Last updated: May 2026
Sakree LLC, a Virginia limited liability company (“AcquiPilot,” “we,” “us,” or “our”), is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share information when you use acquipilot.com and all related services (the “Service”). By using the Service, you agree to the practices described in this policy. If you do not agree, do not use the Service.
We collect the following categories of information: Information you provide directly: your name and email address when you sign up; capital available, salary, deal data, buyer profile fields, SDE calculations, and other acquisition-related information you enter into the Service; if you use the Personal Financial Statement feature, detailed financial data including assets, liabilities, net worth, monthly income, and monthly debt obligations; names, email addresses, phone numbers, and notes about third parties if you use the broker, banker, advisor, or seller tracking features (you are responsible for ensuring you have a lawful basis to store this information); and messages you submit via the feedback widget or support contact form, including the page URL, page title, and browser type at the time of submission. Information collected via the Deal Capture bookmarklet: if you install and use the AcquiPilot Deal Capture bookmarklet, it runs on third-party business listing websites (such as BizBuySell, BusinessesForSale, and BizQuest) when you activate it. It captures publicly visible listing data from those pages — including business name, asking price, revenue, SDE, industry, employee count, year established, and description — and transmits it to AcquiPilot to create a deal in your pipeline. The bookmarklet only activates when you click it; it does not run passively or collect data without your action. Information collected automatically: Vercel Speed Insights collects page load times and web vitals (no personally identifiable information); Sentry collects error reports when the Service encounters a technical fault (request body data and cookies are stripped before transmission); and Supabase manages authentication sessions via cookies (session cookies for authentication only). Information from third-party sign-in: if you sign in with Google, we receive your name and email address from Google as permitted by your Google account settings. We do not collect payment card data. This is handled entirely by Stripe.
We use your information to: provide, operate, and improve the Service; authenticate your identity and manage your account; process your subscription and billing via Stripe; send transactional emails including account notifications, subscription status updates, deal stall nudges, and weekly check-ins (if you have email notifications enabled); respond to your support requests and feedback; monitor for errors and technical issues via Sentry; analyze page performance via Vercel Speed Insights; and enforce our Terms of Service and comply with legal obligations. We do not use your data to train AI or machine learning models. We do not sell your personal information to third parties.
We use the following third-party services to operate the Service, each with its own privacy policy: Supabase — database and authentication hosted on AWS in the United States (supabase.com/privacy); Stripe — payment processing and subscription management (stripe.com/privacy); Resend — transactional email delivery (resend.com/privacy); Vercel — hosting and Speed Insights performance telemetry (vercel.com/legal/privacy-policy); Upstash Redis — rate limiting, request counts only, no personal data stored (upstash.com/trust/privacy); Sentry — error monitoring with PII stripped before transmission (sentry.io/privacy); Google — OAuth sign-in, name and email only (policies.google.com/privacy); Google Fonts — font delivery for Inter and Playfair Display (policies.google.com/privacy).
Your data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure in the United States. Data is encrypted at rest and in transit. We implement rate limiting, CSRF protection, and security headers to protect the Service. We cannot guarantee the absolute security of your information. No method of transmission over the Internet or method of electronic storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
We retain your data for as long as your account is active. When you delete your account via Settings, all your data is permanently removed from our databases immediately, including cancellation of your Stripe customer record. Automated database backups may retain copies for up to 30 days before being overwritten. Server logs containing user IDs (but no sensitive inputs) are retained for up to 30 days.
You may export all your data at any time via Settings → Export Data. The export is a JSON file containing all information associated with your account across all features of the Service, including deals, acquisition profile, investment thesis, tracker data, assessment answers, and all other stored data. Exports are rate-limited to once per day.
We use session cookies for authentication only. We do not use tracking cookies, advertising cookies, or third-party behavioral tracking cookies.
We may share your information in the following circumstances: with the third-party services listed in Section 3, solely to operate the Service; if required by law, court order, or government request; if we believe disclosure is necessary to protect the rights, property, or safety of AcquiPilot, our users, or others; in connection with a merger, acquisition, or sale of all or substantially all of our assets, in which case your information may be transferred as part of that transaction; or for any other purpose with your explicit consent. We do not sell your personal information. We do not share your personal information with third parties for their marketing purposes.
The Service displays links to third-party websites and resources, including business listing platforms, broker directories, financial data providers, and government resources. AcquiPilot does not control, endorse, or take responsibility for the content, privacy practices, or data handling of any third-party site. When you click a link to a third-party site, you leave the Service and that site's own privacy policy applies. We encourage you to review the privacy policies of any third-party sites you visit.
Depending on where you live, you may have the following rights regarding your personal information: the right to know whether we process your personal information and to access what we hold; the right to delete your personal information (use Settings → Delete Account for immediate deletion); the right to correct inaccurate information; the right to portability (use Settings → Export Data); and the right to opt out of the sale of personal information (we do not sell personal information). These rights apply to residents of California (CCPA/CPRA), Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia, and other states with applicable privacy laws. To exercise any of these rights, use the self-service tools in Settings or contact us at info@acquipilot.com. We will respond as required by applicable law.
The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a child under 18, contact us at info@acquipilot.com and we will delete it promptly.
We will notify you of material changes to this policy via email or in-app notification at least 14 days before changes take effect. The date at the top of this page reflects when the policy was last updated.
Privacy questions, state privacy rights requests, or data concerns: info@acquipilot.com.