Privacy Policy

1. Introduction

Dealfolio ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Dealfolio platform and related services (collectively, the "Service").

By accessing or using the Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account Information: Name, email address, password, and profile information when you create an account
• Payment Information: Billing address and payment method details (processed securely through our payment processor, Stripe)
• Deal Data: Property information, financial data, contact information for sellers/buyers, notes, and other deal-related content you enter into the Service
• Communications: Information you provide when you contact our support team or participate in surveys
• Team Information: Information about team members you invite to collaborate on your account

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain information, including:

• Device Information: Device type, operating system, browser type, and unique device identifiers
• Usage Information: Pages viewed, features used, time spent on the Service, and interaction patterns
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies

2.3 Information from Third Parties

We may receive information from third-party sources, including:

• Property Data Providers: Public records, listing data, and market information from real estate data aggregators
• Authentication Providers: Information from social login providers (e.g., Google) if you choose to sign in using those services
• Analytics Providers: Aggregated analytics data about Service usage

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Service: To operate, maintain, and deliver the features and functionality of the Service
• Process Transactions: To process subscriptions, payments, and related billing activities
• Personalization: To personalize your experience and provide content and features relevant to your interests
• AI-Powered Features: To power our AI research, analysis, and optimization features using the data you provide
• Communication: To send you service-related notices, updates, security alerts, and support messages
• Marketing: To send promotional communications (with your consent, where required by law)
• Analytics: To understand how users interact with the Service and to improve our offerings
• Security: To detect, prevent, and address technical issues, fraud, and other harmful activities
• Legal Compliance: To comply with legal obligations and respond to lawful requests from authorities

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf, including:

• Cloud hosting providers (e.g., Supabase, AWS)
• Payment processors (Stripe)
• AI service providers (for analysis and research features)
• Email service providers
• Analytics providers

These providers are contractually obligated to use your information only to provide services to us and to maintain the confidentiality and security of your information.

4.2 Team Members

If you use team features, information you enter into the Service may be visible to other members of your team based on the permissions you configure.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government regulations).

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your information.

4.5 With Your Consent

We may share your information with third parties when you give us explicit consent to do so.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain your information as necessary to:

• Comply with our legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal or legitimate business purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security assessments and monitoring
• Access controls and authentication for employees
• Secure data centers with physical security measures

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Account Information

You can access, update, or delete your account information at any time through your account settings. You can also request a copy of your data or request account deletion by contacting us.

7.2 Marketing Communications

You can opt out of receiving promotional emails by clicking the "unsubscribe" link in any marketing email or by updating your communication preferences in your account settings. You will continue to receive transactional and service-related communications.

7.3 Cookies

Most web browsers allow you to control cookies through their settings. However, disabling cookies may limit your ability to use certain features of the Service.

7.4 Data Portability

You can export your deal data at any time using the export features available in the Service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

9. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing of your data for certain purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us using the information provided below. You also have the right to lodge a complaint with a supervisory authority in your country.

Our legal bases for processing your personal data include: performance of a contract (to provide the Service), legitimate interests (to operate and improve our business), consent (where you have given it), and compliance with legal obligations.

10. California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:

• Right to Know: Request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.

11. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will take steps to delete such information.

12. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated Privacy Policy on the Service and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

For material changes that significantly affect how we use your personal information, we will provide prominent notice or obtain your consent as required by applicable law.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Dealfolio
Email: info@dealfolio.app
Website: dealfolio.app

For GDPR-related inquiries, you may also contact our Data Protection Officer at the email address above with "DPO Request" in the subject line.