Privacy Policy

Last updated: November 9, 2026

Your information stays yours. We never sell your data, and your valuation is private until you choose to share it or list your business. This page explains what we collect, how we use it, and the control you have.

This Privacy Policy describes how Mercato, operated by Boldly Media Inc.(“Mercato,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information when you use our website and services (the “Service”). We are based in Hamilton, Ontario, Canada, and serve business owners and buyers in Canada and the United States.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information we collect

Information you provide

Valuation details. The business information you enter to generate a valuation — for example industry, country and region, annual revenue, annual profit, years in operation, revenue trend, customer concentration, and reason for selling.
Contact details. The email address you provide to receive your valuation or report, and your name and email if you sign a non-disclosure agreement (NDA) to request seller contact information.
Account information. If you create an account, your name, email address, role (seller, buyer, or broker), and optionally a phone number. Authentication is handled by our provider; we do not store your password.
Listing information. If you list a business, the financial and descriptive details you choose to include, and seller contact details, which are only revealed to a buyer after they sign an NDA.
Communications. Any messages you send us.

Information collected automatically

Usage and device data. Basic technical information such as IP address, browser type, and pages visited, used to operate and secure the Service (including rate-limiting to prevent abuse).
Cookies and local storage.We use strictly necessary cookies to keep you signed in, and limited browser storage to remember conveniences such as an email you entered or a listing you started. See “Cookies” below.

2. How we use your information

To generate your business valuation and deliver your results and report.
To operate the marketplace — publishing your listing, matching buyers and sellers, and processing NDA requests — if you choose to use it.
To create and manage your account and authenticate you.
To communicate with you about your valuation, account, or a listing, and, where permitted, to send you related updates you can opt out of at any time.
To maintain the security, integrity, and performance of the Service and to prevent fraud or abuse.
To comply with legal obligations.

We do not sell your personal information.

3. AI processing and service providers

To generate valuations, the business details you enter are sent to our AI provider, Anthropic (the Claude API), which processes them to return a valuation range and analysis. We also rely on trusted providers to run the Service, including Supabase (database and authentication) and Vercel (hosting). These providers process information on our behalf under their own terms and security practices, and only as needed to provide their services to us.

Because these providers may operate in the United States, your information may be processed or stored outside your province or country. See “International transfers” below.

4. When we share information

We share personal information only in these limited circumstances:

With your direction. When you list a business, your listing details become visible to buyers; and when a buyer signs an NDA for your listing, your designated contact details are revealed to that buyer.
With service providers who process information on our behalf, as described above.
For legal reasons — to comply with applicable law, respond to lawful requests, or protect the rights, safety, and property of Mercato, our users, or others.
In a business transfer — if Mercato is involved in a merger, acquisition, or sale of assets, subject to this policy.

5. Email and marketing communications

We send transactional messages related to your valuation, account, and listings. Where we send commercial electronic messages, we do so in accordance with applicable anti-spam laws, including Canada's Anti-Spam Legislation (CASL). You can withdraw consent or unsubscribe at any time using the link in our emails or by contacting us, and we will stop sending commercial messages.

6. Data retention

We keep personal information only as long as needed for the purposes described in this policy, to provide the Service, and to meet legal, accounting, or reporting requirements. You may ask us to delete your information as described below.

7. How we protect your information

We use administrative and technical safeguards — including encryption in transit, access controls, and database-level security rules — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights and choices

Subject to applicable law, you may request to access, correct, update, or delete your personal information, and withdraw consent to certain processing. Residents of certain jurisdictions (for example, under Canada's PIPEDA or applicable U.S. state privacy laws) may have additional rights. To exercise any of these, contact us at matt@boldlymedia.com. We will respond within the time required by applicable law.

9. International transfers

Mercato is operated from Canada, and our service providers may process information in the United States and elsewhere. Where required, we take steps to ensure your information receives appropriate protection when transferred across borders.

10. Children's privacy

The Service is intended for business owners and buyers and is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the updated policy.

12. Contact us

Questions or requests about your privacy? Contact our privacy contact at matt@boldlymedia.com, or write to us at Boldly Media Inc., 800 Paramount Drive, Unit 47, Stoney Creek, Ontario, Canada.