Privacy Policy

Succession AI Inc. operates our websites and business succession, M&A, buyer matching, valuation, and data assessment services. This policy covers visitors, sellers, buyers, advisors, and other people whose information is processed through those services.

Information may be provided by you, your company, an authorized advisor or workspace member, connected services, or public and commercial business sources. When we process company documents on a customer’s instructions, that customer is responsible for having the authority to provide them. Product-specific notices and signed agreements may add more detail; the Google Workspace restrictions below apply wherever we receive Google Workspace API data.

What we collect depends on the services you use. It can include:

• Account and contact information: name, email, phone, company, role, business address, profile links, authentication information, workspace membership, and communication preferences.
• Seller and business information: ownership names and percentages, industry, location, products, customers and suppliers, staffing, management, operations, technology, intellectual property, financial history, revenue, earnings, assets, debt, tax information, asking price, exit timing, motivations, and succession goals.
• Buyer information: professional background, company and investment thesis, target industries and locations, acquisition size, funding sources, available equity, financing plans, timing, experience, and acquisition preferences.
• Deal and document information: financial statements, tax returns, contracts, employee and customer records, files and attachments you provide, data-room permissions, questions and answers, offers, NDAs, engagement agreements, signatures, and signing timestamps and technical records. Documents may contain personal information about people other than the uploader.
• Communications and activity: messages, email content and attachments made available through a connected communication feature, meeting or call notes you or your advisors provide, support requests, saved searches, deal interests, document views, approval records, and transaction progress.
• Connected-service information: account and organization identifiers, authorization tokens, usage reports, accounting records, file metadata, and content permitted by your selected integration. Google Workspace, Microsoft 365, and QuickBooks provide different types of access; connecting one service does not grant access to every service.
• Billing and technical information: subscription and payment status, transaction identifiers, device and browser information, IP addresses, page visits, referral information, cookies, error logs, and product interactions. Payment details entered in a payment provider’s checkout are handled by that provider.
• Research and derived information: public business and professional profiles, business contact information from data providers, matching scores, inferred interests or readiness, extracted document text, search representations, valuation estimates, summaries, and AI-generated drafts.

Some forms save progress before final submission so you can resume. Provide only information relevant to the service, and redact unnecessary sensitive personal information from documents.

We use information to create accounts, administer access, assess businesses, prepare valuations and deal materials, match buyers and sellers, support M&A, organize documents, facilitate communications, perform requested transfers, process billing, and respond to support requests.

We also use appropriate account and usage information to maintain security, investigate misuse, diagnose failures, understand how the service is used, improve features, and meet legal or recordkeeping obligations. We may contact you about your account, a requested service, relevant opportunities, or marketing where permitted. You can opt out of marketing without opting out of necessary service notices.

• Authorized staff and service providers: people and providers supporting hosting, storage, email delivery, scheduling, payments, analytics, document processing, and AI features, as needed for the service. Our technology includes Google Cloud, Vercel, SendGrid, Calendly, Stripe, and PostHog; the providers used depend on the feature.
• Deal participants: company owners, workspace members, assigned advisors, and buyers or other recipients given access through the applicable deal-sharing process. Profiles and matching information may be used to make introductions. Deal listings or teasers approved for publication may be public. A confidential document upload is not, by itself, permission to publish that document.
• Legal and security recipients: where disclosure is required by law or reasonably necessary to investigate fraud, protect rights, or address security incidents.
• Business successors: in a reorganization or sale of Succession AI, subject to applicable protections. Google data remains subject to its separate restrictions, including prior consent where required.

Recipients who receive an authorized copy may retain it under their own obligations. Removing platform access cannot recall copies already downloaded. Separate NDAs and engagement agreements govern the confidentiality obligations of their parties.

Providing information for M&A does not authorize its sale as a dataset. Any separate licensing arrangement for eligible non-Google data requires specific authorization and a separate agreement.

AI features may send relevant prompts, profile information, document extracts, financial information, or message context to model providers to generate summaries, reports, search results, matches, or draft responses. Providers can include OpenAI, Anthropic, and Google, depending on the feature. We retain generated results and operational records needed to provide and troubleshoot those features.

AI outputs and inferred profiles can be incomplete or wrong. You can request correction of information about you and ask our team to review a result. Outputs are decision-support tools, not guarantees of a buyer’s suitability, funding, a business’s value, or a transaction outcome. Google Workspace data is subject to the additional limits below.

In Succession Data, the initial Google connection reads organization identity and administrator usage reports. Organization-wide file and email content requires additional administrator authorization and a separately approved transfer. Authorized transfers can include Gmail messages and attachments, Drive files, and shared-drive content.

We use Google Workspace data and derived results for the authorized M&A and assessment features. We do not sell or license that data, use it for advertising, or train general-purpose AI models with it. A connection or transfer does not automatically give buyers access.

Human access is limited to your affirmative agreement for specific content, security investigations, legal obligations, or other access expressly allowed by Google’s policy. Sharing is limited to providing the authorized feature with consent, security, legal requirements, or a transfer of our business with the required prior consent.

Our use of information received from Google Workspace APIs adheres to the Google Workspace user data policy, including its Limited Use requirements.

We use cookies and browser storage for authentication, preferences, attribution, and analytics. Analytics can include pages visited, clicks, device details, and session replay where enabled. Our landing-site PostHog configuration masks form inputs in session recordings; that does not mean all on-screen content or all telemetry is anonymous.

You can manage cookies and local storage through your browser. Blocking essential storage may prevent sign-in or other features from working. Contact us about analytics preferences or privacy choices that are not available in your account.

We use access controls, encrypted connections, and protected cloud storage. Connection credentials and Data transfer content are encrypted at rest. Access depends on account, workspace, and deal permissions. No service can guarantee absolute security.

Our staff and providers may process information in the United States, Canada, or other countries where they operate. Local laws and lawful government access may differ from those in your country. This policy does not promise storage in a particular country.

Account, profile, deal, document, communication, and billing records are kept for as long as needed to provide the relevant service, maintain transaction records, resolve disputes, and meet contractual or legal obligations. Retention varies by record type; the Data transfer period below is not a retention limit for the entire platform.

In Succession Data, temporary assessment uploads are deleted after processing. Assessment results and activity records remain in the workspace. Transferred content has a 30-day retention period, with earlier deletion available through Activity. A minimal record may remain to show the transfer and deletion outcome.

Disconnecting a source removes saved connection credentials but does not automatically delete prior results or copies. Use the available deletion controls or contact us for account, workspace, or document deletion. Organization administrators must also revoke organization-wide permissions at the provider when appropriate. Deletion requests may be subject to identity checks and recordkeeping requirements; backups and recipient-held copies may have separate retention periods.

Depending on applicable law, you may request access, correction, deletion, a copy of your information, withdrawal of consent, or an objection to or restriction of certain processing. We may need to verify your identity and authority before acting. If a company controls the relevant workspace, we may coordinate the request with that company.

You can update available profile settings, unsubscribe from marketing, disconnect integrations, and use transfer controls. Withdrawing required access may stop the related feature. You may raise a concern with your local privacy regulator. These services are intended for adults acting in a business capacity, not children.

We will update this page when our practices change and provide additional notice or obtain consent where required. The date above identifies this version.

For privacy questions or requests, use our contact page. Include the relevant account or workspace, but do not send passwords, authorization tokens, or confidential documents.