ILLUM Partners · ILLUM Pulse

Privacy Policy

Last updated: April 2026

This policy explains how ILLUM Partners collects, uses, and protects the personal data you provide when using ILLUM Pulse. We take your privacy seriously and are committed to transparency about our data practices.

1.  Who We Are

ILLUM Pulse is operated by ILLUM Partners. We are committed to protecting your privacy. Contact us at info@illumpartners.com.

2.  Information We Collect

We collect the following categories of personal data:

Identity dataFull name, email address, company name.
Financial and business dataRevenue figures, profit margins, growth rates, headcount, customer concentration — all provided voluntarily by you.
Technical dataIP address, browser type, login timestamps, pages visited.
Communications dataEmails you send us and responses we send you.

We do not collect sensitive personal data including health information, racial or ethnic origin, political opinions, or biometric data.

3.  Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

ContractProcessing necessary to provide the Service you have signed up for.
Legitimate interestsImproving our benchmark database using anonymized aggregated data, sending market update emails to subscribers.
ConsentWhere you have explicitly opted in to communications.
Legal obligationWhere processing is required by applicable law.

You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

4.  How We Use Your Information

We use your data solely to:

  • Generate your Pulse Score, benchmarking dashboard, valuation range, and M&A readiness assessment.
  • Send account-related transactional emails.
  • Send monthly market update emails to paying subscribers (you may unsubscribe at any time).
  • Improve sector benchmarks using anonymised and aggregated data only — your identifiable data is never included in benchmarks.
  • Comply with legal obligations.

We do not use your data for advertising, profiling, or automated decision-making that produces legal effects.

5.  Data Storage and International Transfers

Your data is stored in Supabase, hosted on AWS infrastructure in the United States. If you are located in the EEA or UK, your data is transferred to the US under appropriate safeguards. Supabase maintains Standard Contractual Clauses (SCCs) with its customers for EU data transfers. By using the Service you acknowledge this transfer.

We implement appropriate technical and organisational measures to protect your data including: row-level security ensuring each user can only access their own data, encrypted data in transit (TLS) and at rest, access controls limiting who at ILLUM Partners can view user data.

6.  Data Sharing

We do not sell your personal data under any circumstances.

We share data only with:

SupabaseDatabase and authentication — data processor.
VercelHosting and CDN — data processor.
StripePayment processing — data processor, PCI-DSS compliant.
AnthropicClaude API for report generation — data processor.

Each processor is contractually bound to process data only on our instructions and maintain appropriate security measures. We do not share data with any other third parties.

7.  Data Retention

We retain your personal data for as long as your account remains active plus 12 months after account closure, unless a longer retention period is required by law. Financial records related to payments are retained for 7 years as required by US tax law.

You may request deletion of your account and all personal data at any time by emailing info@illumpartners.com. We will confirm deletion within 30 days. Note that anonymised aggregated benchmark data derived from your inputs cannot be individually identified or deleted.

8.  Your Rights

Depending on your location you have the following rights regarding your personal data:

All usersRight to access your data, right to correct inaccurate data, right to delete your account and data.
EEA and UK users (GDPR/UK GDPR)Right to data portability (receive your data in machine-readable format), right to restrict processing, right to object to processing based on legitimate interests, right to lodge a complaint with your local data protection authority.
California users (CCPA)Right to know what personal information is collected, right to delete personal information, right to opt out of sale of personal information (we do not sell data), right to non-discrimination for exercising your rights.

To exercise any of these rights contact us at info@illumpartners.com. We will respond within 30 days. We may need to verify your identity before actioning requests.

9.  Cookies

We use essential cookies for authentication and session management only. We do not use advertising or tracking cookies.

10.  Children

The Service is not directed at children under 18. We do not knowingly collect data from minors.

11.  Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email.

12.  Contact

For privacy questions, contact us at info@illumpartners.com.

13.  EU and UK Representative

ILLUM Pulse and ILLUM Partners are based in Virginia, USA. As we may process data of EEA and UK residents, we are evaluating appointment of an EU/UK representative as required under GDPR Article 27. If you are an EEA or UK resident with privacy concerns, contact us directly at info@illumpartners.com and we will respond within 30 days.

14.  Data Protection Officer

We have not appointed a formal Data Protection Officer as we do not meet the thresholds requiring mandatory appointment. Privacy matters are handled directly by ILLUM Partners management. Contact: info@illumpartners.com.

ILLUM Partners

M&A Advisory · TMT · www.illumpulse.com