Effective date: June 29, 2026
PAIRES AI
This Privacy Policy explains how Paires AI LLC (“Paires,” “we,” “us,” or “our”) collects, uses, and shares personal information when you visit paires.ai, contact us, or use our client portal (collectively, the “Site”), and describes your privacy rights. For personal information processed through the Site, Paires acts as the controller.
When we process client materials to provide services under an Engagement Agreement, we do so on the client’s behalf as a processor or service provider, and that handling is also governed by the Engagement Agreement. This Policy does not cover the practices of third-party sites we link to.
01
Information we collect
Information you provide.
Contact and intake details (name, email, company, role, and the contents of messages or intake-form submissions); account registration details and credentials for the client portal; engagement materials you upload, such as pitch decks, one-pagers, executive summaries, financial information, and data-room contents, which may include personal information about your team or others; and records of your communications with us.
Information collected automatically.
Usage and device data such as IP address, browser and device type, pages viewed, referring pages, and dates and times of access, collected through cookies and similar technologies, including Google Analytics.
Information from third parties.
We may receive limited information from service providers, business partners, or publicly available sources to support our services and outreach, such as business contact details.
02
Cookies and analytics
We use cookies and similar technologies for essential site functionality, to remember preferences, and for analytics. We use Google Analytics to understand how visitors use the Site; Google may set cookies and process usage data on our behalf. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and you can control cookies through your browser settings or, where offered, our cookie banner. Where required, we obtain consent before setting non-essential cookies, and we honor Global Privacy Control (GPC) signals where applicable.
Website Visitor Identification
We use a third-party website visitor identification service (RB2B, operated by Retention.com) to understand which businesses and professionals visit our website, so we can improve our outreach and services.
When you visit our site, this service may collect your IP address, browser and device information, cookies and similar identifiers, and the pages you view. For visitors located in the United States, it may match this information against third-party data providers to identify the visiting company and, where available, a related business profile (such as name, job title, company, and professional profile links). We do not perform this individual-level identification for visitors in the European Union, the United Kingdom, or the European Economic Area.
Legal basis and consent. For visitors in the EU, UK, and EEA, this service is only loaded after you give consent through our cookie banner. You can change or withdraw your consent at any time through the cookie settings on our site. For visitors in the United States, you may opt out of the sale or sharing of your personal information, and we honor Global Privacy Control (GPC) signals.
Data sharing. This service relies on third-party data providers to match visitor information. You can review RB2B's data practices and opt out at https://www.rb2b.com/opt-out.
Your choices. To opt out, use the cookie settings link on our website, enable a Global Privacy Control signal in your browser, or contact us at legal@paires.ai.
03
How we use personal information
• to provide, operate, and secure the Site and client portal;
• to respond to inquiries and communicate with you;
• to provide and administer services under an Engagement Agreement;
• to analyze and improve the Site and our services;
• to send updates or marketing communications, from which you can opt out at any time;
• to comply with legal obligations and enforce our terms; and
• to detect, prevent, and address fraud, security, or technical issues.
04
Legal bases for processing (EEA and UK)
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
PURPOSE
LEGAL BASIS
Providing the Site and responding to inquiries
Performance of a contract or steps at your request; legitimate interests
Providing services under an Engagement Agreement
Performance of a contract
Analytics and improving the Site
Legitimate interests, or consent where required for cookies
Marketing communications
Consent, or legitimate interests where permitted
Meeting legal obligations
Compliance with a legal obligation
Security and fraud prevention
Legitimate interests
05
How we share personal information
Service providers.
Hosting, cloud storage, analytics (Google), CRM, scheduling, and communications providers who process information on our behalf under contract.
In connection with the services.
Where you are a client, we share your materials with prospective investors that you approve, as described in and at your direction under your Engagement Agreement.
Legal and safety.
To comply with law or legal process, or to protect the rights, safety, and property of Paires, our users, or others.
Business transfers.
In connection with a merger, financing, acquisition, or sale of assets. We do not sell your personal information for money. To the extent the use of analytics or advertising cookies is considered a “sale” or “sharing” under certain U.S. state laws, you may opt out as described in Section 8 and through cookie controls and GPC signals.
06
International data transfers
We may process personal information in the U.S. and other countries. Where we transfer personal information from the EEA, the UK, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or another lawful transfer mechanism.
07
Data retention
We retain personal information for as long as needed to fulfill the purposes described in this Policy, to provide our services, and to comply with legal, accounting, or reporting obligations, after which we delete or anonymize it. Engagement materials are retained as set out in the applicable Engagement Agreement.
08
Your privacy rights
EEA and UK (GDPR).
You have rights to access, rectify, erase, restrict, and port your personal information, to object to certain processing, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.
California (CCPA/CPRA).
California residents have the right to know and access, delete, and correct their personal information; to opt out of the “sale” or “sharing” of personal information; to limit the use of sensitive personal information; and not to receive discriminatory treatment for exercising these rights. We do not sell personal information for money. You, or an authorized agent acting on your behalf, may submit requests at legal@paires.ai, and we will verify your request before responding.
Other U.S. states.
Residents of certain other states may have similar rights to access, delete, correct, and opt out. Contact us to exercise them.
How to exercise your rights.
Email legal@paires.ai. We will respond within the time required by applicable law (generally within 45 days under the CCPA and one month under the GDPR). We will not discriminate against you for exercising your rights.
Categories of personal information (CCPA/CPRA)
In the preceding twelve months, we have collected the following categories of personal information:
CATEGORY
COLLECTED
SOURCE
PURPOSE
DISCLOSED TO
Identifiers (name, email, IP address)
Yes
You; your device
Operate Site; communicate
Service providers
Customer records (contact and company details)
Yes
You
Provide services; communicate
Service providers
Commercial information (engagement materials)
Yes
You
Provide services
Service providers; approved investors at your direction
Internet or network activity (usage, analytics)
Yes
Automatic
Analytics; security
Analytics provider
Geolocation (approximate, from IP)
Yes
Automatic
Security; analytics
Service providers
Professional or employment information
Yes
You
Provide services
Service providers
Sensitive PI (account login credentials)
Yes
You
Account access and security only
Service providers
Biometric, health, genetic, or precise geolocation
No
—
—
—
We use sensitive personal information (account login credentials) only to provide and secure the client portal, and not to infer characteristics. We do not knowingly sell or share personal information of any individual.
09
Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information, including access controls and secure sharing links. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10
Children’s privacy
The Site is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
11
Third-party links
The Site may link to third-party websites and services that we do not control. Their privacy practices govern the information you provide to them, and we encourage you to review their policies.
12
Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new effective date and, where appropriate, provide additional notice.
13
Contact us
EEA and UK users: if we are required to designate a representative under Article 27 of the GDPR or UK GDPR, that representative’s contact details will be provided here.