Trust and security

Your information
stays protected.

We treat confidential business data the way it deserves to be treated.

Privacy

Privacy controls throughout the marketplace.

We collect account and business details to operate the marketplace, under Canada's Personal Information Protection and Electronic Documents Act. Sellers control access to confidential information and can review buyer requests. We do not sell your data.

Data residency

Know where your information goes.

Your data is stored in Canada. Payments are handled by Stripe. See the Privacy Policy for details.

Confidentiality controls

Blind by default. Access by approval.

Public listings show the approved teaser, asking price, and revenue range. Financials, documents, and identity release only after a buyer signs an NDA and the seller approves the request. Sellers see every access request and can revoke access at any time.

Security

Your security is our top priority.

Selling a business means sharing your financials, contracts and the details that matter most. We built Sellvara so that information stays protected, and stays yours.

01

Encrypted and kept in Canada

Confidential documents and listing details are encrypted with Sellvara's own keys, on top of our providers' encryption, and stored in Canada.

02

You decide who sees what

Nothing confidential is shared until a buyer accepts the NDA, verifies their funds and you approve them. Access ends after 90 days unless you renew it, and you can revoke it at any time.

03

Every document is traceable

Each download is stamped with the buyer's name, email and a reference number, recorded, and limited, so a leaked copy can be traced to the person who downloaded it.

04

Accounts that are hard to break into

Strong passwords checked against known data breaches, 2-step sign-in for anyone handling confidential documents, bot protection, automatic sign-out, and an email alert whenever account details change.

05

Protection from payment fraud

Messages are checked for common payment scams. Sellvara only takes payment on sellvara.com and will never ask you to send money or change bank details by email or message. How to close safely →

06

Less data, kept for less time

Proof-of-funds documents are deleted once reviewed, confidential documents are deleted 90 days after a listing ends, and our records are backed up and encrypted every week.

Report a security issue

Found a weakness? Tell us first.

If you believe you've found a security problem on sellvara.com, email colton.doan+security@sellvara.com with what you found and how to reproduce it. We'll reply within three business days and keep you updated until it's fixed.

Please don't access, change or keep anyone else's information, don't disrupt the service, and give us a reasonable time to fix the problem before telling anyone else. We won't pursue or report anyone who reports in good faith and follows these guidelines. There's no bug bounty at this time.

Talk to us

Questions about security?