California Consumer Privacy Act (CCPA) Notice
Last updated: February 4, 2026 • Version 2
California Privacy Notice (CCPA and CPRA)
1. Overview
MSP.Investments is a B2B marketplace and deal workflow platform for Managed Service Provider (MSP) acquisition opportunities. We collect and use personal information to operate the Platform, secure access to non-public deal materials, support communications between users, provide billing and plan management, and protect the Platform from abuse.
Note: CCPA and CPRA obligations can depend on legal thresholds. Regardless, we aim to honor verified California rights requests consistent with applicable law.
2. Categories of Personal Information Collected (past 12 months)
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, business email, phone number (if provided), account identifiers | Yes |
| Professional or employment-related information | Role, company name, job title, business ownership or affiliation details | Yes |
| Commercial information | Plan selection, billing history, platform transactions and deal workflow activity | Yes |
| Internet or electronic network activity | Log data, device data, IP address, pages viewed, feature usage, timestamps, access requests, downloads | Yes |
| Financial information (limited) | Invoicing data, payment status, tax details where applicable (we do not intentionally store full payment card details if processed by a payment provider) | Yes |
| Geolocation data (approximate) | Approximate location derived from IP address | Yes |
| Sensitive personal information (CPRA) | We do not intentionally request sensitive personal information. If users upload it into deal materials, it may be processed as part of those materials. | Limited |
| Inferences | Risk and security signals or internal classifications (for example suspected abuse indicators) derived from usage and security logs | Limited |
3. Sources of Personal Information
- Directly from you (account registration, profile details, support requests, plan purchases, messages and submissions)
- Automatically (usage data, log data, cookies and similar technologies)
- From service providers (billing confirmations, fraud and security signals, email delivery, analytics and hosting providers)
- From other users (for example if a user references you in communications or shares deal materials that include your business contact details)
4. Business Purposes for Collection and Use
- Operate the Platform (accounts, access controls, messaging, document workflows, audit logs)
- Provide customer support and respond to inquiries
- Billing, subscriptions, invoicing, and tax handling
- Security, fraud prevention, and abuse detection
- Analytics and Platform improvement (subject to cookie settings where required)
- Compliance with legal obligations and lawful requests
- Enforcement and legal claims (including unpaid fees, disputes, and fraud investigations)
5. Sharing of Personal Information
We may disclose personal information to the following categories of recipients:
- Service providers that help us operate the Platform (hosting, storage, email delivery, customer support tools, analytics, security tooling, payment processing)
- Other users as part of Platform functionality, based on your actions and access settings (for example messaging, granting access to a dealroom)
- Professional advisers (lawyers, accountants, auditors) where necessary for compliance or legal claims
- Authorities where required by law or to respond to lawful requests
We disclose personal information for business purposes. We do not sell personal information.
6. Sale and Sharing of Personal Information
6.1 Sale
We do not sell personal information as the term “sell” is defined under the CCPA and CPRA.
6.2 Sharing for cross-context behavioral advertising
We do not share personal information for cross-context behavioral advertising as “share” is defined under the CPRA.
If this changes in the future, we will update this notice and provide required opt-out mechanisms (for example a “Do Not Sell or Share My Personal Information” link).
7. Your Rights Under CCPA and CPRA
California residents may have the following rights, subject to verification and legal exceptions:
7.1 Right to know
You may request information about:
- categories of personal information collected
- specific pieces of personal information collected
- sources of personal information
- business purposes for collection, use, and disclosure
- categories of third parties to whom we disclose personal information
7.2 Right to delete
You may request deletion of your personal information, subject to exceptions (for example security, fraud prevention, completing transactions, legal obligations, and maintaining records for disputes).
7.3 Right to correct
You may request correction of inaccurate personal information.
7.4 Right to limit use and disclosure of sensitive personal information
If we process sensitive personal information as defined by the CPRA, you may have the right to limit its use and disclosure to what is necessary to provide the services or for other permitted purposes.
7.5 Right to non-discrimination
We will not discriminate against you for exercising your rights. We may need to verify your identity and may be unable to fulfill certain requests due to legal and operational requirements.
8. How to Exercise Your Rights
8.1 Submit a request
- Email: [email protected]
- Online: through your account settings (if available)
8.2 Verification
We verify requests to protect against fraud and unauthorized access. Verification may include:
- confirming control of the email address associated with your account
- matching information you provide with our records
- requesting additional verification for deletion or sensitive requests
8.3 Response timeline
- We aim to acknowledge requests within 10 business days.
- We aim to respond within 45 calendar days.
- Where permitted, we may extend the response period by an additional 45 calendar days and will notify you if we do.
9. Authorized Agents
You may use an authorized agent to submit a request on your behalf. We require:
- written authorization from you or a valid power of attorney, and
- verification of both the agent’s identity and your identity (unless a valid power of attorney is provided).
10. Financial Incentives
We do not offer financial incentives for the collection, sale, or sharing of personal information.
11. Changes to This Notice
We may update this notice from time to time. The “Last Updated” date at the top indicates the most recent revision.
12. Contact
For California privacy requests or questions, contact:
- Email: [email protected]
- Postal address: Tööstuse tn 75-71, 10416 Tallinn, Estonia (iGAcquire OÜ)
This notice is provided pursuant to the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act of 2020 (CPRA).
