Privacy Policy

Scope

This Privacy Policy explains how Deal Todo collects, uses, shares, and protects information when you use our website and Deal workspace. Deal Todo helps you turn authorized client conversation text into a current Todo list with source-backed suggestions.

Information We Collect

We process the minimum information needed to operate the service:

1. Google account information — your name, email address, profile image, account identifier, and authentication session. Deal Todo does not offer direct email/password registration.
2. Deal content — Deal names, pasted transcripts or notes, generated Todos and suggestions, source quotes, review decisions, processing status, and related timestamps.
3. Billing records — plan, order, subscription, invoice, payment status, and credit history. Creem processes payment-card details; Deal Todo does not store full card numbers.
4. Support information — messages, attachments, and replies you submit through support.
5. Technical and usage information — IP-derived country, region, and city; browser and device category; referring source or campaign; pages viewed and interactions; security and error logs; cookies needed for authentication and preferences; and usage analytics when Google Analytics or Microsoft Clarity is enabled. Analytics reports are aggregated and are not sent Deal content, transcripts, source quotes, names, or email addresses.

Audio upload is available as the primary Deal input. Recordings you are authorized to process may be stored privately, transcribed through the configured speech-to-text and AI services, and made available only through access-controlled links. Pasted text remains available as a fallback.

How We Use Information

We use information to:

• authenticate your account and keep Deals separated by owner;
• process one submitted material at a time and generate or update source-backed Todos;
• preserve your manual edits, completions, deletions, and suggestion decisions;
• administer daily free processing, paid credits, subscriptions, and payment fulfillment;
• provide support, investigate failures, prevent abuse, and secure the service;
• measure product reliability and improve the workflow; and
• comply with legal obligations and enforce our Terms of Service.

AI Processing

Deal material is sent to the administrator-configured OpenRouter/OpenAI-compatible service only to produce the requested Todo analysis. Deal Todo does not use your Deal material to train its own models. AI output can be inaccurate, so the product keeps source quotes and requires you to review suggested changes.

Service Providers and Sharing

We do not sell personal information. We share information only as needed with service providers that operate the product, including:

• Google for authentication and, when enabled, Google Analytics usage measurement;
• OpenRouter and the selected model provider for requested AI processing;
• PostgreSQL hosting and, when configured, private Cloudflare R2/S3-compatible storage;
• Creem for checkout, subscription, invoice, fraud, and payment processing;
• Resend or another configured email provider for support notifications; and
• Vercel and, when enabled, Microsoft Clarity for hosting, diagnostics, and product analytics.

We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

Retention and Deletion

Deal content remains available until you delete the Deal or request account deletion, except where limited records must be retained for security, payment, fraud-prevention, or legal obligations. Deleting a Deal permanently removes its Todos, materials, and suggestions from the active product. Payment and accounting records may be retained for the period required by applicable law and provider obligations.

You can request deletion of a Deal and its materials, or closure and deletion of your account, through the support area or by emailing support@dealtodoflow.com. We may verify account ownership before acting. Provider backups and logs may expire on their normal restricted schedules after deletion from the active service.

Security

We use HTTPS, authenticated access controls, owner-scoped database queries, private provider credentials, and payment-webhook verification. No online system is completely secure; please contact us promptly if you believe your account or Deal data has been compromised.

Your Choices and Rights

Depending on where you live, you may have rights to access, correct, export, restrict, object to, or delete personal information. You may also disable non-essential analytics through available browser or consent controls. Contact us to exercise these rights.

International Processing and Children

Our providers may process information in countries other than yours. By using the service, you understand that appropriate provider and contractual safeguards may apply to these transfers. Deal Todo is intended for business users and is not directed to children under 13.

Changes and Contact

We may update this policy as the product or legal requirements change. We will update the date above and provide additional notice when required.

Questions or privacy requests: support@dealtodoflow.com.