Privacy Policy

MillionReps is operated by GoDo Inc, organized in Delaware. You can reach us about privacy at lance@xcor-cto.com or by mail at 8 THE GRN STE 13688, DOVER, DE, US 19901.

Account information. Name, email address, and phone number, verified by one-time codes when you sign up or log in.

Company and listing information. What founders submit to list a company: company name, website, product description, commission terms, and materials provided for reps.

Introductions and referrals. When a rep registers an introduction, we store the prospective buyer's name and business email so a later sale can be attributed to the rep who made the introduction. Outreach to those contacts is permission-based (see "Email" below).

Referral-link activity. Tracked links and an optional script that startups install on their own sites record clicks and carry the referring rep's token so sales can be attributed. This is attribution telemetry, not ad tracking, and we do not sell it.

Payments and payouts. Payments run through Stripe. Stripe collects and holds card, bank, and identity-verification details; we store references to Stripe records and our own invoice and ledger rows, not full card or bank numbers.

Agreement acceptance evidence. When a founder accepts the commission agreement we store the signatory name and email as typed, the acceptance timestamp, a hash of the accepting IP address, a truncated browser user-agent string, and a hash of the exact agreement text shown — so what was signed can be proven later.

Product usage. Feature usage and error telemetry so we can fix what breaks.

To run the marketplace: listing companies to reps, attributing sales to introductions and referral links, calculating and invoicing commissions, paying reps, preventing fraud and abuse, and providing support. We also use AI services to rank and match listings to reps; listing content may be processed by those services for that purpose.

We do not sell personal data.

We use service providers to operate the product, each receiving only what its function needs: Stripe (payments, payouts, identity verification of listed companies), Stytch and Twilio (sign-in verification codes), Resend (transactional email), PostHog (product analytics and error tracking), and Railway (hosting, United States). If you connect your Google account to send introduction emails, those messages are composed and sent through your own Google account with your authorization, and we access only what you authorize.

MillionReps also runs on a shared identity service operated by the same company, which uses your verified email addresses and phone numbers to recognize your account. It is used to operate our products, not to sell data.

Outreach through MillionReps is permission-first: recipients who have not opted in are asked for permission before marketing-style contact, and every non-transactional email carries a working unsubscribe link and our postal address. Unsubscribes are honored and enforced by the sending system, not by hand.

You can request access to, correction of, or deletion of your personal data by contacting us at the address in "Who we are". Deletion requests are honored, with narrow exceptions we must keep: signed agreements and their acceptance evidence, and financial records (invoices, ledger entries, payout records) that law and accounting require us to retain. Where data about you appears in attribution records, we redact your identifying details rather than falsify the financial history.

MillionReps is a business tool and is not directed to children. Do not use it if you are under 18.

When this policy changes, we update this page and its effective date. Material changes will be flagged to account holders by email.