Privacy Policy

We act as the controller of account, billing, website, and support information. For CRM, contact, and email data that a customer connects to Dealpilot, the customer generally determines the purpose of the processing and Dealpilot processes the data on its instructions.

• Account details such as name, email address, login method, and password hash.
• Workspace, team member, invitation, and subscription information.
• Connected CRM data, including companies, contacts, deals, tasks, and activities.
• Email data used by a cadence, including sender and recipient details, subject, body, thread history, and attachment metadata.
• Integration credentials and tokens, stored in encrypted form.
• Security and usage information such as IP address, device information, session records, and audit logs.
• Email delivery and engagement events, including opens, clicked links, time, IP address, and user agent.
• Billing identifiers and subscription status received from Polar. We do not store full payment card details.

We use information to provide and secure Dealpilot, connect requested integrations, run cadences, send and log messages, process billing, provide support, troubleshoot errors, prevent abuse, and comply with legal obligations. We do not sell personal information or use customer contact data for advertising.

HTML cadence emails may contain an open pixel and tracked links. These features record delivery and engagement events so workspace users can understand whether a follow-up was opened or clicked. Customers are responsible for using these features lawfully and informing recipients where required.

We use service providers only where needed to operate Dealpilot. The main application and database are hosted by Contabo at its Hub Europe data center in Lauterbourg, France. Other providers may process limited information in the United States or globally.

We retain information while an account is active and for as long as reasonably needed to provide the service, meet legal obligations, and resolve disputes. Temporary outbound attachment files are normally removed within 24 hours, while related metadata and message history may remain. Disconnecting an integration does not automatically delete previously synchronized records. You may request deletion by contacting us.

We use measures designed to protect information, including encrypted transport, password hashing, encrypted integration credentials, access controls, and security logging. No system is completely secure, and we cannot guarantee absolute security.

The application uses an essential session cookie to keep users signed in and protect account access. We do not currently use advertising cookies on the marketing site.

Depending on applicable law, you may request access, correction, deletion, restriction, or a copy of your personal information. We may need to verify your identity and may retain information where required by law. Workspace data requests should normally be made through the organization that controls the workspace.

Dealpilot is a business service and is not intended for children under 18. We do not knowingly collect personal information from children.

The privacy officer is Dongyun Lee. Privacy questions and rights requests may be sent to support@dealpilot.dev. We may update this policy and will show the latest revision date above.