Privacy Policy

What we collect

• Account details: your email address, optional name, and a hashed password.
• Deal data: the property addresses and numbers you enter, and the reports we generate.
• Billing: your plan and subscription status. Card details are handled by Stripe and never reach our servers.
• Usage: product events such as "report generated" or "quick check used", tied to your account or to a random browser ID, plus privacy-friendly page analytics without cookies.
• Error reports: technical details when something breaks, so we can fix it.

How we use it

To run the Service, generate your reports, process payments, send account and product emails (welcome, usage limits, a monthly summary you can turn off), prevent abuse, and improve DealLens.

Who processes it for us

Supabase (database and login), Vercel (hosting and analytics), OpenAI (writing AI reports from the deal numbers you submit; not used to train their models under their API terms), Stripe (payments), Resend (email) and Sentry (error alerts). Each only gets what it needs to do its job.

Cookies and local storage

We use essential cookies to keep you signed in and, if you arrive through a referral link, to credit the person who referred you (30 days). Your browser's local storage keeps an unsent deal draft and a random analytics ID. We don't use advertising cookies.

Retention and your rights

We keep your data while your account is open. You can delete individual deals anytime. To export or delete your account and all its data, email us and we'll do it within 30 days. Depending on where you live you may have further rights (access, correction, objection); contact us to use them.

Security

Data is encrypted in transit, access is restricted per account with row-level security, and payment details stay with Stripe.

Changes

We'll post any changes here and update the date above. Material changes will be emailed to you.