Privacy policy.
Who this policy covers
This policy explains how iMerge Advisors handles information collected through imergeadvisors.com — from website visitors, from founders who request a consultation or submit a confidential M&A Readiness Assessment, and from anyone who contacts us through the site. If you become a client, the engagement letter and non-disclosure agreement you sign govern how we handle your confidential business information. Where this policy and a signed agreement differ, the signed agreement controls. Nothing in this policy reduces a confidentiality obligation we have already accepted.
What information do we collect?
You can read this site anonymously. We collect information in three ways. Information you give us directly: · Contact and consultation requests — your name, email address, phone number, company website, the nature of your interest, and any comments you include. · M&A Readiness Assessment — your name, email, phone, company name, and the operating and financial details you enter about your business, which may include revenue and ARR, growth rate, retention, margins, customer concentration, ownership, and team structure. We generate a valuation range and readiness report from these inputs and store both. · Chat — the messages you send to the assistant on our site, stored with a session identifier so a conversation holds together, plus any contact details you choose to provide in the chat. · Scheduling — when you book a consultation, the meeting time and booking details we receive from the scheduling provider. Information collected automatically: · Server and security logs kept by our hosting provider, which include IP address, browser type, and the pages requested. These are used to operate the site and defend against attacks and abuse. · First-party usage events — the type of interaction, the page path, and an anonymous session identifier — which we record to understand how the site is used. Information from cookies and third-party technologies: · Described in the cookies, analytics, and visitor identification sections below. These load only if you accept non-essential cookies.
Confidential business information
The M&A Readiness Assessment asks for information most founders would not put in a web form anywhere else. We treat it accordingly. · Assessment inputs and the resulting report are used to prepare and discuss your valuation and readiness analysis, and to respond to you about a potential engagement. We do not use them for advertising, we do not sell them, and we do not share them with prospective buyers or other third parties for their own purposes. · We do not disclose your company's confidential information to an acquirer, investor, or any other transaction party except at your direction and under a confidentiality agreement. · Access inside iMerge is limited to the people who need it to advise you. · We may use aggregated, de-identified information — figures combined across many companies so that no individual business is identifiable — to maintain market benchmarks such as the iMerge Private SaaS Index. Nothing that identifies you or your company is published.
What do we use your information for?
We use the information described above to: · Respond to your inquiry, prepare your assessment, and provide the advisory services you ask us about. · Produce and deliver your valuation range, readiness report, and related documents. · Schedule and conduct consultations. · Operate, secure, and improve the website, including defending against fraud and abuse. · Send you email relating to your inquiry or engagement, and — only where permitted — occasional market updates you can unsubscribe from at any time. · Meet our legal, regulatory, and record-keeping obligations. We do not sell your personal information for money. See the visitor identification section below for one technology that may qualify as "sharing" or a "sale" under certain state privacy laws, and how to opt out of it.
Artificial intelligence processing
We use AI to help produce assessment reports and to power the chat assistant on this site. You should know what that means for your information. · Assessment inputs and chat messages are transmitted to our AI provider (Anthropic) to generate a response or report, under commercial terms that prohibit using submitted content to train their models. · Your assessment report is generated automatically and sent to you without an iMerge advisor reviewing it first. It is an indicative starting analysis built only from what you enter and public-source research, with no figures independently verified by us. It is not a formal valuation, not investment advice, and not a substitute for legal, tax, or accounting advice. Treat it as the basis for a conversation with us rather than a conclusion to rely on. · Please do not paste information into the chat that you would not want stored — for confidential company details, use the assessment or contact us directly.
Service providers we rely on
We use a small number of vendors to run this site and our practice. Each processes information only to provide services to us, under contractual confidentiality and security obligations. · Vercel — website hosting, delivery, and security filtering. · Supabase — the database where inquiries, assessments, chat transcripts, and scheduling records are stored. · Resend — delivery of transactional email, such as your assessment report and our replies. · Anthropic — AI processing for assessment reports and the chat assistant, as described above. · Cloudflare — bot and abuse protection on our forms. · Google Analytics and our visitor identification vendor — analytics and marketing, loaded only if you accept non-essential cookies. These providers may process and store information in the United States and other countries. Where information is transferred out of the UK, EEA, or Switzerland, we rely on appropriate safeguards such as standard contractual clauses.
Do we disclose any information to outside parties?
We do not sell or trade your personal information, and we do not disclose your company's confidential information to prospective buyers, investors, or other transaction parties except at your direction and under a confidentiality agreement. We do share information with the service providers listed above, who act on our instructions and are bound to keep it confidential. We may also disclose information where we are legally required to, or where it is necessary to enforce our terms or protect the rights, property, or safety of iMerge, our clients, or others. If iMerge is ever involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; any recipient would remain bound by the commitments in this policy and by any confidentiality agreement covering your information.
How long do we keep it?
We keep information for as long as needed for the purposes described in this policy — to respond to you, to provide and support an engagement, and to meet our legal, regulatory, and record-keeping obligations. Records connected to an actual or prospective transaction are generally kept for longer than routine website data, because professional and legal obligations require it. You can ask us to delete information we hold about you at any time using the contact details below. We will do so unless we are required to keep it, and we will tell you if that is the case.
How do we protect your information?
Traffic to this site is encrypted in transit using HTTPS, and information stored in our database is encrypted at rest by our hosting providers. Administrative areas of the site require authentication restricted to iMerge personnel, and access to client information inside the firm is limited to those who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you need to send us something especially sensitive, ask us and we will arrange a secure channel rather than email.
Your privacy rights
Depending on where you live, you may have some or all of the following rights over your personal information: · To know what we collect, why, and who we share it with. · To request a copy of the information we hold about you. · To correct information that is inaccurate. · To request deletion. · To request a portable copy. · To object to or restrict certain processing, including direct marketing. · To opt out of the sale or sharing of personal information, and of targeted advertising. · To be free from discrimination for exercising any of these rights. Residents of California, and of other states with comprehensive privacy laws, have these rights under those statutes. Residents of the UK, the EEA, and Switzerland have them under the UK GDPR and GDPR, where our legal bases for processing are your consent, our legitimate interest in operating and marketing our practice, the performance of a contract, and compliance with legal obligations. To exercise any right, email info@imergeadvisors.com. We will verify your request and respond within the period required by the applicable law. You may use an authorized agent, and you may appeal a decision by replying to our response.
Do we use cookies?
Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your web browser (if you allow) that enable the site's or service provider's systems to recognize your browser and capture and remember certain information. We use cookies to compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business. You may accept or decline non-essential cookies at any time via the cookie notice presented on your first visit.
Third party links
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.
Analytics tools
If you accept non-essential cookies, we load Google Analytics to understand how the site is used. It collects information such as cookie identifiers, IP address, device and browser identifiers, referring and exit URLs, and on-site behavior, and it may combine that with information Google has collected elsewhere, under Google's own privacy policy. Declining non-essential cookies prevents Google Analytics from loading at all. Separately, and regardless of your cookie choice, we record basic first-party usage events — the type of interaction, the page path, and an anonymous session identifier — in our own database. These are not shared with advertising networks.
Do we use visitor identification technology?
When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout. You also have the option to opt out of the collection of your personal data in compliance with GDPR by visiting https://www.rb2b.com/rb2b-gdpr-opt-out. This technology only runs if you accept non-essential cookies via the cookie notice; declining prevents it from loading.
Notice for California residents
In the twelve months before the date of this policy we have collected the categories of personal information described above — identifiers, contact details, commercial and financial information about your business, internet activity, and inferences drawn from an assessment — for the business purposes described above, from the sources described above. We do not sell personal information for money. The visitor identification technology described in the next section may constitute "sharing" for cross-context behavioral advertising, or a "sale" as those terms are defined under the California Consumer Privacy Act and similar state laws. You can prevent it entirely by declining non-essential cookies, and you can opt out directly using the links in that section. California residents may exercise the rights listed under "Your privacy rights" above by emailing info@imergeadvisors.com. We do not discriminate against anyone for exercising them.
Children's Online Privacy Protection Act compliance
We are in compliance with the requirements of COPPA (Children's Online Privacy Protection Act) and do not collect any information from anyone under 13 years of age. Our website, products, and services are all directed to people who are at least 13 years old or older.
Scope of this policy
This policy covers information collected through imergeadvisors.com. Information you share with us offline — in meetings, by phone, or during an engagement — is governed by our professional obligations and by any confidentiality agreement between us, and is handled with at least the same care described here.
Changes to this policy
By using this site you accept the practices described in this policy. If we change it, we will post the revised version here and update the date at the top of the page. Where a change materially affects how we handle information you have already given us, we will tell you directly.
Contacting us
For any question about this policy, or to exercise a privacy right, email info@imergeadvisors.com or call 206-659-7650. You can also write to us at the address below. We aim to acknowledge privacy requests within five business days and to resolve them within the period the applicable law requires.