Privacy
Privacy and analytics
Last updated October 26, 2026.
Acquisition Companion is operated by The Wired Nomad LLC. The public course and source-linked educational material are free to read without an account. Lesson progress and your analytics choice are saved in this browser. Site search runs locally in your browser.
Information used for accounts and billing
If you create an account for the public U.S. paid beta, the application stores your email address, account UUID and creation time. A sign-in challenge stores the email, expiry and hashes of the one-time token and browser-binding value. A session stores the user UUID, expiry and hashes of the session and CSRF values. Sign-in attempt counters use an email hash, hour and count. The application also stores Stripe customer and subscription references, canonical subscription status and paid-through information needed to provide access and billing support. Historical beta Checkout approval records store the account UUID, approval and revocation timestamps, and operator labels; they are not required for new customers to use Checkout. We do not request or store identity documents for those historical records.
Acquisition Companion uses Stripe-hosted Checkout and billing management. We do not collect or store card numbers or card security codes. Stripe separately processes payment and billing information under its own terms and privacy practices. For duplicate-event protection, the application also stores Stripe event IDs and their processing timestamps.
Optional AI Deal Lab and usage information
For quota, reliability and service accounting, the application stores usage-event identifiers, account UUID, timestamp and completion time, UTC month, Deal Lab workflow and model labels, completion status, latency, token counts when supplied, and estimated internal processing cost. Monthly aggregates store the request count and related accounting totals. Application usage records do not store prompts, responses, deal facts or conversation history. Cost accounting is kept server-side and is not shown in your account.
Questions, a short capped conversation context and the selected synthetic case stage are sent to OpenAI to generate a Deal Lab response. Requests use store: false; this means Acquisition Companion does not intentionally maintain a server-side chat history. It is not a zero-retention guarantee; OpenAI’s applicable terms and policies govern its processing. Do not submit confidential, proprietary, personal or non-public deal information. There are no private deal-document, CIM, or data-room uploads.
Seller Call Coach
Seller Call Coach supports introductory seller conversations using short, non-confidential summaries, not confidential transcripts. Do not enter confidential, proprietary, personal, or non-public deal information. This version does not record audio or accept transcript or document uploads. Notes, coverage and coaching results stay in the active browser session, in page memory only, and clear when you reload, leave the page or choose Clear call. When you request a next question or call review, notes, coverage and up to three recent coaching questions are sent to OpenAI through our server with store: false. Acquisition Companion does not intentionally persist these notes or results as a deal file or conversation record. The page sends no analytics. Existing usage accounting records the workflow and processing metadata, without note or response contents. This is not a zero-retention guarantee; provider processing and retention policies still apply.
Deal Workspace
Deal Workspace holds short sanitized deal summaries, claims, evidence status, questions and actions in page memory by default; unsaved work clears when you reload or leave. Saving is an explicit choice and stores the selected deal in IndexedDB on this device and browser only. Saved records are not synchronized, backed up by us or encrypted by this feature. An opaque account namespace separates normal application access to saved records; it does not provide cryptographic isolation from someone with access to the same browser or device. Account deletion does not clear these device records. Use the workspace's delete controls or clear this site's browser data to remove them; its global delete control removes all Deal Workspace saves across accounts in that browser.
Only an explicit AI gap review or coaching request sends the displayed workspace context or selected coaching content through our server to OpenAI with store: false. Opening Call Coach does not request AI. Transfers between the two pages require your approval, and only manually selected short facts, questions or actions can be added to a deal; full call notes and AI output are not automatically saved. Acquisition Companion does not intentionally maintain a server-side deal record, and these workspace pages send no analytics. Provider processing and retention policies still apply; this is not a zero-retention guarantee. Do not enter confidential, proprietary, personal or non-public information, including in optional local saves.
Service providers
Cloudflare provides the website, application Worker, edge services and production database. Stripe provides hosted billing and sends signed subscription events to the application. Amazon Web Services SES delivers passwordless sign-in email from signin@acquisitioncompanion.com. OpenAI processes Deal Lab requests. These providers process information needed for their services under their own terms and policies. Their independent retention practices are not controlled by Acquisition Companion.
For transactional email delivery troubleshooting, a restricted AWS log records the event timestamp, delivery event type and SES message identifier for 14 days. It does not retain recipient addresses, headers, subject or message body. Application diagnostics use limited failure stages and random correlation identifiers; they do not include sign-in tokens, prompts, responses or deal facts.
Retention
- Sign-in challenges: valid for 15 minutes, single-use and removed when expired or consumed.
- Sessions: valid for seven days unless you sign out or the session is revoked; expired sessions are cleaned up.
- Sign-in attempt counters: stored as an email hash, hour and count, and normally cleaned after approximately 24 hours.
- Billing locks: short-lived operational leases, normally 60 seconds, and removed when released or expired.
- Completed detailed usage events: retained for 90 days after completion when the approved cleanup is enabled. In-flight or unfinished events are not removed by that cleanup.
- Monthly usage aggregates: retained for 13 months total: the current UTC month plus the preceding 12 months. Current-month quota data is always protected. An aggregate remains while detailed usage events for that month remain.
- Historical beta approval records: not required for new customers. Existing records are retained while the account is active; after revocation or account closure, they may be retained for up to 12 months for beta operations and audit.
- Account and billing records: retained while needed to provide the service and reconcile billing. After account closure, we retain only information reasonably needed for accounting, tax, billing disputes, fraud prevention, chargebacks or other applicable legal obligations. No single statutory period is assumed for every record.
Usage cleanup is configurable and remains disabled until its separate operational setting is enabled. No cleanup of account, subscription, webhook or beta-approval records runs automatically. Stripe and other providers may retain their own records under their policies.
Account access and deletion requests
To request account access, correction or deletion, contact support@acquisitioncompanion.com. Where applicable, we will honor rights available to you under the law that applies to your request. This notice does not claim that every state privacy statute applies to every user and does not waive rights provided by applicable law.
Account deletion is handled manually. We verify account ownership without asking for unnecessary identity documents, resolve recurring billing and open billing issues first, and promptly revoke active sessions and pending sign-in challenges. We delete local usage, approval and account information that is no longer needed, while retaining only information reasonably required for billing, accounting, disputes, fraud prevention, chargebacks or applicable law. We will tell you when the request is complete or what limited information must remain and why. Deleting an Acquisition Companion account does not automatically delete records independently held by Stripe, OpenAI, AWS, Cloudflare or another service provider.
Analytics and advertising
Optional Google Analytics is separate from account and billing operation and loads only after you consent. Account pages suppress analytics. When enabled by consent, analytics may record page views and predefined, non-sensitive events such as course activity, recognized educational search terms, selected Deal Lab mode, synthetic case identifier, difficulty or completion status. A search term is sent only when it matches the site's short allowlist of educational topics. Google Analytics does not receive question text, answer text, prompts, response contents, financial figures entered in chat, company names, conversation transcripts, email addresses, account or payment identifiers, or card information. You can decline or change analytics preferences in the site footer.
We do not sell personal information and do not use targeted advertising, remarketing or advertising personalization.
Contact
For privacy, account, sign-in or billing questions, contact support@acquisitioncompanion.com.