Privacy policy

DealHero LLC (“DealHero”, “we”, “us”) provides DealHero, a customer relationship management service for real estate investors, wholesalers, agents and their teams, at dealheroapp.com and app.dealheroapp.com (the “Service”). This policy explains what we collect, how we use it, who we share it with, and your choices.

Our customers (“you”) add information about other people, such as property owners, sellers, buyers and title contacts. For that information, you decide what is collected and why, and we process it on your behalf under our Terms of Service.

Information we collect

• Account information: name, email, password (stored hashed by our authentication provider), company and workspace name, role, and team invitations.
• Content you add: properties, deals, contacts, notes, tasks, files, photos, contract templates, generated documents, and anything you import from spreadsheets or other tools.
• Communications: emails, text messages and calls you send, receive or log through the Service, including message content, phone numbers, delivery status, call duration and outcomes, and, if you turn it on, call recordings.
• Billing: plan, subscription status and invoices. Card details are collected and stored by Stripe; we never see or store full card numbers.
• Connected services: the information described below when you connect Google, Microsoft, DocuSign or other services.
• Usage and device data: log data, IP address, browser type, pages used, and error reports, used to run, secure and improve the Service.
• Support: messages you send to [email protected] and your ticket history.

How we use information

• To provide the Service: store and show your deals, send the emails and texts you ask us to send, place and log calls, generate documents and run automations you set up.
• To bill you, prevent fraud and abuse, and keep accounts secure.
• To send service emails such as sign-in links, trial reminders, receipts, security notices and support replies. Product tips can be turned off at any time.
• To respond to support requests and improve the Service, using aggregated or de-identified usage data where possible.
• To comply with law and enforce our terms.

We do not sell personal information, and we do not use your content or your contacts’ information to advertise to them or to anyone else.

Google user data

Connecting Google is optional. If you connect Gmail, Google Calendar or Google Drive, we request only the access needed for the features you turn on: sending and syncing email from your account, creating calendar events for deal deadlines, and saving or opening documents you choose.

DealHero’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the user-facing features you enabled; we do not use it for advertising; we do not sell it; we do not use it to train generalized AI or machine-learning models; and no person reads it except with your permission, for security purposes, to comply with law, or as part of aggregated, anonymized operations. You can disconnect Google at any time in Connections or in your Google account settings, and we delete the stored tokens.

Microsoft, DocuSign and other connections

If you connect Outlook, DocuSign or another service, we receive only what that connection needs (for example, sending email from your mailbox or sending a document for signature) and use it only to provide that feature. You can disconnect at any time.

Texting and calling

Text messages and calls are carried by our telecommunications provider, Twilio. We store message content, numbers, timestamps, delivery status and call details so they appear on your deals. Recipients can reply STOP to opt out of texts; we honor opt-outs across your workspace. You are responsible for having the consent required by law before texting or calling anyone, including under the TCPA and carrier rules. Calls are recorded only if you turn recording on, and you are responsible for giving any notice or getting any consent your state requires.

Who we share information with

We share information only with service providers who help us run the Service, under agreements that limit their use of it:

• Supabase (database, authentication and file storage)
• Stripe (payments)
• Twilio (texting and calling)
• Resend and Postmark (email delivery and support email)
• Cloudflare (hosting, security and email routing)
• Google, Microsoft and DocuSign, only when you connect them
• AI model providers, only for AI features you use, and only the data needed for that request

We may also disclose information to comply with law or a valid legal request, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.

Workspaces and teams

Information in a workspace is visible to members of that workspace according to the roles the workspace owner sets. Workspace owners and admins can invite and remove members, export data and delete the workspace.

Retention and deletion

We keep your information while your account is active. If you cancel, your data stays available for 30 days so you can reactivate or export it; after that, the workspace owner can ask us to delete it and we delete it within 30 days, except where we must keep records (such as invoices) by law. Backups are overwritten on a rolling schedule. You can export your deals and contacts as CSV at any time.

Security

Data is encrypted in transit and at rest by our providers. Each workspace’s data is isolated by database-level access rules, passwords are hashed, and connection tokens are stored on the server and never sent back to the browser. No system is perfectly secure; if a breach affects your information, we will notify you as required by law.

Your choices and rights

You can view, edit, export or delete your content in the Service, change email preferences, and disconnect integrations. Depending on where you live, you may have the right to access, correct, delete or get a copy of your personal information, and to opt out of certain uses. To make a request, email [email protected]. If you are a contact of one of our customers and want your information changed or removed, please contact that customer directly; we will help them respond.

Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes

We will post changes here and update the effective date. If a change is significant, we will notify account owners by email before it takes effect.

Contact

DealHero LLC · Arizona, USA · [email protected]