Privacy Policy

Last updated October 5, 2026

This policy explains what Autavio, LLC collects when you use CollisionList, why, and who else sees it. Selling a business is sensitive, and most of what follows exists to keep the fact that you are considering it from becoming public before you decide.

1. What we collect

If you join the waitlist

Your name, email address, and optionally your market, number of locations, and a revenue range. Nothing else, and nothing about your shop is published anywhere.

If you create an account

Your name, email address, state, and the role you hold. Passwords are handled by our authentication provider; we never see them.

If you list a business

Two separate layers, treated differently:

The anonymized listing — market, revenue and EBITDA bands, bay count, DRP count, years operating, OEM certification, real estate arrangement, reason for sale, and an asking price range. This is what approved buyers browse.
The confidential detail — business name, address, financial statements, staff count, equipment, lease terms, DRP list, exact asking price, deal structure notes, and your contact information. This is disclosed only as described in section 3.

If you apply as a buyer

Buyer type, target markets, acquisition criteria, capital source, and the billing details needed for a subscription. Card numbers go directly to Stripe; we store only a customer reference, never full card details.

In a deal room

Messages you send, documents you upload, and the deal’s stage history. Both parties to that deal room can see this material.

Automatically

Records of significant actions taken in the platform — approvals, NDA requests and decisions, listing status changes — kept as an audit trail, together with standard server logs.

2. How we use it

To operate the platform and the accounts on it.
To review listings and buyer applications before either goes live.
To route NDA requests to the seller who has to decide on them.
To send transactional email: NDA activity, deal room updates, listing decisions, and waitlist confirmations.
To keep the audit trail we rely on to investigate disputes and enforce our terms.
To meet legal, tax, and accounting obligations.

We do not sell personal information, and we do not use your information to serve you advertising.

3. How confidentiality works

Your identity as a seller is not visible to buyers browsing the marketplace. A buyer sees only the anonymized listing. To see anything more, that buyer must be approved by us, hold an active subscription, sign the non-disclosure agreement electronically, and then be approved by you for that specific listing. Any one of those failing means no disclosure.

You can withdraw a listing, deny a request, or close a deal room at any time. Withdrawing stops future disclosure; it cannot retrieve information already lawfully disclosed to a buyer who signed an NDA, though that buyer stays bound by it.

Our administrators can see listing information, including the confidential layer, because reviewing and publishing listings and resolving disputes requires it.

With a counterparty — only under the conditions in section 3.
With service providers — the companies listed in section 5, which process data on our instructions.
For legal reasons — where we must comply with law or valid legal process, or to establish or defend legal claims.
In a corporate transaction — if we are ourselves acquired or merged, information may pass to the successor, which stays bound by this policy.

5. Service providers

These companies process data on our behalf:

Supabase — database, authentication, and file storage.
Vercel — application hosting and delivery.
Stripe — buyer subscription billing.
Resend — transactional email.
DocuSign — electronic signature of non-disclosure agreements.

They are permitted to use the data only to provide their service to us. Our infrastructure is located in the United States; if you use the platform from elsewhere, your information is transferred there.

6. How long we keep it

Account and listing records are kept while your account is open and afterwards for as long as needed to resolve disputes, enforce our agreements, and meet tax and accounting obligations. Deal room messages and documents are kept for the life of the deal room and its record. Audit logs are retained as a security and dispute record. Waitlist entries are kept until launch or until you ask us to remove yours.

7. Security

Access to data is enforced in the database itself through row-level security, not only in application code, so a listing’s confidential layer is unreachable without an approved NDA record. Traffic is encrypted in transit. Documents are held in access-controlled storage. Administrative actions are logged.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information we will notify you as required by law.

8. Your choices and rights

You may access and correct most of your information in the platform. You may also ask us to provide a copy of your information, correct it, or delete it, and we will respond as required by applicable law.

Deletion has limits. We may keep what we need to complete a transaction in progress, meet a legal or tax obligation, or preserve an audit record of a dispute. Information a counterparty lawfully received under an NDA stays subject to that NDA rather than to a deletion request.

Transactional email about your account, listings, and deals is part of the service and cannot be switched off while your account is open, but you can close your account at any time.

9. California residents

California law gives residents the right to know what personal information is collected and how it is used and shared, to request deletion or correction, and not to be discriminated against for exercising those rights. The categories we collect and our purposes are set out in sections 1 and 2.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. To make a request, write to privacy@collisionlist.com.

10. Cookies

We use cookies to keep you signed in and to keep your session secure. We do not use advertising or cross-site tracking cookies. Blocking session cookies will prevent you from signing in.

11. Children

The platform is for business use and is not directed to anyone under 18. We do not knowingly collect information from children.

12. Changes

We may update this policy. If a change is material we will give notice by email or in the platform before it takes effect, and we will update the date at the top of this page.

13. Contact

Privacy questions and requests go to privacy@collisionlist.com, or Autavio, LLC, 3098 N Eastman Rd, Ste 109-171, Longview, TX 75605.