business use by adults and is not directed to children under 18, and we do not knowingly collect personal information from them.

10. United States only

The Platform is intended for Users in the United States, and information is processed in the United States. We do not intend to offer the Platform to individuals located outside the United States.

11. Third-party links

The Platform may link to third-party sites and services that we do not control. This Policy does not apply to them; review their privacy policies.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new "Last updated" date and, for material changes, provide additional notice as appropriate. Your continued use after the changes take effect constitutes acceptance.

13. Contact

Profit Leap Inc. d/b/a Accounting Firm Exchange - 7901 4th St N #32552, St. Petersburg, FL 33702, USA - privacy@accountingfirm.exchange.