MemoIQ — Privacy Policy

1. Who we are.

The MemoIQ platform is operated by Knollgate, 222 Lakeview Avenue, Suite 800, West Palm Beach, Florida 33401. This policy describes how we collect, use, and protect information in connection with the Service. MemoIQ is a business-to-business service; we process business financial information at the direction of the companies that share it.

2. Information we collect.

(a) Information you provide: contact details (name, business email, title, phone), documents you upload, and information you submit in the portal (including electronic NDA signatures).

(b) Connected-system data: when you authorize a read-only connection to a business system (accounting, banking, payments, payroll, or commerce), we receive business financial records from that system via its API — such as financial statements, ledgers, transactions, invoices, and aging reports. We never receive or store your login credentials for OAuth-connected systems; for token-based connections, tokens are stored encrypted and used solely to retrieve data on a read-only basis.

(c) Technical data: standard logs (IP address, browser type, timestamps) used for security and operations.

3. How we use information.

Solely to: provide the Service; perform financial diligence and ongoing monitoring that the sharing company has been invited to participate in; generate analyses for investment-committee purposes; communicate with you about the Service (e.g., portal invitations and reminders); and maintain security and comply with law. We do not sell personal information, and we do not use Counterparty financial data for advertising.

4. How information is shared.

With: (a) authorized personnel of Knollgate involved in the relevant transaction; (b) service providers that host and support the Service — including Amazon Web Services (cloud hosting, United States), Box (document storage), and email delivery providers — each bound to use data only to provide their service; (c) professional advisors bound by confidentiality; and (d) authorities where required by law. We do not share Counterparty data with other counterparties.

5. Security.

Data is encrypted in transit (TLS) and at rest. Access is role-restricted and logged. Connections to your business systems are read-only and revocable at any time. Secrets and tokens are stored in a dedicated secrets-management service.

6. Retention.

We retain data for as long as needed for the purposes above, including the evaluation and monitoring of the relevant transaction, and as required by law. Upon written request, we will delete or return your company's data, subject to legal retention requirements.

7. Your choices.

You may disconnect any connected system at any time, request access to or deletion of your data, and opt out of reminder emails. Contact us by replying to your portal invitation email or writing to the address above.

8. International users.

The Service is hosted in the United States. By using it, you consent to processing in the United States.

9. Children.

The Service is for business use and not directed to anyone under 18.

10. Changes.

We may update this policy; material changes will be reflected by the "Last updated" date above.