Privacy Policy

1. Introduction

Acquisition Bureau LLC ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our platform at www.acquisitionbureau.com (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, phone number, and role when you create an account.
• Business Information: Business name, industry, address, employee count, revenue, financial statements, and other business details you enter into the platform.
• Financial Data: Income statements, balance sheets, expense breakdowns, owner add-backs, and other financial information you provide for business valuation and analysis.
• Payment Information: Billing details processed through our third-party payment processor (Stripe). We do not store your full credit card information on our servers.
• Communications: Messages, inquiries, offers, and other communications you send through the platform.

2.2 Information from Third-Party Integrations

When you connect third-party services to your account, we may collect information from those services, including:

• QuickBooks Online (Intuit): Company information, profit and loss reports, balance sheets, and other accounting data you authorize us to access.
• Plaid: Bank account information, transaction history, and account balances from financial institutions you connect.
• Yelp: Business reviews, ratings, and public business information.
• Google Business Profile: Business reviews, ratings, and public business information.

We only access the data you explicitly authorize and only use it for the purposes described in this Privacy Policy. You can disconnect any third-party integration at any time through your account settings.

2.3 Automatically Collected Information

• Usage Data: Pages visited, features used, actions taken, and timestamps.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Log Data: IP address, access times, and referring URLs.
• Cookies: We use cookies and similar technologies for authentication, preferences, and analytics.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Calculate business valuations, financial metrics (EBITDA, SDE), and generate analysis reports
• Sync and display financial data from connected third-party accounts
• Process transactions and manage your subscription
• Facilitate marketplace transactions between buyers and sellers
• Aggregate and display business reputation data from connected review platforms
• Provide AI-powered business insights and recommendations
• Send service-related notifications and updates
• Respond to your inquiries and provide customer support
• Detect, prevent, and address fraud and security issues
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Your Consent: When you explicitly authorize sharing, such as publishing a marketplace listing or sharing financial data with a potential buyer.
• Service Providers: With trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting, payment processing, email delivery). These providers are contractually obligated to protect your data.
• Marketplace Participants: When you list a business for sale, certain business information (not personally identifiable financial details) may be visible to potential buyers who have signed NDAs.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Encryption of third-party access tokens and sensitive credentials
• Secure authentication with JWT tokens and HTTP-only cookies
• Role-based access controls
• Regular security assessments

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or regulatory purposes.

Financial data synced from third-party integrations is stored only while the integration is active. When you disconnect an integration, we stop syncing new data. Previously synced data remains available unless you request its deletion.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw consent for data processing where consent is the legal basis.
• Disconnect Integrations: Remove third-party service connections at any time.
• Opt Out: Unsubscribe from marketing communications at any time.

To exercise any of these rights, please contact us at privacy@acquisitionbureau.com.

8. Cookies and Tracking

We use cookies and similar technologies to authenticate users, remember preferences, and analyze usage patterns. You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will take steps to delete that information promptly.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

11. International Data Transfers

Your data may be processed and stored in the United States. If you are accessing the Service from outside the United States, you consent to the transfer and processing of your data in the United States, where data protection laws may differ from those in your jurisdiction.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: