Privacy Policy

1. Introduction

DealFlow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real estate deal analysis platform ("Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Account Information: Name, email address, password (encrypted)
• Profile Information: Company name, phone number, role/title
• Contact Information: Names, emails, and phone numbers of contacts you add
• Deal Information: Property addresses, financial data, notes, and documents you submit

2.2 Automatically Collected Information

When you use our Service, we may automatically collect:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, features used, time spent on pages
• Cookies: Session cookies, authentication tokens, preference cookies
• Log Data: Access times, referring URLs, error logs

2.3 Calculator Usage

When you use our public calculators without an account, we collect minimal anonymous data for analytics purposes only. We do not store specific calculation inputs unless you choose to save them to an account.

2.4 Sensitive Property and Deal Information

When you submit deal analysis information to DealFlow (property addresses, valuations, repair estimates, financing details), this information:

• Is encrypted and securely stored in our databases
• Is only accessible to you and invited team members
• Is NOT sold, rented, or shared with third parties
• May be used in anonymized, aggregated form for analytics (your individual deal data remains private)
• Can be deleted by requesting account deletion

Your deal data is your business. We understand that real estate investors value confidentiality. Your specific property analyses, investment strategies, and deal details are kept strictly private and are never shared with competitors or third parties.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Process and store your deal analysis data
• Send transactional emails (account verification, password reset)
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve user experience
• Detect and prevent fraud or security issues
• Comply with legal obligations

We do not sell your personal information to third parties.

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Supabase: Database and authentication services
• Vercel: Hosting and deployment
• Analytics providers: Anonymous usage analytics

4.2 Team Members

If you are part of a team or organization on DealFlow, your deal data and activity may be visible to other authorized team members and administrators.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court order, subpoena).

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• Password Security: Passwords are hashed using secure algorithms
• Access Controls: Strict access controls and authentication
• Regular Audits: Security monitoring and vulnerability assessments

Note: No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Service. We may retain certain information as required by law or for legitimate business purposes.

• Account Data: Retained while account is active, deleted upon request
• Deal Data: Retained as long as needed, exportable upon request
• Log Data: Retained for up to 90 days
• Backup Data: Retained for up to 30 days after deletion

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a portable format
• Opt-out: Opt out of marketing communications
• Restriction: Request restriction of processing

To exercise these rights, contact us at privacy@dealflow.com. We will respond to your request within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies for:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: To understand how users interact with the Service
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

9. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to equal service and price (non-discrimination)

We do not sell personal information. To exercise your rights, contact us at privacy@dealflow.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when they are posted on this page.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: