Privacy Policy

If you connect Gmail, Outlook, or an IMAP or SMTP-based email service, we may process the connected email address, provider account identifiers, encrypted authentication tokens, sender and recipient details, subject lines, message bodies, thread information, and operational sync logs.

Connected email data is used only to provide the features you enable, such as authentication, syncing, conversation display, reply workflows, templates, and CRM association.

We use information to create and operate workspaces, authenticate users, manage leads and bookings, maintain team inbox functionality, support forms, enforce billing, prevent abuse, troubleshoot problems, and communicate service-related notices.

We may also process information to protect the security and integrity of DealPilot, comply with legal obligations, and resolve disputes.

We may use third-party providers that support infrastructure, hosting, authentication, email connectivity, worker execution, and related operational services.

We do not sell your personal information. We may disclose information when required by law, to protect rights or safety, or to maintain the security and integrity of the service.

Your information may be transferred to and processed outside your country in connection with the operation of DealPilot.

We currently use Supabase, Inc. in the United States (California, AWS us-west-1) for database storage and related infrastructure, Vercel Inc. in the United States and its global infrastructure for application hosting and delivery, and Koyeb SAS in San Francisco, United States for worker execution, email synchronization, and operational processing.

These transfers may occur on a continuous basis over the network when you use the service. We take steps intended to apply appropriate safeguards where required by applicable law.

We retain account information for as long as your account remains active. Workspace and team data are retained until the workspace is deleted, unless a longer retention period is required by law.

Lead records may remain in a trash state for up to thirty days before permanent removal. If a workspace payment fails and remains unresolved for seven days, the affected workspace and team data may be deleted.

Deleting an email integration does not automatically delete email records already stored in the workspace. Those records remain unless they are separately deleted or the workspace itself is deleted.

We use reasonable administrative, technical, and organizational measures to protect the information we process. Authentication tokens used for supported email integrations may be stored in encrypted form.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to the processing of your personal information.

You may submit privacy-related requests to support@dealpilot.dev, and we will handle requests in accordance with applicable law.

DealPilot is not intended for children, and it should not be used to knowingly collect personal information from children in violation of applicable law.

We may update this Privacy Policy from time to time. If material changes are made, we will post the revised version with a new effective date on this page.