DealFlow AI

Privacy Policy

Last updated: 22 June 2026

This Privacy Policy explains how Ada Corporate Advisory (“we”, “us”) collects, uses, and protects information when you use DealFlow AI (the “Service”). We are the data controller for the personal data described below.

1. Information we collect

  • Account data: the email address and authentication credentials you provide when you sign up.
  • Usage data: the ideal-client profiles, searches, saved prospects, and pipeline data you create in the Service.
  • Connected mailbox data: if you connect an email account to send outreach, the OAuth tokens and the messages you choose to send through the Service.
  • Company information: publicly available data about UK companies retrieved from the Companies House register, reported deal activity, and related sources to research and qualify acquirer prospects.
  • Technical data: standard log and device information generated when you use the Service.

2. How we use information

  • To provide, operate, and secure the Service.
  • To discover, research, and score acquirer prospects against your ideal-client profile.
  • To send outreach on your instruction from your connected mailbox.
  • To enforce compliance controls such as do-not-contact and suppression lists.
  • To respond to support requests and improve the Service.

3. Legal bases (UK GDPR)

We process personal data on the bases of performance of a contract (providing the Service to you), our legitimate interests (operating, securing, and improving the Service), and your consent where required (for example, connecting a mailbox). Where we process company data for outreach, we and our users are responsible for ensuring a lawful basis for that processing.

4. Sharing and processors

We share data only with service providers that help us run the Service, including:

  • Supabase — database, authentication, and hosting of your account data.
  • Vercel — hosting of the web application.
  • Google and Microsoft — OAuth and email sending when you connect a mailbox.
  • AI and data providers — to score targets and retrieve company information (e.g. UK Companies House, AI model providers, search/enrichment APIs).

We do not sell your personal data.

5. Data retention

We retain account and usage data for as long as your account is active and as needed to provide the Service. You may request deletion of your account and associated personal data at any time (see Contact).

6. Your rights

Subject to UK GDPR, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

7. Security

We use industry-standard measures, including row-level security and per-user data isolation, to protect your data. No method of transmission or storage is completely secure, but we work to protect your information.

8. Contact

Questions or requests about this policy or your data: david@adacorporateadvisory.com.