Public directory data stays separate from private review data
Current early access
Information handled today
ConceptPlus.com Inc. operates iMerch Finder. When you visit the website, the hosting and security services may process routine technical records such as an IP address, browser or device details, requested pages, timestamps, and security events needed to deliver and protect the site.
If you choose an email link and send us a message, we receive the information you include through our email provider. Please send only what is reasonably necessary for your question and do not email card numbers, security codes, passwords, government identifiers, or sensitive customer files.
The complaint and appeal form prepares an email draft on your device. Preparing or copying it does not send it to us, create a case, or upload evidence. Only when you send the email do we receive your address, distributor or case reference, account of the incident, requested resolution, and any material you choose to include. Reports are acknowledged manually. Do not include passwords, card numbers, government IDs, or unnecessary information about others.
If you submit a distributor application, we collect the applicant and business details, service areas, specialties, capabilities, disclosures, service-recovery account, consents, and exactly three customer and two supplier reference contacts entered in the form. The submission is stored by our website and database hosting provider and is available only in the restricted owner-review area. We may verify the applicant email manually before beginning the review.
No advertising pixels, behavioral advertising, data-broker sale, session replay, or optional analytics program is intentionally activated for this launch preview unless it is later disclosed and, where required, consented to.
Account notice added September 11, 2026
Email-and-password accounts
Google Firebase Authentication handles account passwords, email verification and password resets. When you create or sign in to an account, Firebase processes your email, authentication credentials and security information needed to provide that service. Verification and password-reset messages are sent through Firebase. Your password is not stored in an iMerch Finder business profile.
Our website uses a verified account identifier and email to connect your account with any approved access. We store an internal account mapping and the terms and privacy versions accepted when that mapping is created. Essential sign-in cookies and Firebase browser storage keep your sign-in working; these are not advertising cookies. Signing out clears website access and requests removal of the saved Firebase sign-in from the browser.
In mobile test versions, signing in sends your email address and password to Google Firebase Authentication. The app sends an authentication token to iMerch Finder to check your authorized account access and retrieve your own saved profile. Firebase also processes technical information, including IP addresses and user-agent information, to provide account security and prevent abuse. The app does not offer phone-number sign-in.
The app keeps its sign-in session in memory rather than persisting it across a full app restart. App account requests do not use your browser's sign-in cookies. Website and app sign-in are separate: signing out of the app does not sign you out of the website. Opening a website account or policy link from the app does not put your app credentials or private profile details in that link.
Creating an account does not buy a membership, activate a public listing, grant approval or subscribe you to marketing. Existing profiles created through the earlier sign-in method are not automatically transferred just because two accounts use the same email. Contact us for account assistance or deletion requests.
Your own account
Your private business profile
If your account has own-profile access, you can create and manage your private business profile through the website. We store the details you submit: business name, website, description, contact name, contact email, phone, city, state or province, country, service area, specialties, capabilities, project sizes, and whether you are accepting projects. We also retain the profile revision, update time, and recorded policy acknowledgments needed to manage the saved draft and its changes.
In mobile test versions, an authorized account can view its saved business details and save changes to those business fields. The app's business editor does not retrieve or edit your contact name, contact email, or phone. Initial profile setup, contact changes, and available sharing choices are handled through your website account. Saving a private profile does not publish a listing, award vetted status, or admit you to the invited group's private discovery or introductions. If you previously shared a version for private matching, saving business changes makes that old version unavailable for matching until you separately share the updated version through the website, where your account is eligible.
Loaded business details and unsaved business edits are held in app memory, not saved as an offline profile copy by the app. They are cleared when you leave the Account tab, refresh account status, sign out, or the app moves to the background. This local clearing does not delete a saved server profile, and backgrounding the app does not sign you out of Firebase. If a save was already sent before an interruption, reload the saved profile to check its result.
Account and profile records are processed through our hosting and storage providers, including OpenAI Sites and Cloudflare. Authorized operators may access them for support, security, and operation. Read the private business profile policies for the applicable profile terms and privacy information.
Mobile test versions
Bookmarks and directory requests
Saved-expert bookmarks are stored on your device as profile identifiers. Sample-directory and live-directory bookmarks are stored separately, and you can remove them in the app. The app does not synchronize bookmarks to your account. In a live-directory version, loading saved profiles requests their current public details from iMerch Finder and sends their identifiers to the directory service.
A sample-directory version uses fictional directory information and a local introduction preview. Information entered into that preview stays in the app; it is not sent as a buyer request, delivered to a distributor, or recorded as server-side sharing or marketing consent. Sign-in and authorized access to your private business profile can still contact live services in a sample-directory version. Live buyer introductions are not enabled.
In a live-directory version, searches send your search terms, entered location, and selected filters to our directory service. This is location information you enter, not a request for the phone's GPS position. When you view selected-work or portfolio images, the app requests them from the service hosting each image. These requests are separate from profile-data requests. Viewing an image does not upload photos from your device. Hosting and security services may process technical request information as described above.
Features not yet active
Other information the operational service may need
- Buyer contact information, company details, project briefs, timing, location, preferences, consent choices, and introduction history.
- Free Basic Listing fields such as business name, general location, service area, public contact details, claim status, “Not vetted by iMerch Finder” disclosure, basic self-service support level, and claim-or-correction path.
- Enhanced Vetted Partner Profile fields such as verified capabilities and service details, permissioned and moderated testimonials, work photos, project galleries, selected work or case studies, higher-touch partner support level, and “Paid Advertisement” when featured.
- Distributor availability, credential, insurance, compliance, re-verification, complaint, correction, and appeal information.
- Private reference responses, reviewer notes, decision reasons, evidence, communications, and continuing-review records created during the human review process.
- Additional membership, billing status, receipts, support, communications, and security records beyond the current application records described above.
- Limited technical and usage information needed to operate, protect, troubleshoot, and measure the health of the service.
Point-of-collection disclosures will be updated as additional features are enabled, including the applicable provider roles, verified legal notice address, jurisdictions, and any required choices.
Purpose limitation
Why the information would be used
- Receive, support, secure, and administer applications, authorized accounts, consent records, and related communications.
- Review eligibility, verify evidence and references, make documented human decisions, prepare approved profiles, and conduct re-verification.
- Rank relevant Featured Vetted Partners first, relevant Vetted Partners second, and relevant Free Basic Listings under Additional distributors, using deterministic tie-breakers within each group.
- Process Vetted Partner membership or featured-visibility authorization only after approval and profile readiness, plus payment status, receipts, renewals, cancellations, failed payments, and refunds through approved website providers.
- Investigate complaints, correct records, prevent abuse, enforce published rules, maintain audit history, and comply with applicable obligations.
- Measure aggregate marketplace health and improve the service without turning private review or buyer data into a hidden commercial product.
Restricted review information
Reference and vetting records are not profile content
Applicant D&B and other legal-identity details, reference identities and responses, service-recovery evidence, reviewer notes, decision reasons, complaint files, buyer briefs and contact details, payment records, and appeal records are kept separate from the public profile and available only to authorized roles and approved providers with a legitimate need.
Complaint review may require sharing relevant allegations and evidence with the distributor, complainant, or appeal reviewer so each side can respond fairly. We minimize unrelated details and explain relevant disclosure; we cannot promise absolute anonymity. A complaint file is not a public review feed, testimonial source, marketing list, or paid-member benefit.
Reference contacts must be told that they may be contacted for private vetting. Their identity or response is not published as a testimonial or marketing endorsement without separate permission. A reference may ask not to participate; the applicant may then need to provide a qualified replacement of the same type.
Provider-hosted checkout
Distributor payments stay on the website
Vetted Partner membership and featured-visibility checkout is planned for the website only. The planned Authorize.Net integration will use a secure provider-hosted payment page or hosted fields. iMerch Finder does not intend to receive or store a card’s full account number or security code. The payment provider and processor handle card authorization, payment credentials, and transaction records under their own terms and privacy practices.
iMerch Finder may retain the limited payment status, plan, amount, invoice or transaction reference, dates, and masked card details needed for distributor membership or placement administration, support, accounting, disputes, and legal compliance. Checkout remains inactive until this flow is configured and tested.
Lifecycle controls
Retention, security, location, and human review
Application, review, authorized-account, and profile information is retained only as long as reasonably needed for the stated purpose, an active relationship, audit and dispute needs, security, backup cycles, and applicable legal obligations, then deleted, de-identified, or securely archived under access controls.
Safeguards are designed around least-privilege access, role separation, secure transmission, provider review, logging, backups, incident response, and separation of public and restricted records. No online service can promise absolute security.
Firebase Authentication processes account data in the United States. Google describes keeping logged authentication IP addresses for a few weeks and removing other authentication information from its live and backup systems within 180 days after deletion of the associated Firebase user is initiated. Those provider timelines are separate from iMerch Finder's own account and profile records. See Firebase's privacy and security information.
Our service providers may process information in the United States, Canada, or other locations in which they operate. Appropriate contractual and legal safeguards will be documented before operational collection. Consequential application, complaint, suspension, and appeal decisions are made by a human reviewer; automation may validate or flag information but does not make an unexplained final decision. Technology, including AI-assisted drafting or organization where used, may support preparation of content. A badge or decision must reflect a documented human review, not an AI score. This is not a claim that an AI review engine is active. Private reference or complaint material is not to be put into an unapproved AI service or reused for public model training.
Individual control
Access, correction, deletion, and communication choices
Depending on the relationship and location, a person may ask to access, correct, or delete information; withdraw a reference; correct an application; manage marketing preferences; cancel a membership; or exercise other applicable privacy rights. Some records may need to be retained for security, disputes, accounting, or legal obligations.
Identity may need to be verified before a request is completed. We do not intend to discriminate against someone for exercising an applicable privacy right. The service is designed for business users and is not directed to children under 13.
Visit account deletion information for the currently available deletion or help options. Opening that page or an email draft does not itself submit a request or confirm deletion. Do not send your password, verification code, or recovery key in a support message.
Questions and updates
Contact iMerch Finder
Privacy questions or requests may be sent to hello@imerchfinder.com. We will add the verified legal notice address and update provider descriptions as the service expands.
Material changes will be reflected through an updated date and, when required for a live account or use, an additional notice or consent.