Privacy Policy

This policy applies to Acquiro (the “Service”) during the private beta, including the web app, marketing pages, and any authenticated founder workspaces you create. If you are using Acquiro on behalf of a company, you are agreeing on its behalf.

Acquiro is a product operated by Acquiro Labs. “We”, “us”, and “our” in this policy mean Acquiro Labs.

Sign-in is handled by our authentication provider (Supabase). When you create an account we store your email address, a hashed password (never your plain password), and basic profile fields such as your display name. Session tokens are stored in your browser so you stay signed in between visits.

Everything you build inside Acquiro — asset names, taglines, niches, markets, target customers, revenue models, stages, and branding — is stored in your workspace and scoped to your user account via row-level security. Only you can read or modify your assets.

Your conversations with the AI Co-Founder — including the messages you send, the assistant’s replies, tool calls it makes on your behalf, and any feedback (thumbs up/down) — are stored so you can revisit them and so the assistant has context across sessions. They are private to your account.

AI-generated asset plans, blueprints, milestones, work-queue items, and the activity log for each asset are stored in your workspace. Activity entries record events like “milestone completed” or “plan generated” so you can see history and progress — they never include third-party personal data unless you enter it yourself.

When you use AI features, the relevant context — the current asset, its plan, recent messages, and the specific prompt — is sent to Google Gemini models through the Lovable AI Gateway. We only send what the model needs to answer the request. We do not train models on your data. Google and Lovable process this content as our subprocessors under their own terms.

Acquiro uses your browser’s local storage for two purposes: keeping you signed in (auth session tokens) and remembering UI preferences such as your currently selected asset and whether the sidebar is collapsed. We do not use advertising cookies or third-party trackers.

If Sentry monitoring is enabled for your deployment, uncaught errors and performance traces are sent to Sentry to help us fix bugs. These reports include your user ID as a tag so we can correlate issues, but never your email, password, message contents, or asset data. Monitoring is off unless a Sentry DSN is configured.

We use the data above only to:

• Operate the Service and keep your workspace working across sessions.
• Generate plans, recommendations, and AI Co-Founder responses you ask for.
• Diagnose bugs and improve reliability during the beta.
• Contact you about your account or material changes to the Service.

We do not sell your data, and we do not use your asset content to train AI models.

Your data stays in your workspace for as long as your account is active. You can request deletion of your account and all associated data at any time by emailing hello@acquirolabs.com. We will remove your account, assets, plans, milestones, activity, and AI Co-Founder conversations from our production systems, typically within 30 days. Backups may retain data for a short additional period before being overwritten.

Data is transmitted over HTTPS and stored on managed infrastructure protected by row-level security policies scoped to your user account. No system is ever perfectly secure — please choose a strong password and let us know immediately if you suspect your account has been compromised.

If we make material changes, we will update the effective date above and, when appropriate, notify you inside the app or by email.

Questions, requests, or deletion inquiries? Email hello@acquirolabs.com.