SMARTACQUIRE

Privacy Policy

Effective Date: February 12, 2026

This Privacy Policy describes how Navot Yellin, operating as SmartAcquire ("we," "us," or "our"), collects, uses, and shares information when you use our website at www.trysmartacquire.com and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you create an account or use the Service, we may collect the following information directly from you:

  • Email address — collected when you sign in via magic link authentication.
  • Google account information — if you choose to sign in with Google, we receive your name and email address from Google. We do not access your Google contacts, calendar, or other Google services.
  • Questionnaire responses — categorical responses you provide about your financial profile (such as credit score range, industry experience level, and financial reserves range). These are selected from predefined categories and we do not collect exact financial figures through the questionnaire.
  • Deal simulation inputs — values you enter when configuring deal analysis scenarios, such as proposed offer price, down payment amount, and seller financing terms. These inputs are used to generate your analysis and are stored as part of your deal records.

1.2 Information Collected Automatically

When you use the Service, we automatically collect certain information about your device and usage:

  • Usage data — pages visited, features used, deals viewed, clicks, and other interactions with the Service.
  • Session recordings — we use session replay technology to record how users interact with the Service, including mouse movements, clicks, scrolls, and page navigation. These recordings are configured to automatically redact personally identifiable information (such as text entered into form fields) before it is captured.
  • Device and browser information — browser type, operating system, screen resolution, and device identifiers.
  • Performance data — page load times and site performance metrics.
  • IP address and approximate location — used for analytics and to improve the Service.

1.3 Deal and Market Data

The Service analyzes business acquisition opportunities using data from third-party sources, including business listing platforms, U.S. Census Bureau data, Bureau of Labor Statistics data, and Small Business Administration data. This market data is not personal information, but it is stored in association with your account when you generate or save a deal analysis.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and operate the Service, including generating deal analyses, saving your deals, and personalizing your experience.
  • To authenticate your identity and maintain the security of your account.
  • To communicate with you, including sending transactional emails related to your account and, where permitted, marketing communications about SmartAcquire.
  • To analyze and improve the Service, including understanding how users interact with features, identifying bugs, and improving usability through analytics and session recordings.
  • To ensure the security and integrity of the Service and to detect and prevent fraud or misuse.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share your information only in the following circumstances:

  • Service providers. We use third-party services to operate the Service, including: Supabase (database hosting and authentication, US-West region); Vercel (website hosting); Google (sign-in authentication); PostHog (analytics and session recording); and Brevo (email communications and CRM). These providers process data on our behalf and are contractually obligated to protect your information.
  • Legal requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request.
  • Business transfers. If SmartAcquire is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Cookies and Tracking Technologies

We use cookies and similar technologies strictly for the purpose of authentication (maintaining your login session). We do not use advertising or marketing cookies. Our analytics providers (PostHog and Vercel) may use their own tracking technologies to collect usage data as described in Section 1.2.

5. Data Retention

We retain your personal information and associated deal data for up to one (1) year from the date of your last interaction with the Service. After this period, your data may be deleted from our active systems. Backup copies may persist for a limited additional period before being purged.

6. Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS/SSL), secure authentication methods, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Account Deletion

You may request deletion of your account and all associated data by emailing deleteme@trysmartacquire.com. We will process your request within thirty (30) days.

7.2 Marketing Communications

You may opt out of marketing emails at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at the email address below. Opting out of marketing emails will not affect transactional emails related to your account.

7.3 Analytics and Session Recording

You may use browser-level controls (such as Do Not Track settings or ad-blocking extensions) to limit the data collected by analytics tools. Note that some features of the Service may not function properly if tracking is disabled.

8. Notice for California Residents

If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion of your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information.

To exercise these rights, contact us at admin@trysmartacquire.com. We will verify your identity before processing any request.

9. Notice for Canadian Residents

If you are located in Canada, we comply with applicable provisions of the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access, correct, and request deletion of your personal information. Marketing communications to Canadian residents require your prior consent, which may be obtained at the time of account creation.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

11. Third-Party Links and Data Sources

The Service may contain links to third-party websites and incorporates data from third-party sources. We are not responsible for the privacy practices of these third parties. We recommend that you review the privacy policies of any third-party sites you visit.

Market data used in our analyses (including business listing data, census data, employment statistics, and lending benchmarks) is obtained from publicly available sources and is provided on an "as-is" basis. We do not guarantee the accuracy, completeness, or timeliness of this data.

12. Automated Analysis

The Service uses automated calculations and algorithms to generate deal scores, risk assessments, and other analyses. These automated processes use mathematical formulas applied to market data and your inputs — they do not currently involve artificial intelligence or machine learning models. If we introduce AI-powered features in the future, we will update this Privacy Policy accordingly.

The analyses generated by the Service are for informational purposes only and do not constitute financial, legal, or investment advice.

13. Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected users via email within a commercially reasonable timeframe and in accordance with applicable law. We will also take prompt steps to investigate and mitigate the breach.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service with a new effective date. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

SmartAcquire Email: admin@trysmartacquire.com Data Deletion Requests: deleteme@trysmartacquire.com Website: www.trysmartacquire.com