Privacy Notice

Deal Bar is operated by Josepha Edman ("we", "us"), who is the data controller for the personal data described in this notice. This means we decide how and why your personal data is processed.

1. Data we collect

• Account and profile data: your name, email address, login credentials, phone and WhatsApp numbers, brokerage name, broker licence number, profile photo and brokerage logo.
• Content you add: project details, images, brochures and videos, investor names and contact details, and the proposals you create.
• Support messages: anything you send us when you ask for help.
• Usage and device data: IP address, device identifiers, and telemetry about how you use the app.

Payment card details are collected and processed directly by Paddle, our Merchant of Record; we never see or store your card number.

2. Why we use it and our legal basis

• To create your account and provide the service (storing your projects, generating and sharing proposals) — performance of our contract with you.
• Security and fraud prevention — our legitimate interests.
• Product improvement (understanding how features are used) — our legitimate interests.
• Customer support — performance of our contract and legitimate interests.
• Marketing (occasional product news you can opt out of) — consent or legitimate interests, depending on your location.
• Meeting legal obligations (for example tax records) — legal obligation.

3. Who we share it with

• Service providers that help us run Deal Bar: hosting and database infrastructure, analytics, and support tooling. They may only process data on our instructions.
• Paddle, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

When you share a proposal link, the investor you send it to can view that proposal's content. Proposal links are unguessable and not listed anywhere public.

4. International transfers

Some of our service providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

5. Retention

We keep your data while your account is active and for a reasonable period afterwards so you can export it or reactivate. When data is no longer needed, we delete or anonymise it, except where the law requires us to keep it longer (for example tax records).

6. Your rights

Depending on your location, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time. If you are in the UK/EEA, you also have the right to complain to your supervisory authority. We respond to requests within one month. To exercise any of these rights, contact us through the support details shown in the app or on your Paddle receipt.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level isolation so each agent can only see their own data.

8. Cookies

Deal Bar uses essential cookies and browser storage to keep you signed in and remember your preferences. We do not use advertising cookies. If we add analytics or marketing cookies in the future, we will ask for your consent first. You can clear cookies at any time in your browser settings, though signing in will stop working without the essential ones.

9. Changes

If we change this notice, we will update the date at the top and, for significant changes, let you know in the app.