Privacy Policy

Information you give us

• Account details — name, email address, and the password you set (stored only as a hash we never see in plaintext). Optionally your company, phone number, and the role you work in.
• Business preferences — the counties you work, and, for buyers, your buy box: price range, property types, and criteria used to match you to listings.
• Deal content — listings you publish, offers you send or receive, contacts and pipeline notes you create, and saved lists you build.
• Uploaded documents — executed contracts and proof-of-funds letters. These are stored in private buckets and are never publicly readable; proof of funds is shared only with the counterparty of that specific offer, through short-lived signed links.
• Verification information — for buyer verification, the county you buy in and the entity names you take title under, which we match against public deed records.

Information collected automatically

Standard server and security logs: IP address, browser and device type, pages requested, and timestamps. We keep an activity record of actions taken in your account (for example, publishing a listing or responding to an offer) so you and we can audit what happened.

Payment information

Card details go directly to Stripe and are never transmitted through or stored on our servers. We retain only Stripe’s identifiers for your customer and subscription, your plan, and its status and renewal dates. Stripe’s handling of your payment data is governed by Stripe’s own privacy policy.

Public records data

DealDesk includes property and ownership records published by Florida counties through the Florida Department of Revenue. That information is public record and is not collected from you. If a property you own appears in the data and you believe a record is wrong, the county property appraiser’s office is the authoritative place to correct it; corrections flow to us when the county republishes its roll.

How we use information

• to operate your account and provide the features you pay for;
• to match buyers and listings according to the buy box you configure;
• to send transactional messages — offer activity, matches, account and billing notices — according to your notification preferences;
• to verify buyers against public deed records when they apply;
• to secure the platform, prevent fraud and abuse, and enforce our terms;
• to meet legal and accounting obligations.

We do not sell your personal information, and we do not use your private deal economics — contract prices or assignment fees — for anything beyond running your account.

What other users can see

When you publish a listing, other signed-in users see the property, its public marketing details, and your display name. They never see your contract price, your assignment fee, your access instructions, or your uploaded contract. When you make an offer, the listing owner sees your name, verification status, and the terms of your offer.

Service providers

We share data only with providers that process it on our behalf, under contract:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and request logs.
• Stripe — payment processing and subscription billing.
• Mapbox — map rendering. Map views request tiles from Mapbox, which receives the map area being viewed.
• Resend — delivery of transactional email, once enabled on the account.

We may also disclose information if required by law, to protect our rights or someone’s safety, or in connection with a merger or acquisition — in which case this policy travels with the data.

Security

Data is encrypted in transit. Database access is constrained by row-level security so one account cannot read another’s records, uploaded documents live in private buckets reachable only through expiring signed links, and administrative functions are separately authenticated. No system is perfectly secure, but we design for the assumption that a boundary will be tested.

Retention

We keep account data while your account is active. After you close it, we delete or anonymize personal data within 90 days, except records we must retain for tax, accounting, or legal purposes. Public records data is retained independently of any account.

Your choices

• Update your profile, markets, and notification preferences any time in Settings.
• Cancel your subscription from Billing; access continues to the end of the paid period.
• Request a copy of your data, a correction, or deletion of your account by emailing support@dealdeskrei.com. We respond within 30 days.
• Transactional email tied to your account activity can be turned off in Settings; essential billing and security notices cannot, while your account is open.

Cookies

We use cookies that are strictly necessary to run the product: the session cookie that keeps you signed in and a preference cookie that remembers light or dark mode. We do not run advertising or cross-site tracking cookies.

Children

DealDesk is a business tool for adults. It is not directed to anyone under 18, and we do not knowingly collect their information.

Changes and contact

If we make a material change to this policy, we will notify you in the product or by email before it takes effect. Questions, requests, or concerns: support@dealdeskrei.com. See also our Terms of Service.