Home

Legal

Privacy notice

This notice explains how the operator of Deal Preflight collects, uses, discloses, stores, and protects personal data. Effective 4 September 2026.

1. Scope and who is responsible

This notice applies to the Deal Preflight website, accounts, listing analysis, report purchases, report sharing, transactional email, and support. The operator of Deal Preflight is responsible for personal data under its control. For privacy questions or requests, contact the Deal Preflight data-protection contact through the support page.

2. Information we collect

  • Email address, authentication events, account identifier, and security records.
  • Listing links and text, deal names, financial and operating inputs, evidence selections, source excerpts, generated reports, and share-link records.
  • Payment references, purchased credits, amount, currency, fulfilment status, and related transaction records. Deal Preflight does not receive or store your full card number.
  • Product events such as starting or completing an analysis, entering checkout, generating a report, copying questions, or sharing a report.
  • Support messages, contact details you provide, and technical information reasonably needed to diagnose a problem.

3. Where information comes from

Information comes directly from you, from public listing pages you ask Deal Preflight to import, from authentication and payment providers, and from normal operation of the service. Do not submit information obtained unlawfully or information you are not authorized to process.

4. Why we use information

We use information only for purposes reasonably connected with operating Deal Preflight, including to:

  • create and secure accounts, authenticate users, and prevent misuse;
  • import listings, calculate previews, generate reports, and save work;
  • process purchases, grant credits, prevent duplicate fulfilment, and maintain transaction records;
  • send requested magic links, receipts, report-ready messages, and service notices;
  • provide support, investigate errors, monitor reliability, and improve the product flow;
  • comply with applicable law, enforce the Terms, and protect users, Deal Preflight, and others.

Deal Preflight does not sell personal data or share it for cross-context behavioural advertising. If we introduce a materially different use, we will provide notice and obtain consent where required.

5. Legal bases

Where a legal basis is required, we process account, analysis, report, and purchase data to perform our contract with you; security, support, reliability, and limited product analytics for our legitimate interests; transaction or compliance records to meet legal obligations; and data based on consent where we specifically ask for it. You may withdraw consent at any time, without affecting earlier lawful processing.

6. Service providers and overseas processing

Deal Preflight uses Supabase for authentication and database storage, Vercel for hosting, Stripe for checkout, OpenAI for structured extraction and report narrative, and Resend for transactional email. These providers process information needed for their role and may do so outside Singapore. We use reputable providers and take reasonable steps intended to ensure that transferred personal data receives a standard of protection comparable to applicable requirements, including contractual or other approved safeguards where required. You may ask us for information about applicable transfer safeguards.

7. AI processing and decisions

Listing text, structured deal inputs, source excerpts, calculations, and evidence choices may be sent to OpenAI to extract seller-stated information or draft a fact-constrained report. AI output can be incomplete or wrong. Avoid submitting unnecessary personal data, sensitive data, passwords, authentication codes, banking credentials, or confidential documents that you are not permitted to process. Scores and reports assist your own review. We do not use them to make decisions that produce legal or similarly significant effects about you.

8. Payments

Stripe collects and processes card and billing details under its own terms and privacy notice. Deal Preflight receives limited checkout and payment information needed to fulfil credits, issue receipts, handle disputes, and prevent duplicate fulfilment.

9. Cookies, authentication, and analytics

Deal Preflight uses essential browser storage and cookies to maintain authentication, security, and the requested workflow. Product events are recorded to understand whether core steps work and to diagnose failures. Deal Preflight does not currently use third-party advertising cookies or sell behaviour profiles.

10. Sharing and confidentiality

Deals and reports are private to the signed-in account by default. If you create a private report link, anyone who obtains that link may be able to view the shared report. Share it only with intended recipients. Deal Preflight does not make seller material confidential merely because it was uploaded. You remain responsible for complying with any NDA, marketplace rule, or confidentiality obligation that applies to you.

11. Security and incidents

We use reasonable administrative and technical safeguards, including access controls, private account ownership rules, signed payment webhooks, and restricted service credentials. No online system is completely secure. If a reportable data incident occurs, we will assess and make notifications required by applicable law.

12. Retention

We retain information only while reasonably needed to provide and secure the service, maintain credit and transaction integrity, resolve disputes, meet legal or accounting requirements, and establish or defend claims. Different records may have different retention periods. We will delete or anonymize personal data when it is no longer needed, subject to backups and records we must retain.

13. Your privacy rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection to processing; withdraw consent; or complain to your local data-protection regulator. Applicable rights may differ and lawful exceptions may apply. We will not discriminate against you for exercising an applicable privacy right. Use the support page and provide enough information to verify your account and request. Withdrawal or deletion may prevent us from continuing some services. We may retain information where permitted or required and may decline a request where an applicable exception applies.

14. Children

Deal Preflight is intended for adults evaluating business acquisitions and is not directed to children. Do not use the service if you are under 18.

15. Changes and contact

We may update this notice as the service or legal requirements change. The effective date will be updated when material changes are published. Send privacy questions, complaints, or requests through the Deal Preflight support page.