Privacy Policy

This Privacy Policy describes how Deal Cues ("Deal Cues," "we," "us," or "our") collects, uses, and handles information when you use our buyer-side acquisition underwriting platform. By using Deal Cues, you agree to the practices described here. If you have questions, contact us at support@dealcues.com.

1. Information We Collect

We collect the following categories of information:

• Account information: Name, email address, password (stored as a secure hash), company name, and the date and IP address of Terms acceptance.
• Billing information: Subscription status, plan type, credit balances, and payment history. Full payment card details are handled entirely by Stripe — we do not store card numbers on our servers.
• Deal data: Business names, asking prices, financial figures, add-back claims, DSCR values, notes, and other deal-related information you enter or import into the platform.
• Uploaded documents: CIMs, tax returns, financial statements, contracts, and any other files you upload for document extraction and analysis.
• Listing and deal text: Listing descriptions or other text you paste or import as deal inputs.
• Usage and log data: Pages visited, features used, browser type, IP address, timestamps, and error logs. We use this to operate and improve the service.
• Deal Coach interactions: Questions and responses within the Deal Coach AI feature, associated with your account and deal.

2. How We Use Your Information

We use your information to:

• Provide and operate the Deal Cues service, including generating reports and underwriting outputs
• Process document uploads and run automated extraction
• Power Deal Coach AI responses
• Manage your billing, credits, and subscription via Stripe
• Send transactional emails (email verification, billing receipts, support)
• Detect and prevent fraud, abuse, and unauthorized access
• Improve the platform (aggregated and anonymized usage analysis)
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your deal data to train shared AI models without your explicit consent.

3. Uploaded Documents

Documents you upload to Deal Cues (CIMs, financials, contracts, tax returns, etc.) are stored encrypted at rest and are processed using automated extraction tools to support your deal analysis. Extraction may be imperfect, incomplete, or incorrect — review extracted data before relying on it.

By uploading a document, you represent that you are legally authorized to share it with a third-party software provider. Do not upload documents that are subject to confidentiality restrictions you cannot waive, or documents you do not have the right to share.

You can delete any deal and its associated documents from your account settings at any time.

4. AI and Automated Processing

Deal Cues uses AI and automation to extract data from documents, generate underwriting estimates, power Deal Coach responses, and produce LOI drafts. Deal text, uploaded documents, and your Deal Coach questions may be processed by AI service providers under confidentiality agreements. We do not guarantee that AI outputs are accurate, complete, or appropriate for your use case. Consult qualified professionals before acting on any AI-generated output.

5. Payment Processing

Payments are processed by Stripe. When you make a purchase, you provide payment information directly to Stripe. Deal Cues does not store or have access to your full credit card number, CVV, or bank account details. We receive limited payment metadata (last four digits, card type, payment status) to manage your billing state. Stripe's use of your payment data is governed by Stripe's Privacy Policy.

6. Sharing Your Information

We share information only in the following circumstances:

• Service providers: We share data with vendors who help us operate the service (cloud hosting, email delivery, AI processing, payment processing, error monitoring). These providers are bound by confidentiality obligations and may only use data to provide services to us.
• Legal compliance: We may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of Deal Cues or others.
• Business transfers: If Deal Cues is acquired, merged, or undergoes a sale of assets, your information may be transferred to the successor entity. We will notify you if this occurs.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

7. Data Retention

We retain your account information and deal data for as long as your account is active and for a reasonable period thereafter for legal, operational, and dispute resolution purposes. If you request account deletion, we will delete your personal data within 30 days, subject to applicable legal retention requirements. Contact support@dealcues.com to request deletion.

8. Security

We implement reasonable technical and organizational safeguards to protect your information, including encryption at rest, access controls, and secure authentication. However, no internet-based service can guarantee perfect security. You are responsible for keeping your login credentials confidential. If you believe your account has been compromised, contact us immediately.

9. Your Rights and Choices

You may access, update, or delete information in your account settings. For data deletion requests or questions about your rights, contact support@dealcues.com. Depending on your jurisdiction, you may have additional rights (such as GDPR or CCPA rights). These jurisdiction-specific rights and obligations should be confirmed with qualified legal counsel.

10. Children

Deal Cues is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us and we will remove it.

11. Contact

Questions about this Privacy Policy? Email us at support@dealcues.com.

Effective date: May 16, 2026.