Skip to main content
Built in Windsor, Colorado, by a working real estate agent — not a software company.
One person. No investors. No sales call.
← Back to home

Privacy Policy

Last updated: August 5, 2026

Short version: your CRM data is yours. We store it to run the app, we don't sell it, you can export it anytime, and we'll delete it on request.

This policy explains what DealFlow CRM ("DealFlow," operated by DealFlow CRM LLC, a Colorado limited liability company, 1117 Crystal Creek Drive, Windsor, CO 80550) collects and how we use it.

1. What we collect

  • Account info: your email address and a securely hashed password.
  • Your CRM content: the contacts, deals, campaigns, notes, and settings you create. This can include personal information about your own clients and prospects that you choose to enter.
  • Basic technical data: standard logs needed to operate and secure the service.
  • Billing: payments are handled by Stripe. Your card number goes directly to Stripe and never touches our servers — we only see your subscription status.

2. How we use it

We use your data only to provide DealFlow: to store your CRM, sign you in, sync across your devices, and support you. We do not sell your data or your clients' data, and we don't use it for advertising.

3. Where it's stored

Your data is stored in our cloud database (hosted on Supabase, on servers in the United States) and is protected by row-level security, so each account can reach only its own rows. Traffic is encrypted in transit with TLS, and the database is encrypted at rest by the hosting platform. Passwords are hashed; we can't see them. To be straightforward with you: your CRM content is not end-to-end encrypted — we hold it in a form we could technically read, which is what lets us support you and restore your account. We don't read it in the ordinary course of running the service.

4. Third-party services you connect

Some optional features rely on services you explicitly connect:

  • Gmail (optional): if you connect Gmail, we request the send-only permission (gmail.send) plus your Google account's email address (openid, email) so we can show you which mailbox DealFlow is sending from. DealFlow can send an email from your account only when you click Send, and can never read your mail, see your contacts, or access your drafts or inbox. Every email is composed from your CRM data, shown to you for review in the app first, and sent directly through Google. We store only your address and a token that permits sending. DealFlow's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • Lead research and property data (optional): DealFlow's lead-gen and pricing tools query outside sources with the addresses, ZIP codes, and search terms you type. Specifically: search terms go to Nimble, our web-data provider, which fetches public listing and owner information on our behalf (including from sites such as Zillow); county assessor systems — currently Larimer County (apps.larimer.org) and Weld County (services.arcgis.com) — are queried directly from your browser, so those county systems see your IP address and your query, and their own terms apply; and if you connect an MLS feed, listing data is retrieved from MLS Grid (api.mlsgrid.com) under the license you and your broker hold. Results you save become Prospects or Listings in your CRM.
  • Information about people who are not DealFlow users: the owner-lookup tools return public-record and web-sourced information about third parties — typically an owner's name, mailing address, and sometimes a phone number. When you save a result, that information is stored in your CRM. It is drawn from public records and public web pages, it can be out of date or wrong (the app labels it "verify"), and you decide what to keep and how to use it. See section 5.

You can disconnect Gmail anytime in Settings. When you do, DealFlow revokes its access with Google and deletes the stored token from our database — we keep nothing that would let us reach your mailbox again.

4a. Google user data — the full picture

  • What we access: only your Google account email address and an OAuth token that permits sending email. We never access, read, or store your message content, inbox, drafts, labels, attachments, or Google contacts — the send-only permission does not allow it, and we request nothing broader.
  • How we use it: your address is shown in Settings so you always know which mailbox DealFlow is connected to; the token is used solely to send the individual emails you review and approve in the app. Nothing else.
  • What we share: nothing. We do not sell, transfer, or disclose any Google user data to third parties — not to advertisers, data brokers, or anyone else. The only party that touches it is Google itself, when your email is handed to Gmail for sending.
  • How it's protected: the OAuth token is stored in a server-side database table readable only by our backend — it is never sent to your browser or anyone else's. All Google user data is protected by encryption in transit (TLS) and at rest, and by per-account access controls.
  • Retention & deletion: we keep your Google email address and token only while Gmail is connected. Disconnecting in Settings immediately revokes DealFlow's access with Google and deletes the token from our database; deleting your DealFlow account removes it as well.
  • No AI/ML training: we do not use Google user data to develop, improve, or train any AI or machine-learning model, and we do not transfer it to any third-party AI/ML service. (Email drafts are composed from the CRM data you entered, not from any data obtained via Google APIs.)

4b. Companies that process data for us

We don't sell data, but we do rely on a small number of vendors to run DealFlow. Each one only receives what it needs for its function:

  • Supabase — hosts the database and handles sign-in. Stores your account and all your CRM content.
  • Netlify — serves the website and app files. Sees standard web-request logs.
  • Stripe — takes payments. Receives your billing details directly; we never see your card number.
  • Google — only if you connect Gmail, and only as described in sections 4 and 4a.
  • Nimble — only when you use the lead-research tools; receives the search terms you enter.
  • MLS Grid — only if you connect an MLS feed.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or ourselves. If DealFlow is ever sold or merged, your data may transfer to the buyer, who would remain bound by this policy; we'd tell you before that happened.

4c. Data stored on your own device

DealFlow is an installable web app and keeps a working copy of your CRM in your browser's local storage so it loads fast and works offline. That copy is not encrypted — anyone with access to your unlocked device and browser profile can read it. Signing out clears it. We don't use advertising or analytics cookies, and we don't track you across other websites.

4d. Crash and diagnostic reports

When something goes wrong on screen, DealFlow records what happened so the problem can be fixed. Each record holds the error message, the technical location in our code, which screen you were on, your app version and browser type, and the time.

Email addresses and phone numbers are stripped out before the record is stored, and we never include your contacts, deals, notes, campaign content, or MLS data in a crash report. The last 25 faults are kept on your own device, and you can read or copy them yourself at any time from Settings → Diagnostics.

If you turn on automatic crash reporting in Settings, those same records are also sent to our database and linked to your account, so we can find and fix faults without waiting for you to report them. It is off unless you switch it on, you can switch it off again at any time, and switching it off stops any further reports being sent. We use crash reports only to diagnose and fix problems — never for advertising, profiling, or training machine-learning models. They are deleted after 30 days.

5. Your clients' data & your responsibility

Most of what DealFlow holds is information you entered about other people — your clients, prospects, and property owners you looked up. For that information you are the controller and we act on your instructions. That means you are responsible for having a lawful basis to collect and keep it, for honoring the requests those people make about their own data, and for following applicable privacy, anti-spam, and fair-housing law when you contact them. If one of your contacts asks us directly to remove their information, we will refer them to you and help you act on it.

5a. MLS listing data, if you connect a feed

MLS data is different from the rest of your CRM, and it is worth knowing how before you connect a feed. It is licensed to you and to us by your MLS and its data platform (MLS Grid) — you don't own it, and neither do we. Three consequences follow:

  • We are required to delete it in circumstances you don't control. If your MLS membership lapses, your feed ends, or the license between us and the MLS is terminated, the listing data must be erased from your account promptly — see section 6. We can also be directed by the MLS to suspend or revoke your access to it.
  • What you may do with it is set by the license, not by us. The limits — including that MLS data may not be used to contact property owners, sent to investors or the public, or used for unsolicited email — are in Terms §4b, and they bind you directly.
  • The MLS may audit how it appears in your account. Our agreement lets the MLS and its data platform request information about how the data is accessed and used, and we are obliged to cooperate.

None of this affects the data you created yourself. Your contacts, deals, campaigns, notes and your own analysis remain yours under section 3, and the record of an erasure is kept in the app so you have written proof the license was honored.

6. How long we keep it & your choices

  • Export: download a complete backup of everything in your CRM at any time from Settings → Data & Backup. No request needed.
  • Deletion: email us and we will delete your account and its data from the live database within 30 days. There is no self-serve delete button yet — a request by email is the way to do it. Export first if you want a copy; deletion is permanent.
  • Retention: we keep your data for as long as your account is open. After you cancel, we keep it for 90 days so you can change your mind or retrieve a copy, then delete it. We keep basic billing records longer where tax and accounting law requires it.
  • MLS data is the exception — it is deleted immediately, not after 90 days. If you connect an MLS feed, the listing records we receive are licensed to us by the MLS and its data platform, not owned by you, and we are contractually required to erase them as soon as your entitlement ends. So when you cancel your subscription, cancel MLS Connect, or your MLS membership lapses or is suspended, MLS listing data is erased from your account straight away and is not held through the 90-day window. Everything you created yourself — contacts, deals, campaigns, notes, your own CMA figures — is unaffected and still follows the rule above. Your obligations for that data are in Terms §4b.
  • Correction and access: everything we hold about your CRM is visible and editable inside the app.

6a. State privacy rights

Depending on where you live — including under the Colorado Privacy Act, the California Consumer Privacy Act, and similar state laws — you may have the right to access, correct, delete, or obtain a portable copy of your personal information, and to appeal if we turn a request down. We do not sell personal information, and we do not share it for cross-context behavioral advertising or use it for targeted advertising or profiling. To exercise any right, email us at the address in section 8; we'll respond within 45 days and won't treat you differently for asking. If we decline, you may appeal by replying, and you can contact your state attorney general.

6b. Children

DealFlow is a business tool for licensed real-estate professionals and is not directed at children. We don't knowingly collect personal information from anyone under 18.

6c. Accessibility

We aim to meet WCAG 2.1 Level AA. If anything here or in the app is hard to use with assistive technology, email us and we'll fix it and find you another way through in the meantime.

7. Changes

If we update this policy we'll change the date above and, where practical, notify you in the app.

8. Contact

Questions or a data request? Email trentnitta@gmail.com.