Your numbers,
kept private.
How we store the financial data you share, who can see it, how to have it deleted, and why anything you connect is read-only.
- Encrypted in transit and at rest
- Only you and people you invite
- Connected accounts are read-only
- Deleted on request
How it's stored
Where your data lives.
Your answers and figures
Questionnaire answers, the financial figures you type in, and your results are stored in our database (Supabase, hosted in the cloud). The database is not publicly reachable; only our servers can read it.
Uploaded documents
Reports you upload to an agency valuation (P&L, sales by customer, A/R aging) go into private file storage. Files are never public: each download uses a short-lived signed link created for a signed-in team member.
Exit Readiness P&L uploads
When you upload a P&L to the free Exit Readiness Score, we read the figures from it and discard the file. The file itself is never stored; only the figures we extracted are kept with your result.
Encryption
Everything travels over HTTPS (TLS). Our database and file storage provider encrypts data at rest. Sign-in uses one-time email links or Google, so there are no passwords to leak.
Who can see it
Only the people you choose.
01
You, and people you invite
A workspace is visible only to its members. You choose each person's role: owners and admins manage the team, contributors work on the valuation and data room, and viewers can only read.
02
Exiting.com advisors, to help you
A small number of Exiting.com staff can access workspaces to support you and prepare your exit. Access is limited to named people and is never used for anything else.
03
Never buyers without your say-so
Your business is never listed publicly. Buyers only see what you choose to share, after signing an NDA. Client names in your reports are never included in your valuation result.
04
Never sold
We don't sell or rent your data, and we don't share your financials with advertisers.
Connected accounts
Read-only, always.
When you connect an account, we only ask for read-only permission. For Google Analytics that is Google's analytics.readonly scope: we can read a 30-day traffic summary, and we cannot change your settings, data, or account.
You can revoke access at any time from your Google account's security settings, and connecting anything is always optional. Every feature also works with figures you type in yourself.
Deletion on request
Ask, and it's gone.
Email hello@exiting.com from the address you used with us and ask us to delete your data. We'll delete your Exit Readiness answers and results, your financial figures, any uploaded documents, and your account, and confirm by email when it's done.
Workspace owners can also remove documents from their data room and remove team members at any time. We may keep a minimal record we're legally required to hold, such as signed agreements.