Privacy Policy

DeelFlow is an AI-powered negotiation, contract, procurement, and relationship management platform. For privacy questions or to exercise your rights, contact us at privacy@deelflow.dev.

• Account data — email address, password (stored only as a salted hash by our authentication provider), and display name.
• Company & negotiation data — company profiles, deal briefs, offers, contracts, and messages you create in the product.
• Counterparty invitation data — email addresses and company names you enter to invite the other side of a negotiation.
• Usage & technical data — IP address, browser type, device information, and log/diagnostic data needed to operate and secure the service.

• To provide, maintain, and improve the platform and its AI negotiation features.
• To authenticate you and keep your account and data secure.
• To send transactional emails (invitations, verification, notifications).
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal data.

Where the GDPR applies, we process personal data on the bases of contract performance (to provide the service), legitimate interests (to secure and improve the service), consent (where required, e.g. certain cookies), and legal obligation.

• Supabase — authentication and database hosting.
• Vercel — application hosting and content delivery.
• Resend — transactional email delivery.
• DeepSeek — AI model inference used to generate negotiation suggestions. Private brief content may be sent to the model to produce responses; it is not used to train third-party models on your behalf.

We retain personal data for as long as your account is active or as needed to provide the service. You may request deletion of your account and associated data at any time by contacting us.

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, email privacy@deelflow.dev. You also have the right to lodge a complaint with your local data protection authority.

Data is encrypted in transit (HTTPS/TLS). Access is protected by authentication and row-level security so you can only access negotiations you are a participant in. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your data.

We use strictly necessary cookies and local storage to keep you signed in. See our Cookie Policy for details.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.