Privacy Policy

1. Who we are

EquityLift.app is operated by EquityLift Group Limited, a company registered in England and Wales (company number 16825021) ("EquityLift", "we", "us"). We are the data controller for the personal data described in this policy. Contact us about privacy at hello@equitylift.online.

This policy explains how we collect, use, store and protect personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The data we collect

• Account data: your name, email address, firm name, sign-in details and plan.
• Billing data: subscription status, invoices and payment references. Card details are handled by our payment provider (Stripe) and are never stored by us.
• Deal and workspace content: acquisition targets, financial figures, valuations, lender packs, forecasts, diligence notes, data room files and any client details you enter as an adviser.
• Uploaded documents: accounts, tax returns, management information, contracts and other files you upload.
• Meeting audio and transcripts: recordings you upload to AI Notes, and the transcripts and summaries produced from them.
• Affiliate data: referral links, clicks, sign-ups and commission records.
• Technical data: device, browser, IP address and error logs needed to keep the platform secure and working.

3. Why we use it and our lawful basis

• To provide the platform under our contract with you: running your workspace, storing your files, producing reports and processing your subscription.
• Legitimate interests: keeping the service secure, preventing fraud, fixing faults and improving features.
• Legal obligation: keeping financial and tax records.
• Consent: optional marketing emails, which you can withdraw at any time.

4. Third-party and seller information

Documents you upload may contain personal data about sellers, employees, customers or your own clients. You are responsible for having a lawful basis to share that data with us, and for any confidentiality obligations (such as NDAs). We process it only to provide the platform to you, acting on your instructions.

5. AI processing

When you use AI features (valuation extraction, forecast research, transcription and summaries), the relevant content is sent to our AI processing providers solely to generate the result. It is not used to train public AI models. Outputs are estimates and should be checked.

6. Who we share data with

We use trusted processors bound by contract and data protection terms: cloud hosting and database providers, Stripe for payments, email delivery providers and AI processing providers. We never sell your data. Share links you create give access only to the snapshot you choose, to anyone holding the link, until you revoke it or it expires.

7. International transfers

Some providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.

8. Security

Files are stored in private storage, workspaces are protected by row-level access controls so only you can read them, and data is encrypted in transit. Partner accounts keep each client's workspace separate. No system is perfectly secure; tell us immediately if you suspect unauthorised access.

9. How long we keep data

We keep workspace content while your account is active. After closure we delete or anonymise it within 90 days, except billing records, which we keep for six years to meet tax law, and data needed for legal claims.

10. Your rights

You have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. Email hello@equitylift.online and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

11. Cookies

We use essential storage to keep you signed in and remember your settings. We do not use advertising cookies.

12. Changes

We may update this policy. Material changes will be notified by email or in the platform.