Privacy Policy

AcquireScout, Inc. ("Acquire Scout," "we," "us," or "our") operates acquirescout.com. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our platform ("the Service"). By using the Service you agree to this policy.

Information you provide

• Account data: name, email address, password (hashed), and billing information when you register or subscribe.
• Profile data: acquisition criteria, deal preferences, and any information you add to your buyer profile.
• Uploaded documents: CIMs, financial statements, tax returns, or other files you submit for AI-assisted analysis.
• Communications: messages you send to our support team.

Information collected automatically

• Usage data: pages visited, features used, clicks, search queries, and session duration, collected via PostHog analytics.
• Device and log data: IP address, browser type, operating system, referrer URL, and timestamps.
• Cookies and similar technologies: session cookies for authentication and persistent cookies for preferences. See Section 7.

We use the information we collect to:

• Provide, operate, and improve the Service.
• Process uploaded documents through AI models to generate analysis, scores, and summaries you request.
• Authenticate your account and protect against unauthorized access.
• Process payments and manage your subscription.
• Send transactional emails (receipts, alerts, password resets).
• Send product updates and marketing emails where you have opted in — you may unsubscribe at any time.
• Analyze aggregate usage patterns to improve features and performance.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information or uploaded documents to third parties.

When you upload a document for analysis, we transmit its contents to one or more third-party AI providers (currently Anthropic, Inc.) to generate the analysis you request. This transmission is:

• Encrypted in transit (TLS 1.2+) and at rest (AES-256).
• Used solely to fulfill your analysis request.
• Subject to the AI provider's own data handling agreements. Anthropic's data processing terms are available at anthropic.com/legal/privacy.

We do not use your uploaded documents to train AI models. Documents are retained only as long as needed to provide the Service and are deleted on account termination or upon your request (see Section 9).

We share your information only in the following circumstances:

• Service providers: companies that help us operate the Service, including Supabase (database and authentication), Stripe (payments), Anthropic (AI analysis), Vercel (hosting), and PostHog (analytics). Each is bound by confidentiality and data processing agreements.
• Legal requirements: when required by law, court order, or governmental authority, or to protect the rights, property, or safety of AcquireScout, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, where the acquirer agrees to honor this policy.
• With your consent: for any other purpose with your explicit consent.

We retain your account data for as long as your account is active or as needed to provide the Service. If you close your account, we delete or anonymize your personal data within 90 days, except where we are required to retain it longer by law (e.g., billing records for tax purposes are retained for 7 years).

Uploaded documents are deleted from our systems within 30 days of account termination or within 7 days of an explicit deletion request, whichever is sooner. AI provider retention periods are governed by their own policies.

We use the following types of cookies:

• Essential cookies: required for authentication and core functionality. Cannot be disabled.
• Analytics cookies: PostHog session recording and event tracking to understand how users interact with the Service. You can opt out of session recording in your account settings.
• Preference cookies: save your UI preferences between sessions.

You can control non-essential cookies through your browser settings. Disabling analytics cookies does not affect your ability to use the Service.

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

In the event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities as required by applicable law, which in the United States may include state breach-notification statutes in all 50 states.

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data and uploaded documents, subject to legal retention requirements.
• Portability: receive your data in a structured, machine-readable format.
• Opt-out of marketing: unsubscribe from marketing emails via the link in any email or through your account settings.

California residents (CCPA/CPRA): you have the right to know what categories of personal information we collect, to delete your personal information, to correct inaccurate information, and to opt out of the sale or sharing of your personal information. We do not sell personal information. To exercise your rights, contact us at privacy@acquirescout.com.

EEA/UK residents (GDPR/UK GDPR): our legal basis for processing is performance of a contract (to provide the Service), legitimate interests (analytics and security), and consent (marketing). You may lodge a complaint with your local supervisory authority.

To submit a request, email privacy@acquirescout.com. We will respond within 30 days.

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us immediately and we will delete it.

The Service may contain links to third-party websites (e.g., listing marketplaces). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy with an updated effective date and, where appropriate, by email. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

For privacy-related questions, requests, or concerns, contact our privacy team at:

AcquireScout, Inc.
privacy@acquirescout.com

For general legal questions: legal@acquirescout.com