Privacy Notice

Last updated: May 13, 2026

1. Who we are

Acqora is operated by Blackline Acquisitions, LLC (“Acqora,” “we,” “us,” “our”). We act as the data controller for personal data we collect through the Service, except where otherwise stated.

2. Data we collect

  • Account data: name, email, password (hashed), phone, profile photo.
  • Profile and business data: company name, role, license info, market preferences.
  • User content: deal listings, leads, CRM contacts, messages, files, notes.
  • Communications: chat messages, support requests, feedback.
  • Usage and device data: IP address, browser type, device identifiers, pages viewed, actions taken, timestamps, referrer.
  • Cookies and similar technologies: session cookies, authentication tokens, and (where applicable) analytics identifiers.

Payment-card data is collected and processed directly by our payment provider, Paddle, and is not stored by us.

3. How we use your data

  • To create and manage your account and provide the Service.
  • To enable core features (marketplace listings, CRM, chat, leads, classroom).
  • To process subscriptions, invoicing, and tax compliance through Paddle.
  • To provide customer support and respond to your inquiries.
  • To secure the Service, prevent fraud and abuse, and enforce our Terms.
  • To improve and develop the Service (analytics, debugging, A/B testing).
  • To send service-related and, with your consent where required, marketing communications.
  • To comply with legal obligations.

4. Legal bases (where applicable, e.g. UK/EEA users)

  • Performance of a contract — to provide the Service you signed up for.
  • Legitimate interests — to secure, improve, and grow the Service.
  • Consent — for optional marketing or non-essential cookies, where required.
  • Legal obligation — to comply with tax, accounting, and other laws.

5. Who we share your data with

We share personal data only with the following categories of recipients, and only to the extent necessary:

  • Service providers / subprocessors: hosting, database, analytics, email delivery, error monitoring, customer support tooling.
  • Merchant of Record (Paddle): for the sale of subscriptions, payments, invoicing, subscription management, and tax compliance.
  • Other users of the Service: when you publish a listing, send a message, or accept a JV request, the relevant content and your visible profile information are shared with the counterparty.
  • Professional advisers: lawyers, accountants, and auditors under confidentiality.
  • Authorities: when required by law, court order, or to protect rights, property, or safety.
  • Successors: in connection with a merger, acquisition, reorganization, or sale of assets.

We do not sell your personal data.

6. International transfers

We may process and store data in countries outside your own, including the United States. Where required by law (for example, for users in the UK or EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions for international transfers.

7. Data retention

We retain personal data for as long as necessary to provide the Service, comply with our legal obligations (such as tax and accounting), resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

8. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, infrastructure hardening, and regular review of our security practices. No system is perfectly secure; please use strong, unique passwords and keep your account credentials confidential.

9. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • request deletion of your data (the “right to be forgotten”);
  • restrict or object to certain processing;
  • request portability of your data in a machine-readable format;
  • withdraw consent at any time, where we rely on consent;
  • lodge a complaint with your local data protection authority.

We will respond to verified requests within the time required by applicable law (typically 30 days under GDPR/UK GDPR). To exercise any right, contact us at /contact.

10. Cookies

We use the following categories of cookies and similar technologies:

  • Essential — required for authentication, security, and core functionality.
  • Analytics — to understand how the Service is used and improve it.
  • Preferences — to remember your settings.

You can manage cookies through your browser settings. Disabling essential cookies may break parts of the Service.

11. Children

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us so we can delete it.

12. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated via email or in-app notice. The “Last updated” date above reflects the latest revision.

13. Contact us

For privacy questions or to exercise your rights, contact Blackline Acquisitions, LLC via /contact.