Privacy Policy

SearcherList Platform — Acquisition Lab  |  Effective Date: February 2, 2026

1. Information We Collect

Sources of personal information: We collect information from the following categories of sources: directly from you such as through your account registration and profile inputs; Third-party services such as LinkedIn, if you choose to link your professional profile; publicly available sources such as social media platforms and public databases to verify professional credentials; and automatic collection such as via cookies and similar technologies when you interact with our platform.

We do not collect biometric identifiers.

Information You Provide Directly

• Full name
• Physical or mailing address
• Phone number
• Email address
• LinkedIn profile URL
• Sensitive Personal Information: Social Security Number (SSN) or Taxpayer Identification Number (TIN) for identity and credit verification; Personal Financial Statements (PFS) for capital verification
• Payment Data: Credit card or bank account details, which are collected and processed directly by our third-party payment processor
• Any additional information you include in your searcher profile (e.g., investment thesis, industry focus, available capital range, search timeline)

Information We Generate

• A reformatted, professional online profile created from the information you provide
• A unique, non-indexed URL associated with your profile
• A "Verified Available Capital" badge, if you upload and have a Personal Financial Statement reviewed

Information Collected Automatically

• Log data (e.g., IP address, browser type, pages visited, time spent on pages)
• Device identifiers and operating system information
• Cookies and similar tracking technologies, as described in Section 5 below

2. How We Use Your Information

We use the personal information we collect for the following purposes:

• Profile creation and delivery: To create, format, and host your professional searcher profile on our platform.
• Sharing with third parties: To share your reformatted profile with brokers, sellers, and other parties in the private-business acquisition market, as described further in Section 3.
• Verification services: To review uploaded Personal Financial Statements and award the "Verified Available Capital" badge.
• Platform operations: To operate, maintain, and improve the SearcherList platform, including bug fixes and performance monitoring.
• Communications: To send you transactional communications (e.g., profile creation confirmations, account updates) and, with your express consent, marketing and promotional communications about Acquisition Lab programs, events, and services.
• Legal and safety: To comply with legal obligations, respond to legal process, or protect the rights, property, or safety of Acquisition Lab or others.
• Data integrity and purpose limitation: We process personal information only for the purposes for which it was collected and in accordance with this Policy. We take reasonable steps to ensure that the personal information we process is accurate, but we depend on our users to update or correct their personal information whenever necessary.

3. Sharing of Your Information

Sharing With Brokers, Buyers, and Capital Partners

Profile Accessibility and Control: Your professional profile is accessible via a unique, non-indexed URL. Anyone with this URL can view your profile. To provide you with control over your privacy, the platform includes a 'Reset URL' feature. If you believe your profile link has been shared with unintended parties, you can generate a new, unique URL in your account settings, which will immediately deactivate the previous link.

Service Providers

We may share your information with third-party service providers who assist us in operating the platform — for example, cloud hosting providers, email delivery services, or analytics tools. These providers are contractually required to use your information only for the purposes for which it was disclosed and to protect it in accordance with applicable law.

Verification Partners: We share your identifying information (including SSN) with accredited consumer reporting agencies to perform credit and background checks. These checks are a prerequisite for the 'Verified Available Capital' badge.

Payment Processing: We use a third-party payment processor to manage subscription billing. Acquisition Lab does not store or have access to your full credit card numbers or bank login credentials. All payment data is handled in accordance with the Payment Card Industry Data Security Standard (PCI-DSS).

We do not sell personal information for monetary consideration. However, certain disclosures of profile data to brokers, sellers, and marketing partners may constitute a ‘sale’ or ‘sharing’ under California law. You may opt out as described below.

We use Sensitive Personal Information solely for identity verification, fraud prevention, capital verification, and compliance purposes, and not for profiling or marketing.

Legal Requirements

We may disclose your information when required by law, regulation, or legal process (such as a court order or government request), or when necessary to protect the rights, property, or safety of Acquisition Lab, our users, or the public.

Business Transfers

If Acquisition Lab enters into a joint venture, is sold to, or merges with another business entity, your Personal Information may be disclosed to our new business partners or owners. You acknowledge that such acquirers may continue to use your Personal Information as set forth in this policy.

Do Not Sell or Share My Personal Information

You have the right to opt out of the sharing of your personal information with third parties for commercial purposes. To exercise this right, click the "Do Not Sell or Share My Personal Information" link on our homepage or contact us at [email protected]. We also recognize and honor the Global Privacy Control (GPC) browser signal as a valid opt-out request.

4. Retention of Information

We retain your personal information for as long as necessary to provide the services described in this policy and to comply with our legal obligations. Specifically:

• Profile data is retained for the duration of your account and for up to 24 months after account closure or deletion request, unless a longer retention period is required by law.
• Log and usage data is retained for up to 12 months for operational and security purposes.
• PFS and verification records are retained in accordance with applicable financial record-keeping requirements.
• Verification Refresh Cycle: The 'Verified Available Capital' badge is subject to periodic expiration (e.g., every 12 months). Upon expiration or the submission of updated financial data, the previous Personal Financial Statements and associated sensitive verification records are securely purged within 30 days, unless a longer retention is required for legal or audit purposes.

When your information is no longer needed, we will securely delete or anonymize it.

Any credit or background verification conducted in connection with ‘Verified Available Capital’ status is performed solely for internal verification purposes and is not furnished to third parties as a consumer report.

We collect and retain personal information only as reasonably necessary and proportionate to achieve the purposes described in this Policy

5. Cookies and Tracking Technologies

Our platform uses cookies and similar technologies (such as web beacons and pixel tags) to enhance your experience and gather usage data. These may include:

• Essential cookies: Required for the platform to function (e.g., maintaining your login session). These cannot be disabled.
• Analytics cookies: Help us understand how users interact with the platform so we can improve it.
• Marketing cookies: Used to deliver relevant advertising or communications, with your consent.

You can manage your cookie preferences through your browser settings or by contacting us. Please note that disabling certain cookies may affect platform functionality.

Do Not Track: Some browsers offer a "Do Not Track" setting. At this time, our platform does not alter its data collection practices in response to Do Not Track signals, as there is no industry-wide standard for how websites should respond to such signals. We will update this policy if our practices change.

Interest-Based Advertising: We may work with third parties to display advertising on our platform or to manage our advertising on other sites. Our third-party partners may use cookies or similar technologies to provide you with advertising based on your browsing activities and interests. You may opt-out of interest-based advertising by XXX.

6. Your Privacy Rights

You have the right to:

• Know what personal information we have collected about you, including the categories of information, the sources, the business purposes, and the third parties with whom it has been shared, covering the preceding 12 months.
• Delete your personal information that we have collected, subject to certain legal exceptions (e.g., information required to complete a transaction or comply with a legal obligation).
• Correct inaccurate personal information that we maintain about you.
• Opt out of sale or sharing of your personal information to third parties for commercial purposes.
• Limit the use of your sensitive personal information to uses that are necessary to provide the platform.
• Non-discrimination: We will not deny you services, charge higher prices, or provide a lower quality of service because you exercised your privacy rights.
• Right to Data Portability: You have the right to request a copy of your personal information in a structured, machine-readable, and commonly used format. This allows you to easily transfer your profile data and 'Verified' status information to other platforms or advisors if you so choose.
• Right to Reset Access: You have the right to revoke access to your profile at any time by using the 'Reset URL' tool or by deactivating your profile visibility.

How to Exercise Your Rights

To submit a request, you may:

• Visit the "Privacy Request" form on our website at SearcherList.com/privacy-request
• Email us at [email protected]

We will verify your identity before processing your request using at least two pieces of identifying information. We will respond within 45 days. If additional time is needed, we will notify you and explain why, up to a maximum of 90 days.

7. Security

We take the security of your personal information seriously and implement reasonable technical and organizational measures to protect it. These include:

• HTTPS encryption across all pages of the platform
• Encryption of data at rest and in transit
• Access controls limiting internal access to personal information on a need-to-know basis
• Regular security reviews and assessments

We use encrypted storage for Social Security Numbers and financial documents, ensuring these are not accessible during routine platform maintenance or by unauthorized staff.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information, but we will continue to update and improve our security practices.

In the event of a data breach involving your personal information, we will notify affected individuals and regulators as required by applicable law.

8. Children’s Privacy

SearcherList does not knowingly collect personal information from children. If we learn that we have collected personal information from a child under the age of 18 (or the applicable legal age in your jurisdiction) without a verifiable parental consent, we will take steps to delete that information from our systems as quickly as possible.

9. Certain Other Terms

International Data Transfers: SearcherList is based in the United States. By using our platform, you understand that your personal information may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different from the laws of your country. We implement appropriate safeguards to ensure your data remains protected in accordance with this Policy.

Third-party websites and features: Our platform may contain links to other websites or features (such as LinkedIn 'Sign-In' or social sharing widgets). These third-party sites operate independently from SearcherList and have their own privacy notices or policies. We strongly suggest you review the privacy policies of any linked websites you visit. We are not responsible for the content, use, or privacy practices of websites that are not owned or controlled by SearcherList.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will post the updated policy on this page and update the effective date. We encourage you to review this policy periodically. Your continued use of the platform after a change constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: [email protected]
• Website: SearcherList.com
• The "Do Not Sell or Share My Personal Information" link is available on the SearcherList homepage.

© 2026 Acquisition Lab. All rights reserved. Last updated February 2, 2026.