Privacy Policy

1. Scope

This policy applies to Deal42 services and to data that you choose to connect, upload, or create in Deal42. Your use of Airtable, Google Drive, Dropbox, Notion, and other third-party services is also governed by those providers’ own terms and privacy policies.

2. Information we process

• Account information. Your name, email address, authentication identifiers, organization membership, roles, and invitation or admission status.
• Connected-source information. Provider account identifiers, connection status, encrypted OAuth credentials, resource metadata, and the records or files you select from Airtable, Google Drive, Dropbox, or Notion.
• Deal content. Uploaded or imported pitch decks, extracted facts, evaluation inputs, model responses, memos, verdicts, notes, and processed run history.
• Usage and operations. Deal counts, quota usage, job state, feature settings, timestamps, error details, and security or reliability logs. Infrastructure providers may also process request information such as IP address, browser type, and device information.
• Support communications. Messages and attachments you send to support@deal42.ai.

We do not ask for your third-party passwords. Provider authorization happens on the provider’s own site, and Deal42 receives only the authorization granted through that provider’s OAuth flow.

3. How we use information

We use information only as reasonably necessary to:

• authenticate users and enforce workspace and organization boundaries;
• connect the sources you choose and import the files or records you select;
• extract, analyze, and store deal-review results and deliver them in your Deal42 workspace;
• write results back to a connected source only when that feature is enabled and the write is confirmed;
• apply daily usage limits, prevent abuse, secure the service, troubleshoot failures, and provide support; and
• comply with legal obligations and enforce our terms.

We do not sell personal information or connected-source data, and we do not use deal content for third-party advertising.

4. Providers and AI processing

Deal42 uses service providers to operate the product. They process data for the functions described here and under their applicable agreements and security terms:

When you connect Airtable, Google Drive, Dropbox, or Notion, Deal42 exchanges data with that provider only to perform actions you request. Deal content may be sent to OpenAI and Anthropic to produce the requested analysis. Do not submit content unless you are authorized to have it processed in this way.

5. How we disclose information

We may disclose information:

• to the providers above to operate the service;
• within your Deal42 organization to users whose roles permit access;
• when you direct us to connect a provider or write information back to it;
• to investigate security incidents, protect rights and safety, or prevent fraud and abuse; or
• when required by law, legal process, or a valid governmental request.

If control of Deal42 changes, information may transfer as part of that transaction subject to this policy and applicable law.

6. Retention and deletion

Deal42 does not automatically delete raw decks, processed runs, or results after 30 days. They remain in the applicable Deal42 workspace so users can review prior work, unless deletion is requested or retention is otherwise required for security, legal, or operational reasons.

OAuth credentials are retained while a connection is active and are removed from Deal42 when the connection is disconnected, revoked, or otherwise invalidated. Disconnecting a provider stops future access and removes stored authorization material, but it does not automatically delete files or results that were already imported into Deal42.

To request access, correction, export, or deletion of Deal42 data, email support@deal42.ai from your account email. We may verify your identity and authority over the relevant organization before acting. Limited copies may remain temporarily in backups, security records, or records we must retain by law.

7. Security

Deal42 uses encrypted network transport, tenant-aware authorization, private object storage, server-side credential handling, and access controls designed to prevent unauthorized access. No service can guarantee absolute security. Notify support@deal42.ai promptly if you believe an account or connection has been compromised.

8. Your choices

• You choose which source provider and which resources to authorize.
• You can disconnect a provider in Deal42 and can also revoke Deal42 from the provider’s own integration settings.
• You can turn optional review features on or off before a run.
• You can request access, correction, export, or deletion by contacting support.

Deal42 is not directed to children under 18, and we do not knowingly collect their personal information.

9. Changes and contact

We may update this policy as Deal42 changes. We will revise the effective date and, when appropriate, provide additional notice. Questions or privacy requests can be sent to support@deal42.ai.