Privacy Policy

1. Introduction

DealStream.io ("DealStream," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at dealstream.io and use our real estate deal management platform (collectively, the "Service").

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, company name, and professional role when you create an account or request access.
• Deal Data: Property information, financial details, contact records, notes, and documents you upload or create within the platform.
• Communications: Information you provide when contacting support, submitting feedback, or joining our waitlist.
• Payment Information: Billing details processed securely through our third-party payment processor. We do not store full credit card numbers on our servers.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, time spent, and interaction patterns within the Service.
• Device Information: Browser type, operating system, device type, screen resolution, and unique device identifiers.
• Log Data: IP address, access times, referring URLs, and server log information.
• Cookies & Similar Technologies: We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and analyze usage. See Section 7 for details.

2.3 Information from Third Parties

• Property Data Providers: We may receive property and market data from third-party sources to enrich deal information within the platform.
• Authentication Providers: If you sign in using a third-party service, we receive profile information as authorized by that provider.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including deal tracking, analysis, CRM, and investor portal features.
• Process transactions and manage your account and subscription.
• Personalize your experience and deliver relevant content and feature recommendations.
• Send transactional communications (account verification, password resets, deal notifications) and, with your consent, marketing communications.
• Analyze usage trends, monitor performance, and improve the Service's functionality and user experience.
• Detect, prevent, and address fraud, security incidents, and technical issues.
• Comply with legal obligations, enforce our terms, and protect our rights and the rights of our users.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With trusted vendors who assist in operating the Service (hosting, email delivery, payment processing, analytics) under strict confidentiality agreements.
• Investor Portal Sharing: When you use the investor portal feature to share deal information with specific investors, only the data you choose to share is visible to those recipients.
• Team Members: Within your organization's workspace, information may be visible to authorized team members based on role permissions you configure.
• Legal Requirements: When required by law, regulation, legal process, or enforceable governmental request.
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets, with notice to affected users.
• With Your Consent: For any purpose disclosed to you at the time of collection or with your explicit consent.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Secure authentication with hashed and salted passwords and support for multi-factor authentication.
• Regular security audits, vulnerability assessments, and penetration testing.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Infrastructure hosted on SOC 2 compliant cloud providers with automated backups and disaster recovery.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Deal data, contacts, and documents remain in your account until you delete them or close your account.

Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution). Backups may retain encrypted copies for up to 90 days before automatic purging.

7. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function (authentication, session management, security). Cannot be disabled.
• Analytics Cookies: Help us understand how users interact with the Service to improve performance and features. Can be opted out of.
• Preference Cookies: Remember your settings and preferences (theme, layout, filters) for a better experience.

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings. Disabling essential cookies may impair Service functionality.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable export of your data (deals, contacts, documents).
• Restriction: Request that we limit processing of your personal data in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at dealstreamio@gmail.com. We will respond within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms, to protect your data in compliance with applicable data protection laws.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us and we will promptly delete such information.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact us at dealstreamio@gmail.com.

12. SMS/Text Messaging

DealStream offers SMS messaging features that allow users to communicate with their business contacts regarding real estate transactions. By providing a phone number within the DealStream platform, contacts consent to receive text messages related to property inquiries, deal updates, appointment scheduling, and other real estate transaction communications.

• Message frequency varies based on deal activity.
• Message and data rates may apply.
• Reply STOP to any message to opt out of future texts.
• Reply HELP for support information.
• We do not sell, share, or rent phone numbers or SMS consent information to third parties.
• Phone numbers collected through DealStream are used solely for real estate business communications between platform users and their contacts.
• SMS opt-in consent is not transferable to any third party for any purpose.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date and, where appropriate, via email notification. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: