Privacy Policy

DealVelo ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our financial modeling platform and services (the "Service").

1. Information We Collect

1.1 Information You Provide to Us

Account Information:

• Name and email address
• Password (encrypted and never stored in plain text)
• Profile photo (optional)
• Company name and role (optional)

Financial Data:

• Deal models and acquisition structures you create
• Financial statements and documents you upload
• Company information and financial projections
• Transaction details and valuation analyses
• Notes, comments, and custom calculations

Payment Information:

• Billing name and address
• Payment card information (handled securely by Stripe - we never see your full card details)
• Transaction history and invoices

1.2 Information Collected Automatically

Usage Data:

• Pages visited and features used
• Time spent on the Service
• Click patterns and navigation paths
• Search queries within the Service

Device and Browser Information:

• IP address and geographic location (city/region level)
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Screen resolution

Technical Data:

• Error logs and crash reports
• Performance metrics
• API usage statistics

2. How We Use Your Information

We use the collected information for the following purposes:

To Provide and Improve the Service:

• Process your financial models and analyses
• Store and retrieve your data securely
• Perform calculations and generate reports
• Optimize Service performance and user experience
• Develop new features and capabilities

To Process Payments:

• Process subscription payments through Stripe
• Send receipts and billing notifications
• Manage subscription status and upgrades
• Detect and prevent payment fraud

To Communicate With You:

• Send important account notifications
• Respond to support requests and inquiries
• Provide product updates and feature announcements (if opted in)
• Send marketing communications (with your consent)

To Ensure Security and Prevent Abuse:

• Detect and prevent fraudulent activity
• Monitor for security threats
• Enforce our Terms of Service
• Investigate suspicious behavior

To Comply With Legal Obligations:

• Respond to legal requests and court orders
• Maintain records for tax and accounting purposes
• Comply with data protection regulations

3. Data Storage and Security

Where We Store Your Data:

All data is stored on Amazon Web Services (AWS) infrastructure in the United States (US-East-2 region). AWS provides industry-leading security and compliance certifications.

How We Protect Your Data:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Strict role-based access controls and authentication
• Monitoring: 24/7 security monitoring and threat detection
• Backups: Regular automated backups with point-in-time recovery
• Password Security: Passwords are hashed using industry-standard algorithms
• Infrastructure Security: AWS security groups, firewalls, and network isolation

4. Data Sharing and Third Parties

We DO NOT sell your data to third parties. Ever.

We share data only with the following trusted service providers, and only to the extent necessary to provide the Service:

Stripe (Payment Processing):

• Handles all payment card information securely
• PCI DSS Level 1 certified
• We receive only anonymized payment confirmations

Amazon Web Services (AWS) (Hosting & Infrastructure):

• Stores all application data and files
• Provides compute, storage, and database services
• Maintains SOC 2, ISO 27001, and other compliance certifications

OpenAI (AI-Powered Features):

• Processes data for AI-assisted analysis (when you use AI features)
• Data is anonymized and does not include personally identifiable information
• Does not train models on your data (per OpenAI API terms)

AWS Cognito (Authentication):

• Manages user authentication and authorization
• Stores encrypted passwords and session tokens

5. Your Rights and Choices

You have the following rights regarding your data:

Access: You can view and access all your data through your account dashboard.

Export: You can export your financial models and data in standard formats (Excel, JSON).

Update: You can update your profile information at any time in account settings.

Delete: You can request account deletion, which will permanently remove all your data (except records required by law, which we retain for 7 years for tax purposes).

Opt-Out: You can opt out of marketing emails by clicking "Unsubscribe" in any email or updating your notification preferences.

Data Portability: Upon request, we can provide your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@dealvelo.com.

6. Cookies and Tracking

We use cookies and similar technologies to:

• Essential Cookies: Remember your login session and authentication
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Understand how you use the Service to improve it

You can control cookies through your browser settings. However, disabling cookies may limit some Service functionality.

7. Data Retention

Active Accounts: We retain your data while your account is active and you continue to use the Service.

Closed Accounts: After account deletion, we permanently delete your data within 30 days, except for:

• Billing records (retained for 7 years as required by law)
• Aggregated, anonymized analytics data
• Data required for legal compliance or dispute resolution

8. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

9. International Data Transfers

Your data is stored on servers in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S. By using the Service, you consent to this transfer.

10. Compliance With Regulations

GDPR (European Users): If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to object to processing and lodge complaints with supervisory authorities.

CCPA (California Residents): California residents have the right to know what personal information is collected, request deletion, and opt out of sale (though we do not sell personal information).

CAN-SPAM Act: All marketing emails include an unsubscribe link and honor opt-out requests within 10 business days.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or through a prominent notice on the Service. Your continued use after such changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

For questions, concerns, or requests regarding your privacy and data:

Email: privacy@dealvelo.com
Support: support@dealvelo.com
Legal: legal@dealvelo.com