Acquilink, Inc. ("Acquilink", "we", "us") operates the marketing site at acquilink.com and the product application at app.acquilink.com (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information we collect
- Account information. Name, email, password, organization, role, and profile details you provide when creating an account.
- Deal data. Listings, buyers, sellers, transactions, documents, tasks, notes, and other content you or your collaborators add to the workspace.
- Connected-service data. When you connect Gmail, DocuSign, or other providers, we access the data needed to perform the actions you initiate (for example, sending an email from your Gmail account or issuing an NDA envelope).
- Usage and log data. IP address, device and browser information, pages and features used, timestamps, and diagnostic logs.
How we use Google user data
Acquilink's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, data obtained through Google APIs is:
- Used only to provide or improve prominent user-facing features—sending and tracking broker emails (NDAs, CIMs, follow-ups) that the user explicitly initiates from a listing or transaction.
- Never sold to third parties.
- Never used for advertising purposes.
- Never used to develop, improve, or train generalized AI or ML models.
- Never transferred to others except as needed to provide or improve user-facing features, to comply with applicable law or valid legal process, for security and fraud prevention, or with the user's explicit consent.
- Not read by humans except with the user's explicit consent, for security investigations, to comply with applicable law, or in aggregated and anonymized form for internal operations.
How we use information
- Operate, maintain, and improve the Service.
- Send transactional communications you initiate, such as NDA delivery, CIM distribution, and buyer follow-ups.
- Detect, prevent, and respond to security incidents and fraud.
- Comply with legal obligations and enforce our Terms.
Sharing and subprocessors
We share information with the following service providers strictly to operate the Service:
- Lovable Cloud / Supabase — application hosting, database, and authentication.
- Google Gmail API — sending email from your connected Gmail account when you initiate an action.
- DocuSign — NDA envelope generation and signature collection.
- Postmark — inbound email processing.
We do not sell your personal information.
Data retention and deletion
You may request export or deletion of your data at any time by emailing support@acquilink.com. You can revoke Acquilink's access to your Google account at any time via your Google Account permissions page or in-app under Settings → Email.
Security
We use TLS to encrypt data in transit, encrypt sensitive credentials at rest, and apply role-based access control and database row-level security. Report suspected vulnerabilities or incidents to support@acquilink.com.
Children
The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced through the Service or by email. The "Last updated" date at the top reflects the most recent revision.
Contact
Questions about this policy can be sent to support@acquilink.com.