Privacy

1. What Meor collects

Account: your name, email address, phone number if you gave one, and language. Profile: your country of residence, and — asked only when a deal reaches funding — the country of the bank account you will pay from or be paid to.

Listings: everything you enter when listing an asset, the ownership-verification token issued to you and the result of the check, and any price change or withdrawal.

Connected accounts: if you connect Stripe or Shopify, the read-only credential you paste and the figures Meor reads with it (monthly revenue, customer counts, refund rate, subscription churn and the like), kept as dated snapshots.

NDAs and deals: the name you type to sign an NDA and when; the seller's decision; every offer, agreed term, state change and note on a deal, with its time and who made it. Outreach: the lists and draft messages Meor prepared for your domain listing.

Technical: the sign-in cookie, and server logs of requests to the service.

2. Why

To run the marketplace: show listings, verify domain control, label the source of figures, match listings to a buyer's thesis, and track deals. To let a licensed escrow provider run the payment. To keep the record of who agreed and signed what, which is how disputes are resolved. To detect fraud and misuse. To meet legal obligations.

Meor does not sell personal data and does not use it for advertising.

3. Who can see what

Anyone: the public content of a live listing, and the labels on its figures. The other party to a deal: your name, email address, and the country of your residence and bank as recorded on the deal. A buyer you approve on a confidential listing: what you chose to reveal. The escrow provider: what it needs to open and run the transaction, under its own privacy terms.

Meor's operator: whatever is needed to run listings, deals and the manual-escrow route — including your listing content, connection state (never the credential itself) and deal records. The operator's actions on a deal or listing are written into its record with the operator's email.

4. Where it is kept, and by whom

Database and sign-in: Supabase, in Frankfurt (EU). Hosting: Vercel. Transactional email (verification codes and notices): Resend. Escrow: Escrow.com, which holds its own records under its own policy. Stripe and Shopify see Meor's read requests made with the credential you provided. An AI writer (Anthropic) is used for drafting listing text and outreach only when enabled — it receives the domain name and listing text, never credentials, personal contact details or deal records; it is not enabled at the time of writing.

Connected-account credentials are encrypted at rest and are used only to read the figures shown on your listing. Deal money-state can be written only by the escrow provider's confirmed responses or, on a manual route, by Meor's operator with a written note; no user can write it.

5. How long

Account and listing data: while your account exists. A withdrawn listing is kept as a record and hidden from buyers. Connected-account credentials and their snapshots are deleted when you disconnect. Deal records, NDA signatures and timelines are kept after a deal ends, because they are the record both parties and the escrow provider may need; they are retained as long as a dispute or a legal obligation could arise.

6. Your choices

You can edit your listing's price, withdraw a listing, disconnect a connected account and change your thesis yourself. You can ask Meor for a copy of your data, a correction, or deletion of your account; deletion removes your profile and listings, while deal and NDA records that another party or the provider may still need are retained as described above.

Cookies: Meor sets a sign-in cookie and nothing else. There are no advertising or analytics trackers.

7. Changes and contact

Meor may change this page; the date at the top changes when it does. Contact details for privacy requests will be published here before general launch; until then, reply to any email Meor has sent you.