Legal

Privacy Policy

Last updated September 9, 2026

This policy explains what information DealReview.app collects when you use DealReview.app, why we collect it, who helps us process it, how long we keep it, and how to have it deleted.

We do not sell your personal information, and we do not use your project data to advertise to you.

Scope

This policy covers the DealReview.app website, the member workspace, client- and contractor-facing shared pages, our emails, and our partner program. It does not cover third-party sites you reach from links we provide.

Information we collect

Account information. Your name, email address, password (stored only as a secure hash), and any staff members or collaborators you invite.

Project and deal data. Everything you enter about properties and projects: addresses, purchase and rehab figures, comparable sales, budgets and expenses, tasks, timelines, notes, vendor and contact records, lender quotes and financing scenarios, and your branding settings.

Files you upload. Documents, receipts, and project photos or videos, plus your logo if you use Custom Branding.

Billing information. Subscription status, plan, and invoice history. Payments are processed by Stripe — we never receive or store your full card number.

Demo and marketing contacts. If you request an interactive demo or ask to be notified about launch, we store your email address, whether you opted in to emails, and basic timestamps. Entries you make inside the interactive demo are not saved.

Support messages. The contents of support tickets, contact-form messages, and replies.

Partner program data. If you apply to be a partner: your name, email, website, audience description, referral code, referred subscriptions, commissions, and payout records.

Technical and usage data. IP address, browser and device information, pages viewed, referring page, and error/diagnostic logs. This is used to keep the Service secure and working.

How we use information

to provide, operate, and secure your workspace;
to process subscriptions, add-ons, and partner payouts;
to send account, billing, and transactional emails;
to answer support requests;
to generate the reports, estimates, and shared pages you ask for;
to detect abuse, fraud, and technical problems;
to improve the product in aggregate; and
to send marketing emails only where you opted in.

Service providers we use

We rely on a small set of providers who process data on our behalf under their own security and privacy commitments:

application hosting and content delivery;
managed database, authentication, and file storage;
Stripe for payments, subscriptions, and partner payouts;
an email delivery provider for transactional and opted-in marketing email;
a property-data provider for market and rent estimates;
AI providers for the features described below.

These providers may store data in the United States. We do not authorize them to use your data for their own purposes.

AI features

Some features — deal import from spreadsheets or PDFs, scope suggestions, and market commentary — send the relevant content you provide to an AI provider to produce a result. We do not authorize providers to train models on your content, and we send only what the feature needs. AI output is an estimate and may be wrong; see our Terms of Service.

Cookies and referral tracking

We use cookies and similar browser storage to keep you signed in, remember preferences, and keep the site secure. These are necessary for the Service to work.

If you arrive through a partner referral link, we store a referral identifier for up to 90 days so the partner can be credited if you subscribe. You can clear it by clearing your browser storage.

Email and marketing

Account, billing, security, and support emails are part of the Service and are sent as needed. Marketing emails are sent only if you opted in, and every one has an unsubscribe link. You can also unsubscribe here or turn off notification emails in your workspace.

How long we keep data

Active accounts: for as long as your account exists.
Deleted accounts: removed immediately from live systems; encrypted backups are purged within 30 days.
Billing and tax records: retained as long as tax and accounting law requires, typically seven years.
Email delivery and suppression logs: retained so we don't email addresses that unsubscribed or bounced.
Demo and notify-me contacts: removed on request, or when no longer needed.

Data deletion policy

You can delete your account yourself. In your workspace, open Account and use Delete my account. You will be asked to type a confirmation because the action cannot be undone.

Deletion permanently removes:

every project you own, with its comps, budgets, expenses, scope, and financing data;
tasks, updates, notes, contacts, and vendor records;
uploaded documents, receipts, photos, and videos in file storage;
your branding settings and uploaded logos;
analysis templates, notification preferences, and your profile;
any share links you created; and
your login itself, so the email can no longer sign in.

Any active subscription is cancelled as part of the process. Live data is removed immediately and encrypted backups are purged within 30 days. We retain only what law requires — chiefly invoice and tax records held by us and by Stripe — plus a suppression record of your email address if it unsubscribed or bounced, so we do not contact you again.

If you cannot sign in, email support@dealreview.app from the address on the account and ask for deletion. We will verify the request and complete it within 30 days.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent for marketing. You can do most of this directly in the app — edit your data, export reports and QuickBooks-ready expense files, and delete your account — or ask us at support@dealreview.app. We will not discriminate against you for exercising these rights.

Security

Data is encrypted in transit and at rest by our hosting and storage providers. Access to your workspace requires authentication, database access rules restrict records to the accounts allowed to see them, uploaded files are served through short-lived signed links, and payment card data never touches our systems. No system is perfectly secure, so please use a strong, unique password.