We do not sell your data. We do not serve ads. Your financial inputs stay in your account and are not shared with third parties. We collect only what we need to run the platform: your name, email, and optional company for your account, and calculator inputs only if you choose to save a session. You can delete your account and all your data at any time. Full details below.

Section 1

Introduction & Scope

ExitAdviser.com ("," "we," "us," or "our") operates the website at exitAdviser.com and the financial tools and calculators accessible through it (collectively, the "Services"). This Privacy Policy explains how we collect, use, store, share, and protect information about you when you use the Services.

This Privacy Policy applies to all visitors, registered users, and anyone else who accesses or uses the Services. It does not apply to the practices of third parties that we do not own or control, or to individuals that we do not employ or manage.

By using the Services, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with any part of this policy, you must not use the Services.

Section 2

Information We Collect

A. Information you provide directly

Account registration: First name, last name, email address, and optional company name when you create a free account
Calculator inputs: Financial data you enter into our calculators, including revenue figures, expense percentages, loan balances, compensation data, and other business metrics -- all entered at your discretion
Saved sessions: Calculator results and session state that you choose to save to your account
Communications: Any information you provide when you contact us for support, report a bug, or submit feedback

B. Information collected automatically

Usage data: Pages visited, tools opened, time spent, features used, tab navigation within calculators, and other interaction data
Device and browser information: Browser type and version, operating system, device type (desktop/mobile/tablet), screen resolution, and language settings
IP address: Collected for security, fraud prevention, and approximate geolocation (country/region level)
Cookies and similar technologies: Session cookies for authentication, preference cookies for settings like dark/light mode, and analytics cookies as described in Section 6
Referral source: How you arrived at the Services (e.g., search engine, direct URL, referring website)

C. Information we do NOT collect

We do not collect payment card numbers, bank account information, or Social Security numbers
We do not collect sensitive personal information such as racial or ethnic origin, religious beliefs, or health information
We do not collect information about children under 13, and the Services are not directed to children
We do not require or store government-issued identification numbers

Section 3

How We Use Your Information

We use the information we collect for the following purposes:

Purpose	Information used	Legal basis
Provide and operate the Services	Account data, calculator inputs, session data	Contractual necessity
Authenticate your account and maintain security	Email, IP address, session tokens	Contractual necessity / Legitimate interest
Save and restore your calculator sessions	Input data, session state	Consent (you choose to save)
Send account-related emails	Email address	Contractual necessity
Respond to support requests	Name, email, communication content	Contractual necessity
Improve and develop the Services	Aggregated usage data, feature interaction	Legitimate interest
Detect and prevent fraud and abuse	IP address, usage patterns, account activity	Legitimate interest / Legal obligation
Comply with legal obligations	As required by applicable law	Legal obligation
Send product updates (if opted in)	Email address	Consent

We do not use your calculator input data to train machine learning models, sell to data brokers, or share with advertisers. Your financial data stays in your account.

Section 4

How We Share Your Information

We do not sell your personal information to third parties. We do not share your name, email, or calculator input data with advertisers, data brokers, or other commercial parties for their own marketing purposes.

We may share information in the following limited circumstances:

Service providers (processors)

We share information with vendors who help us operate the Services, including hosting providers, email delivery services, analytics platforms, and customer support tools. These vendors process data on our behalf under contractual data processing agreements and are prohibited from using your data for their own purposes.

Legal requirements

We may disclose information if we believe in good faith that disclosure is required by applicable law, regulation, legal process (such as a court order or subpoena), or governmental request. Where permitted, we will attempt to notify you before such disclosure.

Business transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving , your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Services before your information is transferred and becomes subject to a different privacy policy.

Protection of rights

We may share information when we believe in good faith that it is necessary to protect the rights, property, or safety of , our users, or the public -- including to detect, prevent, or address fraud, security, or technical issues.

With your consent

We may share information for any other purpose with your explicit consent.

Section 5

Calculator Data & Financial Privacy

Your financial inputs are private. The revenue figures, compensation data, loan balances, expense percentages, and other business financial data you enter into calculators are not shared with third parties, not used for advertising, and not sold. They are used solely to compute and display results to you.

Unregistered / guest users

If you use the Services without creating an account, your calculator inputs exist only in your browser session. We may collect anonymized, aggregated usage analytics (e.g., "1,200 users ran the SBA 7(a) calculator today") but we cannot identify you or associate inputs with any individual.

Registered users (saved sessions)

When you save a session, the input data and output results are stored in your account on our servers. This data is encrypted at rest and in transit. Session data is retained for 90 days of inactivity, after which it is permanently deleted. You can delete any saved session or your entire account at any time from your account settings.

Aggregated analytics

We may analyze aggregated, de-identified patterns across all calculator usage to understand which tools are most useful, what inputs are most common, and how to improve the Services. This analysis does not identify any individual user.

Section 6

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Services. Cookies are small data files placed on your device. You can control cookies through your browser settings, but disabling certain cookies may limit your ability to use some features of the Services.

Cookie type	Purpose	Duration	Can opt out?
Strictly necessary	Authentication tokens, session state, CSRF protection	Session / 30 days	No -- required for login
Preference	Dark/light mode, last-used calculator, UI settings	1 year	Yes -- clearing cookies resets
Analytics	Aggregated usage data (pages, features, session duration)	Up to 2 years	Yes -- via cookie settings
Performance	Error monitoring, crash reporting, load time measurement	Session	Yes -- via cookie settings

We do not use advertising cookies, behavioral targeting cookies, or third-party social media tracking pixels. does not serve advertisements and does not share data with advertising networks.

Third-party analytics

We may use privacy-respecting analytics services (such as Plausible Analytics or similar) that do not use cookies, do not track users across websites, and do not collect personally identifiable information. Where standard analytics tools are used, IP addresses are anonymized and data is aggregated before storage.

Section 7

Data Retention & Deletion

Account data (name, email, company) is retained for the life of your account and deleted within 30 days of account closure
Saved calculator sessions are deleted automatically after 90 days of inactivity, or immediately upon your request
Anonymous usage analytics are retained in aggregated form for up to 24 months
Support communications are retained for up to 3 years for quality and legal purposes
Security and fraud logs (IP addresses, access timestamps) are retained for up to 12 months
Legal hold: if we are required by law to retain certain information, we will do so for the legally required period even if you request deletion

You may request deletion of your account and all associated data at any time by going to Account Settings → Data & Privacy → Delete Account, or by emailing privacy@exitAdviser.com. We will confirm deletion within 5 business days and complete it within 30 days.

Section 8

Data Security

We implement commercially reasonable technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption in transit: All data transmitted between your browser and our servers uses TLS 1.2 or higher (HTTPS)
Encryption at rest: Saved session data and account information is encrypted at rest using AES-256 or equivalent
Access controls: Employee access to user data is limited to those with a legitimate business need and is logged and audited
Password security: User passwords are hashed using bcrypt or equivalent one-way hashing; we never store plain-text passwords
Vulnerability management: We conduct periodic security reviews and promptly remediate identified vulnerabilities
Incident response: We maintain an incident response plan and will notify affected users of data breaches as required by applicable law

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and are not responsible for the unauthorized acts of third parties. If you believe your account has been compromised, contact us immediately at security@exitAdviser.com.

Section 9

Your Privacy Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information. We honor all of these rights regardless of where you are located.

Right to Access

Request a copy of the personal information we hold about you.

Right to Correction

Request that we correct any inaccurate or incomplete information.

Right to Deletion

Request that we delete your personal information, subject to legal retention requirements.

Right to Portability

Request your personal information in a structured, machine-readable format (e.g., JSON or CSV).

Right to Restrict Processing

Request that we limit how we use your data in certain circumstances.

Right to Object

Object to processing based on legitimate interests, including direct marketing (if any).

Right to Withdraw Consent

Where processing is based on consent, withdraw it at any time without affecting prior processing.

Right to Non-Discrimination

We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email us at privacy@exitAdviser.com. We will respond within 30 days. We may ask you to verify your identity before processing your request. We will not charge a fee for reasonable requests.

California residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including the right to know what categories of personal information we collect, the right to opt out of the sale of personal information (we do not sell personal information), and the right to limit the use of sensitive personal information. To exercise CCPA rights, contact us at privacy@exitAdviser.com or use our data request form in Account Settings.

European residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent national legislation. Our legal bases for processing your data are described in Section 3. You also have the right to lodge a complaint with your local supervisory authority.

Section 10

International Data Transfers

is based in the United States. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country.

For users in the EEA, UK, or Switzerland, we rely on the following mechanisms to lawfully transfer personal data to the United States:

Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to service providers
Adequacy decisions where the receiving country has been recognized as providing adequate data protection
Your consent, obtained explicitly where required

By using the Services, you consent to the transfer of your information to the United States and its processing there.

Section 11

Third-Party Links & Services

The Services may contain links to third-party websites, tools, or resources. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Services.

Specifically, if you sign in using a third-party single sign-on service (such as Google), that service's privacy policy governs the information they provide to us. We receive only the minimum information required to create your account (typically name and email address).

Section 12

Children's Privacy

The Services are intended for users who are 18 years of age or older. We do not knowingly collect, solicit, or retain personal information from children under 13 years of age. If we learn that we have collected personal information from a child under 13 without verification of parental consent, we will delete that information promptly.

If you believe we may have collected information from a child under 13, please contact us at privacy@exitAdviser.com.

Section 13

Email Communications

Transactional emails: We send emails related to your account, including account confirmation, password reset, session expiry notices, and security alerts. These emails are required and cannot be opted out of while you have an active account.
Product updates: We may send occasional product announcement emails. You may unsubscribe from these at any time by clicking the unsubscribe link in any such email or by emailing us at privacy@exitAdviser.com.
No advertising emails: We do not send promotional emails on behalf of third parties. We do not sell your email address to any third party.

We use email delivery service providers to send transactional and product emails. These providers process your email address solely for delivery and are prohibited from using it for their own marketing purposes.

Section 14

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or applicable law. When we make material changes, we will:

Update the "Last Updated" date at the top of this policy
Send an email notification to registered users at least 14 days before material changes take effect
Display a prominent notice within the Services for 30 days after material changes are published

Your continued use of the Services after material changes take effect constitutes your acceptance of the revised policy. If you do not agree to the revised policy, you must stop using the Services and may delete your account.

Section 15

Contact Information

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

Privacy contact

Privacy requestsprivacy@exitAdviser.com

Security issuessecurity@exitAdviser.com

General supportservices@exitadviser.com

Legal / Data Officerlegal@exitAdviser.com

Response timeWithin 5 business days

Deletion completionWithin 30 days of request