Privacy Policy

This Privacy Policy explains how Acquirly, Inc., a Delaware corporation (“Acquirly,” “we,” “us”), handles personal information when you use the Acquirly website and services (the “Platform”). We are the controller of that information. It should be read with our Terms of Service and Cookie Policy.

Information that sellers and buyers exchange with each other, for example in documents or messages, is also handled by the user who receives it, under their own responsibility. This policy covers only what Acquirly does.

We use personal information, and rely on these legal bases where the law requires one:

• To provide the Platform (performance of our contract with you): creating your account, publishing listings, delivering messages, offers and NDA requests, and sending the emails the service depends on, such as sign-in codes and notices about your deals.
• To keep the Platform safe (our legitimate interests in preventing fraud and abuse): alerting you to new sign-ins, letting you review and end sessions, investigating misuse, and enforcing our Terms.
• To keep the Platform working (our legitimate interests in a reliable service): finding and fixing errors from error reports.
• To verify identity (your consent, which you may withdraw): showing the verification badge.
• To improve the Platform (our legitimate interests): understanding how features are used, using data within our own systems only.
• To send marketing emails (your consent): only if you turn them on in your notification settings, or subscribe to our newsletter. They are off by default.
• To comply with the law (legal obligation): responding to lawful requests, keeping records the law requires, and establishing or defending legal claims.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

• Your public profile, shown on your listings and in conversations, offers and NDA requests: first and last name, photo, bio, country, company, website, LinkedIn, location, member-since date, account type and verification badge.
• Listings are public, including their financial figures and images. Documents marked “Requires NDA” are shown only to buyers the seller approves; other documents are shown to buyers who have made an offer or requested an NDA.
• Messages, offers and NDA requests are seen by the other party to the conversation or deal, including the name you type as your signature.
• Never shown to other users by us: your email address, phone number, login history, and the name on your ID document.

Anything you choose to put in a listing, document or message is visible to whoever that content is shown to, so think before sharing contact details or sensitive information.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share it only:

• With service providers who process it for us under contract and only on our instructions: our identity-verification provider (Didit), our email delivery provider, and the providers that host our servers, databases and file storage.
• For legal reasons, when we believe in good faith that disclosure is required by law or legal process, or necessary to protect the rights, property or safety of our users, the public or Acquirly.
• In a business transfer, such as a merger, acquisition, financing or sale of assets, subject to this policy; we will tell you before your information becomes subject to a different policy.
• With your direction, for example when you send a message or approve an NDA.

• Account, profile, listings, documents, messages and deal records: while your account is open.
• Newsletter subscriptions: until you unsubscribe. After that we keep the address, marked as unsubscribed, only so that we do not email you again.
• Error reports: 90 days, then deleted automatically. They are not removed when you delete your account, so one may outlast it by up to 90 days.
• When you delete your account, it is deleted from our live systems immediately, together with your listings, documents, conversations (including the other party’s copy of them), offers and NDA records. Copies in our backups are removed as those backups are overwritten or deleted.
• We may keep limited information for longer where the law requires it, or to resolve a dispute, prevent fraud or enforce our agreements, for only as long as that purpose requires.
• Information another user has already downloaded or received remains with them, under their responsibility.

We protect personal information with measures that include encryption in transit, one-way hashing of passwords, private file storage in which documents are reachable only through short-lived signed links, access controls within our systems, notifications of new sign-ins, and the ability to end sessions remotely. No system is perfectly secure, and we cannot guarantee the security of information. If a breach affects your personal information, we will notify you and the authorities as the law requires.

Wherever you live, you can:

• Access and download your data from your account settings, as a file you can keep or move to another service;
• Correct your details in your profile and account settings;
• Delete your account and its data from your account settings;
• Control emails in your notification settings; security emails cannot be turned off while your account is open. To leave the newsletter, email privacy@acquirly.co; and
• Withdraw consent where we rely on it, without affecting processing already carried out.

For anything else, or if you cannot use the settings, email privacy@acquirly.co. We will verify your identity, normally by asking you to write from your account email address, and reply within the time the law allows, usually 30 days (45 days where US state law applies). We will not discriminate against you for exercising your rights.

Residents of California and other US states with comprehensive privacy laws have rights to know, access, correct and delete their personal information, to obtain a portable copy, and to appeal a decision on their request by replying to our decision. You may use an authorised agent, whom we may ask to show your signed permission.

In the last 12 months we have collected the categories described in Section 2: identifiers (such as name, email, phone and IP address); customer records; commercial information (listings, offers and deal activity); internet activity (login and session data); professional information (company and LinkedIn); and, for users who verify their identity, sensitive personal information, which Didit processes and which we use only to verify identity. We use and disclose these only for the purposes in Sections 3 and 5. We do not sell or share personal information and have no actual knowledge of doing so for anyone under 16.

If you are in the European Economic Area or the United Kingdom, you also have the right to object to processing based on our legitimate interests, to restrict processing, and to lodge a complaint with your local data protection authority. Our legal bases are listed in Section 3. Where we process your information to perform our contract with you, we cannot provide the Platform without it.

Acquirly is based in the United States, and our service providers may process information in other countries. Where we transfer personal information from the EEA or UK to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism.

The Platform is for adults aged 18 and over. We do not knowingly collect information from anyone under 18, and we will delete any we learn we have collected. Contact privacy@acquirly.co if you believe we have.

If we change this policy materially, we will tell you by email or on the Platform before the change takes effect. If a change would use information already collected in a materially different way, we will ask for your consent where the law requires it. The version and effective date at the top of this page identify the current policy.

Acquirly, Inc. · Privacy requests and questions: privacy@acquirly.co