Privacy policy

InstaVal is a valuation service for small business owners. This policy describes what we collect, why we collect it, and what we do not do. It describes the service as it actually works today — if that changes, this page changes with it.

What we collect

Your email address, if you give it to us — either on our home page or on your valuation page when asking to be connected with a broker. We use it to send you your valuation and to reply to you. Nothing else.

Answers you give about your business, if you choose to answer them: revenue, revenue trend, lease length, whether you serve alcohol, how the business is managed, and your delivery and takeout mix. These refine your estimate. You are not required to answer any of them, and you can close the page at any point.

Account details, if you create an account: your name, email address, and a password. Passwords are stored only as a cryptographic hash — we cannot read yours, and neither could anyone who obtained a copy of our database.

What we do not do

We do not sell your data. Not to brokers, not to data brokers, not to anyone.

We do not track you. There is no Google Analytics, no advertising pixel, no tag manager, and no session recording on this site. We do not know what other websites you visit, and we have no way to find out.

We do not list your business for sale or publish your valuation. Your valuation page is private to you unless you share it.

Cookies

We set one cookie, instaval_session, and only if you create an account and sign in. It keeps you signed in and nothing else. It cannot be read by scripts, it is restricted to this site, and it expires after 30 days. Signing out deletes it.

We use no advertising or analytics cookies, so there is nothing here to opt in or out of. If that ever changes, we will ask you first.

Who else sees it

We use a small number of service providers to run the service, and they see only what they need to:

Amazon Web Services hosts the application and its database, in the United States. Resend delivers email we send. Anthropic processes the written explanation that accompanies a valuation; this happens on our server, and your email address is not part of it.

We will also disclose information if the law requires it. We would rather say so plainly than imply it never happens.

Your choices

Email tom@instaval.xyz and we will tell you what we hold about you, correct it, or delete it. There is no form and no process — a person reads that address and will reply.

If you are a California resident, the CCPA gives you rights to know, delete, and correct your personal information, and not to be discriminated against for exercising them. The same email address is how you exercise them.

How long we keep it

As long as we are working with you, and after that no longer than we have a reason to. Ask us to delete it and we will.

Contact

InstaVal, San Francisco, CA
tom@instaval.xyz · 650-535-3791