Privacy Policy

Last updated: July 3, 2026

This policy explains what DealFlow CRM ("DealFlow," operated by DealFlow) collects and how we use it.

1. What we collect

• Account info: your email address and a securely hashed password.
• Your CRM content: the contacts, deals, campaigns, notes, and settings you create. This can include personal information about your own clients and prospects that you choose to enter.
• Basic technical data: standard logs needed to operate and secure the service.
• Billing: payments are handled by Stripe. Your card number goes directly to Stripe and never touches our servers — we only see your subscription status.

2. How we use it

We use your data only to provide DealFlow: to store your CRM, sign you in, sync across your devices, and support you. We do not sell your data or your clients' data, and we don't use it for advertising.

3. Where it's stored

Your data is stored in our cloud database (hosted on Supabase) with row-level security, so each account can access only its own data. Passwords are hashed; we can't see them.

4. Third-party services you connect

Some optional features rely on services you explicitly connect:

• Gmail (optional): if you connect Gmail, we request only permission to create drafts in your mailbox — we cannot read or send your email. Draft content is generated from your CRM data and sent directly to Google to create the draft.
• Lead-research data (optional): if you use the FSBO/owner-lookup tools, the address or search terms you enter are sent to a web-data provider to fetch public listing information.

You can disconnect these anytime in Settings, which removes the stored access.

5. Your clients' data & your responsibility

Because you enter information about your own clients, you are responsible for having the right to store it and for complying with applicable privacy and anti-spam laws when you contact them.

6. Your choices

You can export a complete backup of your data anytime from Settings, and you can request full deletion of your account and data by contacting us. Deleting your account removes your data from the live database.

7. Changes

If we update this policy we'll change the date above and, where practical, notify you in the app.

8. Contact

Questions or a data request? Email trentnitta@gmail.com.