Privacy

Dealenz is the data controller for your account. If you have any privacy question — including what is held about you — write to dealenz.help@gmail.com.

What we collect

Account data: your email address, sign-in records, and any business profile details you choose to add (name, entity, address, rates). Deal content: the contracts, descriptions, files, and messages you submit, plus the analyses, documents, and signatures produced from them. Payment data: purchases are processed by Paddle as merchant of record — we see what you bought and what it cost, never your card numbers. Connected accounts: if you connect Gmail, we can read the threads you choose to import and send the alerts you ask for, nothing else. Operational metadata: error reports and usage counters (for example AI token counts per operation). These never contain your deal text.

A note on other people's information

Contracts routinely contain third-party personal data: counterparty names, email addresses, salaries, equity terms. By uploading such material you confirm you have a lawful basis to share it with us for analysis — typically your legitimate interest in reviewing a deal you are party to. Only upload material you are authorized to process, and avoid including sensitive information the review does not need.

How we use it, and on what basis

We use your data to operate your account and provide the features you ask for: analysis, documents, sharing, signing, monitoring, and billing. Where data protection law requires a lawful basis (including the EU and UK GDPR), those bases are performance of our contract with you, your consent (for example AI analysis of what you submit and Gmail access you connect), and our legitimate interests in running a secure, working product. You can withdraw consent at any time by deleting the relevant content or your account, or disconnecting Gmail in Settings.

Who processes it

Your data lives in our EU-hosted database and is served through our hosting provider. Deal content you submit for analysis is transmitted to our AI processing providers to produce that analysis. Payments run through Paddle. Email sending and Gmail access run through Google, only where you enable them. Each processes data only to provide its part of the service, under agreements that forbid any other use. We do not sell your data, and we do not use it for advertising.

On AI retention and training: we send submitted content to AI providers only to fulfil your request, and our provider terms prohibit any other use including model training. Underlying model providers publish their own retention practices — write to dealenz.help@gmail.com for current details. If those commitments change materially, we will update this policy and, where the law requires it, seek fresh consent before continuing to send content there.

Counterparty and signature data

When you invite someone to sign, we process what the ceremony needs and nothing else: their name, email, the signature image they draw, type, or upload, and the timestamps of sending and signing. Counterparties never need an account, and their data is kept with your deal — deleted when the deal or your account is deleted, and covered by the same no-training, no-advertising commitments above. Documents you record as signed elsewhere carry only the date you enter and the text you provide.

How long we keep it

We keep your account data for as long as your account exists. Delete your account at any time from Settings → Delete account and everything in it is erased from our live systems immediately. Download a copy of everything first from Settings → Privacy, and delete individual deals any time from your dashboard deals table — you never have to erase everything to remove one sensitive deal. Encrypted backups age out on their own schedule after that. We keep malfunction and billing records only as long as needed for security, troubleshooting, and legal obligations.

Your rights

You can access, correct, export, or delete your data — most of it directly in the product, the rest by writing to dealenz.help@gmail.com. Where the law gives you rights of objection or restriction, or the right to complain to your supervisory authority, those apply in full. We answer privacy requests within one month.

International transfers

Our database is hosted in the EU. AI processing and some infrastructure operate in the United States under contractual safeguards. By using Dealenz you understand deal content you submit may be processed there to produce your analysis.

Security

Access is scoped so accounts can only ever read their own data; all traffic is encrypted in transit and storage is encrypted at rest. No system is impregnable: if a breach exposes your data we will notify you and the relevant authority without undue delay, as the law requires.

Cookies

Sign-in relies on session cookies. Dealenz does not use advertising trackers.

Minors

Dealenz is for users aged 18 and over. We do not knowingly collect data from children.

Changes

If this policy changes materially we will update the date above and, where the law requires it, notify you in the product before the change takes effect.