Draft pending counsel review. This Privacy Policy reflects Acquisera's intended data practices but has not yet been reviewed by licensed legal counsel. Nothing in this document constitutes legal advice. Questions in the meantime? support (at) acquisera.com.

Privacy Policy

Effective Date: May 8, 2026 · Last Updated: May 8, 2026

1.Introduction

Acquisera LLC (“Acquisera,” “we,” “us,” or “our”) operates the Acquisera platform, a software-as-a-service application that enables corporate development professionals, private equity firms, investment banks, and other qualified subscribers to identify, research, and contact potential acquisition and merger targets (the “Service”).

This Privacy Policy describes how Acquisera collects, uses, stores, shares, and protects information in connection with the Service. It applies to all users of the Service, including individuals who create accounts, employees and authorized users of subscriber organizations, and visitors to acquisera.com.

By creating an account or accessing the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, you must not access or use the Service.

This Privacy Policy does not govern our use of cookies or tracking technologies (addressed in our separate Cookie Policy) or our obligations under the General Data Protection Regulation (addressed in our separate GDPR Addendum for European users).

2.Who We Are

Acquisera LLC is the data controller for personal information collected through the Service. For questions regarding this Privacy Policy or your personal data, please contact us at:

Acquisera LLC
1658 N Milwaukee Ave, Suite 297
Chicago, IL 60647
Email: support (at) acquisera.com (subject line: PRIVACY:)

3.Information We Collect

We collect information in the following categories:

3.1Account and Registration Data

When you create an account, we collect: full name; email address; company name and title; profile photograph (if uploaded); organization and team membership information; and account credentials (passwords are hashed and never stored in plaintext).

3.2Subscription and Billing Data

When you subscribe to a paid tier, we collect: subscription tier and billing history; payment method information — credit card details are collected and processed directly by Stripe, Inc. and are not stored on Acquisera's systems; for Managed tier subscribers using ACH direct debit, bank account information is collected and tokenized by Stripe; billing address and contact information; and records of add-on purchases and usage.

3.3Usage and Platform Data

When you use the Service, we automatically collect: search criteria and parameters; pipeline runs initiated including tier used and companies delivered; projects created and their associated search history; email templates created and outreach activity; financial models created and saved; feature access patterns and session activity; log data including IP address, browser type, operating system, and timestamps; and error reports and diagnostic data.

3.4Communications Data

We collect information when you contact our support team, respond to surveys or feedback requests, or correspond with us by email.

3.5Third-Party Contact Data Sourced Through the Pipeline

Acquisera's pipeline surfaces publicly available professional contact information pertaining to individuals at companies identified as potential acquisition or merger targets. The scope, permitted use, and individual rights with respect to this data are governed exclusively by Section 6 of this Policy.

4.How We Use Your Information

Acquisera uses the information we collect for the following purposes:

4.1To Provide and Operate the Service

Creating and managing your account; processing and executing pipeline searches; delivering company and contact research results; enabling email outreach functionality; providing access to financial modeling and public company data tools; and managing subscription tiers, quotas, and feature access.

4.2To Process Payments

Processing subscription payments and add-on purchases through Stripe; maintaining billing records and issuing receipts; and handling payment failures, renewals, and cancellations.

4.3To Communicate With You

Sending transactional emails including account verification, password reset, billing confirmations, and subscription notifications; providing customer support; and notifying you of material changes to this Privacy Policy or our Terms of Service.

4.4To Improve the Service

Analyzing platform usage patterns to identify and fix bugs; improving pipeline accuracy and AI model performance; developing new features; and conducting internal security audits and performance monitoring.

4.5To Comply With Legal Obligations

Maintaining billing and financial records as required by law; responding to valid legal process; enforcing our Terms of Service; and protecting the rights, property, and safety of Acquisera, our subscribers, and third parties.

4.6Our Data Practices — What We Do and Do Not Do

What we do not do: Acquisera does not sell, rent, or license your personal information or your organization's data to any third party. We do not use your personal account data, billing information, email content, or search criteria to train artificial intelligence models. We do not use your data for advertising or marketing purposes on behalf of third parties. We do not share your data with any party except as described in Section 5 of this Policy.

What we do: Acquisera uses pipeline output data — including company research results, enrichment data, and fit scoring outcomes produced by the pipeline — to improve the accuracy and performance of the Service. This data is used solely to improve the Service provided to all subscribers and is not shared with or sold to any third party for model training purposes. Your personal account data, billing information, and email content are never used for this purpose.

5.How We Share Information

5.1Service Providers and Data Processors

We share information with third-party vendors who process data on our behalf. These vendors are contractually prohibited from using your data for any purpose other than providing services to Acquisera.

VendorPurposeData Involved
SupabaseDatabase hosting and authenticationAll platform data
VercelWebsite hosting and deploymentUsage and session data
RailwayPipeline execution infrastructureSearch and pipeline data
Stripe, Inc.Payment processingBilling and payment data
ResendTransactional email deliveryEmail address, account notifications
Google (Gmail API)User-inbox email send + reply detectionOAuth tokens (encrypted), mailbox metadata you grant access to
Microsoft (Graph)User-inbox email send + reply detectionOAuth tokens (encrypted), mailbox metadata you grant access to
AnthropicAI pipeline processing (Claude)Search criteria and company data
OpenAIAI pipeline processing and embeddingsSearch criteria and company data
Google (Gemini)AI pipeline processingSearch criteria and company data
Apollo.ioContact and company data enrichmentSearch criteria
Brave SearchCompany discoverySearch criteria
SerperCompany discoverySearch criteria
SerpAPICompany discovery (Bing — Premium tier)Search criteria

We will update this table as our vendor relationships change and will provide notice of material changes as described in Section 11.

5.2Legal Requirements

We may disclose your information if required by law or in good faith belief that such disclosure is necessary to comply with a legal obligation; protect and defend the rights or property of Acquisera; prevent or investigate possible wrongdoing in connection with the Service; or protect the personal safety of users or the public.

5.3Business Transfers

In the event Acquisera undergoes a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will provide notice via email or prominent notice on the Service prior to your information becoming subject to a materially different privacy policy.

5.4With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5.5What We Never Do

Acquisera will never sell, rent, trade, or otherwise transfer your personal information or your organization's pipeline data, contact data, or search history to any third party for commercial or marketing purposes, under any circumstances.

6.Third-Party Contact Data Sourced Through the Pipeline

6.1Nature of This Data

Acquisera's platform surfaces publicly available contact information — including names, titles, professional email addresses, and LinkedIn profiles — pertaining to individuals employed at or associated with privately held companies identified as potential acquisition or merger targets (“Target Contact Data”). This data is sourced through automated research processes drawing on publicly available business directories, professional networks, and third-party data providers including those listed in Section 5.1.

6.2Strict Prohibition on Sale or Transfer

Acquisera does not sell, license, transfer, or otherwise make available Target Contact Data to any third party for any purpose, under any circumstances. Target Contact Data is made accessible exclusively to paying subscribers of eligible subscription tiers and is governed by the restrictions set forth in this Section 6.

6.3Permitted Use

Subscribers are authorized to access and use Target Contact Data solely for the purpose of initiating direct professional contact with identified individuals in connection with a bona fide proposed acquisition, merger, strategic partnership, or other corporate transaction involving the company with which the individual is associated (“Permitted Purpose”). No other use is authorized.

6.4Prohibited Use

Subscribers are expressly prohibited from:

  1. (i) using Target Contact Data for marketing, advertising, solicitation, or any purpose unrelated to a corporate transaction constituting the Permitted Purpose;
  2. (ii) reproducing, distributing, sublicensing, exporting, or transferring Target Contact Data to any third party, including but not limited to data brokers, marketing platforms, customer relationship management systems not used exclusively in connection with an active corporate transaction, or any other commercial data service;
  3. (iii) aggregating, compiling, or storing Target Contact Data outside of the Acquisera platform for purposes beyond a specific active transaction for which the contact was originally identified;
  4. (iv) using Target Contact Data in any manner that violates applicable law, including but not limited to the CAN-SPAM Act of 2003, the Telephone Consumer Protection Act, the California Consumer Privacy Act, or any applicable anti-spam, data protection, or electronic communications legislation; or
  5. (v) using Target Contact Data to harass, threaten, or engage in any unlawful conduct toward any individual.

Violation of this Section 6.4 constitutes a material breach of our Terms of Service and may result in immediate termination of access to the Service, in addition to any other remedies available to Acquisera at law or in equity.

6.5Legitimate Interests Basis

The collection and processing of Target Contact Data is conducted on the basis of legitimate interests — specifically, the facilitation of lawful business-to-business corporate development activity, which is a recognized lawful basis for the processing of professional contact information under applicable law. In pursuing this legitimate interest, Acquisera takes reasonable steps to ensure that: (i) Target Contact Data is limited to professional contact details and does not include sensitive personal information; (ii) data is sourced from publicly available or commercially licensed professional sources; (iii) the volume of data processed is proportionate to the stated purpose; and (iv) processing is conducted in a manner that does not override the fundamental rights and interests of the individuals concerned.

6.6Individual Rights and Suppression Requests

Any individual who believes their professional contact information has been surfaced through the Acquisera platform and wishes to request its removal may submit a verified suppression request to support (at) acquisera.com with the subject line “PRIVACY: Contact Suppression Request.” Upon receipt of a complete and verified request, Acquisera will:

  1. (i)suppress the individual's contact information from future delivery to any subscriber within a commercially reasonable time not to exceed thirty (30) days from receipt of a complete request;
  2. (ii)flag the individual's information within our systems to prevent re-surfacing in subsequent pipeline runs; and
  3. (iii) notify the requesting party of the actions taken within the same thirty (30) day period.

Acquisera will not charge any fee for processing a suppression request. Acquisera reserves the right to verify the identity of the requesting party prior to taking action.

7.Data Retention

Data CategoryRetention Period
Account and profile dataDuration of account plus 30 days following deletion
Pipeline search history and resultsDuration of the active subscription
Contact data surfaced by the pipelineDuration of the active subscription, or upon suppression request per §6.6
Email outreach recordsDuration of the active subscription
Billing and payment records7 years from date of transaction (tax and legal compliance)
Security and access logs90 days
Support communications2 years from date of last communication

When a subscription ends or an account is deleted, Acquisera will delete or anonymize the associated data within 30 days, except where longer retention is required by applicable law.

8.Your Rights and Choices

8.1Access

You have the right to request a copy of the personal information Acquisera holds about you. Contact support (at) acquisera.com with the subject line “PRIVACY: Access Request.” We will respond within 30 days.

8.2Correction

If any personal information we hold about you is inaccurate or incomplete, you may update it directly through your account settings or by contacting support (at) acquisera.com with the subject line “PRIVACY: Correction Request.”

8.3Deletion

You may request deletion of your account and associated personal data at any time by contacting support (at) acquisera.com with the subject line “PRIVACY: Deletion Request.” We will process deletion requests within 30 days, subject to retention obligations described in Section 7. Deletion of your account does not affect billing records, which are retained for the period required by applicable law.

8.4Data Portability

You may request an export of your personal account data and search history in a machine-readable format by contacting support (at) acquisera.com with the subject line “PRIVACY: Portability Request.”

8.5Objection to Processing

You may object to our processing of your personal information where we are relying on legitimate interests as the legal basis by contacting support (at) acquisera.com with the subject line “PRIVACY: Objection to Processing.” We will consider and respond within 30 days. Note that objecting to certain processing may affect our ability to provide the Service.

8.6Marketing Communications

Acquisera does not send marketing emails without your consent. If you receive any unsolicited communication from Acquisera, you may unsubscribe at any time using the unsubscribe link in the email or by contacting support (at) acquisera.com with the subject line “PRIVACY: Unsubscribe.”

8.7California Residents — CCPA Rights

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
  • Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
  • Right to Opt-Out of Sale: Acquisera does not sell personal information. You therefore have nothing to opt out of with respect to the sale of your data.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, contact support (at) acquisera.com with the subject line “PRIVACY: CCPA Request.” We will respond within 45 days as required by law.

9.Security

Acquisera implements technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction. Our security practices include:

  • Encryption: All data is encrypted in transit using TLS and encrypted at rest via our database infrastructure.
  • Tenant Isolation: Row-level security policies enforce strict data isolation at the database layer, ensuring no subscriber can access another subscriber's data under any circumstances.
  • Credential Security: Account passwords are hashed and salted and are never stored in plaintext. API keys and service credentials are stored as environment variables and are never committed to source code or exposed to the client layer.
  • Access Controls: Pipeline execution infrastructure uses scoped service-role keys with limited permissions. Application-layer tenant scoping enforces data boundaries as an additional control layer independent of database-level policies.
  • Environment Separation: Production and development environments are fully separated with independent credentials and databases.
  • Security Audits: We conduct periodic internal security audits of our codebase and infrastructure and remediate identified vulnerabilities on a priority basis.

No method of electronic storage is completely secure. While we implement commercially reasonable security measures, we cannot guarantee absolute security. In the event of a data breach likely to result in risk to affected individuals, we will notify users as required by applicable law.

10.Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor without verified parental consent, we will take steps to delete that information promptly. Contact support (at) acquisera.com with the subject line “PRIVACY: Minor Data Concern” if you believe we may have collected information from a minor.

11.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated Policy on this page with a new “Last Updated” date and notify registered users by email at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the changes. If you do not agree, you must stop using the Service and may request deletion of your account pursuant to Section 8.3.

12.Contact Us

For questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact:

Acquisera LLC
Attn: Privacy
1658 N Milwaukee Ave, Suite 297
Chicago, IL 60647
Email: support (at) acquisera.com (subject line: PRIVACY)

We will respond to all privacy inquiries within 30 days.


This Privacy Policy draft has not been reviewed by licensed legal counsel. Acquisera intends to obtain attorney review prior to final publication. Nothing in this document constitutes legal advice.

© 2026 Acquisera LLC All rights reserved.