Privacy Policy

When you use Mergerly, we collect the following information:

• Account information: Name, email address, and password (hashed).
• Company data: Financial data, company profiles, and analyses you create within the platform.
• Usage data: Conversations with the AI assistant, deal pipeline data, comparisons, watchlists, and saved searches.
• Technical data: IP address, browser type, and session information for security purposes.

We use your data to:

• Provide and operate the Mergerly M&A analysis platform.
• Generate AI-powered analyses, scoring, and comparisons of companies.
• Manage your deal pipeline and team collaboration features.
• Send email notifications you have opted in to receive.
• Improve and maintain the security of our services.

Your data is stored in a PostgreSQL database with encryption at rest. All data transmission is protected via TLS/HTTPS. We implement industry-standard security measures including hashed passwords (bcrypt), session-based authentication, and role-based access control.

We do not sell, rent, or trade your personal data to third parties. Data is only shared within your organization as configured by your team settings. We may use third-party services (e.g., AI providers) to process queries, but no personally identifiable information is retained by these services beyond what is necessary to fulfill the request.

Mergerly uses essential cookies only for session management and authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Session cookies are automatically deleted when you sign out or when your session expires.

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have the right to:

• Access: Request a copy of all personal data we hold about you. Use the "Export My Data" feature in Settings > Account.
• Portability: Download your data in a machine-readable format (JSON).
• Erasure: Request permanent deletion of your account and all associated data. Use the "Delete Account" feature in Settings > Account.
• Rectification: Update or correct your personal information through your account settings.
• Restriction: Request that we limit the processing of your personal data.
• Objection: Object to the processing of your personal data for specific purposes.

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed from our systems. Audit logs may be retained for up to 90 days after account deletion for security and compliance purposes.

For any questions about this privacy policy or to exercise your data rights, please contact us at:

Email: privacy@mergerly.com