Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, phone number, and authentication credentials
• Business Information: Company details, financial data, documents uploaded to listings
• KYC/Verification Data: Identity documents, proof of funds, and verification materials
• Transaction Data: Payment information, offer history, and escrow details
• Usage Data: Platform activity, search queries, and interaction patterns

2. How We Use Your Information

We use collected information to:

• Provide and improve our marketplace services
• Verify user identities and prevent fraud
• Facilitate business transactions and communications
• Process payments and manage escrow services
• Generate AI-powered insights and valuations
• Send service updates and transaction notifications
• Comply with legal obligations and regulatory requirements

3. Information Sharing

We share your information only in these circumstances:

• With Other Users: Your profile information is shared with parties you interact with
• With Service Providers: Payment processors (Stripe), email services (Resend), storage providers (Supabase)
• With AI Services: OpenAI processes document content for teaser and valuation generation
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales

4. Data Security

We implement industry-standard security measures including encryption, secure authentication, access controls, and regular security audits. However, no internet transmission is 100% secure. We cannot guarantee absolute security of your data.

5. Document Confidentiality

Business documents and financial information are protected by NDA agreements. Access is restricted to verified buyers who have signed NDAs. All document downloads are watermarked with buyer information to prevent unauthorized distribution.

6. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations. You may request deletion of your account data, subject to legal and contractual retention requirements.

7. Your Rights

You have the right to:

• Access and download your personal data
• Correct inaccurate information
• Request deletion of your data
• Opt-out of marketing communications
• Withdraw consent where applicable
• File complaints with data protection authorities

8. Cookies and Tracking

We use cookies and similar technologies to maintain sessions, analyze usage, and improve user experience. See our Cookie Policy for details.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from children.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the GCC, including the United States, where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

11. Policy Updates

We may update this Privacy Policy periodically. Material changes will be communicated via email or platform notification. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@dealflow.me