Privacy Policy

Deal IQ ("we", "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights. We keep it short and plain - no legal jargon.

Account information: Your email address and password (stored securely via Supabase Auth - we never see your raw password).

Deal data: Anything you enter into the platform - property details, financial assumptions, notes, and computed results. This data belongs to you.

Usage and error data: We use Sentry to capture application errors and performance data. This may include browser type, page URLs, and stack traces - never your deal data or personal files.

We do not collect: Payment card numbers (handled entirely by Stripe), precise location, or any data beyond what's needed to run the service.

• To authenticate you and operate your account
• To store and display your deals and analysis
• To diagnose bugs and improve platform stability (via Sentry)
• To send transactional emails (account confirmation, password reset)
• To respond to support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Deal IQ uses the following trusted services to operate:

• Supabase - Database and authentication. Your data is stored in Supabase's infrastructure, encrypted at rest and in transit.
• Sentry - Error monitoring and performance tracking. No personal deal data is transmitted to Sentry.
• Stripe - Payment processing for paid subscriptions. We never store payment card details.
• Cloudflare - Hosting, content delivery, and receiving email you choose to forward or BCC to your Deal IQ ingest address. Cloudflare handles traffic routing and DDoS protection.
• Resend - Sending transactional email, such as reminders and account emails.
• Google Workspace - Our company mailboxes. Email you send to a dealiq.pro address is received and stored there.

We use Meta (the Meta Pixel and its server-side conversion reporting) and Google (Google Analytics, with Google Ads measuring conversions through it) to understand how people find Deal IQ and whether our ads work. These tools run on our public pages, our pricing and sign-up pages, and once more when a free trial starts.

They receive:

• Which page you visited and which buttons you used, such as starting a trial, plus the campaign tags and ad click identifiers in the link you arrived from
• Cookies these services use to recognize your browser (for example Meta's _fbp and Google's _ga), and the IP address and browser details that come with any web request
• A random ID Deal IQ creates for your browser, so these services can tell repeat visits apart. It contains nothing about you, and Meta receives it only as a one-way scrambled code (a hash)
• When you create an account or start a trial, your email address is sent to Meta only as a one-way scrambled code (a hash), never as readable text. Google does not receive your email address from us.

On the founding-member page only, Deal IQ also records how the page itself is used: which parts of it came into view, how far you scrolled, which buttons and links you pressed, and how long you stayed. That record is kept by Deal IQ under the same random browser ID, holds no name, email or IP address, and is read only by the person who runs our ads. On that same page we use Microsoft Clarity, which replays the visit as a recording and builds heatmaps of scrolling and clicks. Clarity hides anything typed into a form and sets its own cookies (_clck and _clsk). The recording ends the moment you leave that page: nothing you do after signing in is recorded.

We never send them your deals, your numbers, your documents, your contacts, or anything else inside your account.

You can limit this at any time: block or clear cookies in your browser, adjust your Meta ad preferences in your Facebook or Instagram settings, use Google's Ad Settings, install Google's Analytics opt-out browser add-on, or turn on "Do Not Track" in your browser, which Clarity honors.

Email integration is optional and off unless you turn it on. Deal IQ offers two ways to get email into a deal timeline:

• Forward or BCC - you send a message to your private Deal IQ ingest address. We only ever receive the specific emails you choose to send us. No mailbox access is involved.
• Connected mailbox - if you connect a Google or Microsoft account, Deal IQ reads messages in order to match them to your existing contacts and deals. Access is read-only: Deal IQ can never send, delete, or modify mail in your account.

What we store. For any email that reaches Deal IQ we store only the message headers - sender, recipients, subject, date - together with a short preview of up to 300 characters, and a link back to the message in your own mail client. Beyond that preview, we do not store message bodies, and we never store attachments from a connected mailbox.

Files you email to us. When you forward or BCC a message to your own private Deal IQ address, we also save the documents attached to it into the matching deal's files. That mail reached us because you chose to send it, not because we read your mailbox, and those files are yours to open or delete like anything else you upload. This never applies to a connected mailbox.

What we never do. We do not sell email data, use it for advertising, or use it to train any generalized artificial intelligence or machine learning model. We do not transfer email content to any third party, including AI providers. Humans do not read your email except in the narrow cases Google permits: with your explicit consent, for security purposes, to comply with applicable law, or on data that has been aggregated and anonymized.

Deal IQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your control. You can disconnect a mailbox or rotate your ingest address at any time from Settings. Disconnecting offers to delete everything Deal IQ synced from that mailbox, and revokes our access token with the provider. Deleting your account removes all of it.

We retain your account and deal data for as long as your account is active. If you delete your account, your data is removed from our systems within 30 days. Error logs in Sentry are retained for 90 days.

You have the right to:

• Access your data - all your deal data is visible in the app at any time
• Delete your data - contact us to permanently delete your account and all associated data
• Export your data - use the print/PDF export feature or contact us for a data export
• Correct your data - update anything directly within the app

All data is encrypted in transit (HTTPS/TLS) and at rest within Supabase. Access to your deals is restricted by row-level security - only you can read or write your own data. Share links provide read-only access and can be revoked by you at any time.

Deal IQ is not directed at children under 18. We do not knowingly collect personal information from anyone under 18.

We may update this policy as the product evolves. Material changes will be communicated via email or an in-app notice. The effective date at the top of this page will always reflect the latest version.

Questions, data requests, or deletion requests: support@dealiq.pro