Privacy Policy

1. Introduction

DealRoute Inc., a Delaware C-Corp (“DealRoute,” “we,” “us,” or “our”), operates an AI-powered real estate wholesaling platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and related services (collectively, the “Service”).

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use the Service.

2. Information We Collect

We collect the following categories of information, as governed by the Delaware Personal Data Privacy Act (Title 6, Chapter 12D of the Delaware Code):

• Account Information: Name, email address, phone number, and credentials you provide when creating an account.
• Property Data: Real estate property information, owner details, and related records processed through the platform.
• Conversation Logs: Records of AI-assisted communications including voice calls, SMS messages, emails, and chat interactions conducted through the Service.
• Usage Analytics: Information about how you interact with the platform, including pages visited, features used, timestamps, and device information.
• Payment Information: Billing details processed through our payment provider (we do not store full payment card numbers).

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Power AI-driven lead analysis, scoring, and enrichment.
• Facilitate automated and AI-assisted communications on your behalf.
• Process transactions and send related billing information.
• Send administrative notifications, updates, and security alerts.
• Monitor and analyze usage trends to improve the user experience.
• Detect, prevent, and address technical issues, fraud, or abuse.

4. Third-Party Services

We use the following third-party services to operate the platform. Each processes data in accordance with their own privacy policies:

• Supabase — Database hosting and authentication.
• Stripe — Payment processing.
• Google Analytics (GA4) — Website usage analytics.
• Twilio — SMS messaging and voice communication services.
• OpenAI — AI-powered voice conversation and text processing.
• Postmark — Transactional and marketing email delivery.
• Lob — Direct mail delivery.
• Google Calendar (optional, only when you connect it) — Two-way calendar synchronization with your DealRoute schedule.

We do not sell your personal information to third parties.

Google Calendar Integration (Optional)

If you choose to connect your Google Calendar to DealRoute via the Settings → Integrations page, we request the calendar.events and calendar.readonly OAuth scopes. We use these scopes solely to:

• Display your existing calendar commitments alongside DealRoute callbacks on the Schedule view, so you don’t double-book.
• Push DealRoute-managed callback events (e.g., AI-scheduled property visits, signing appointments) to your Google Calendar so they sync to your phone and other devices.

Data we read: event summaries, start/end times, and attendee lists for events on your primary calendar within a rolling 90-day window. We do not read event descriptions, attachments, or events on calendars you have not granted access to.

Data we write: only DealRoute-created callback events. We do not modify or delete events DealRoute did not create.

Storage:Synced events are cached in our Supabase database under your tenant’s row-level-security boundary. The cache is purged within 24 hours of you disconnecting Google Calendar from Settings → Integrations.

No sharing, no AI training, no sale:Calendar data is never shared with third parties, never used for AI model training, and never sold. Calendar data is never combined with other tenants’ data.

Disconnect anytime: You can disconnect at Settings → Integrations within DealRoute, or by revoking access at https://myaccount.google.com/permissions.

DealRoute’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Retention

We retain your account data and associated records for as long as your account is active and as needed to provide the Service. If you close your account, we will retain your data for 30 days following cancellation, after which it will be permanently deleted unless we are required by law to retain it for a longer period.

6. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Delete: Request that we delete your personal data, subject to certain exceptions.
• Right to Opt Out: Opt out of certain data processing activities, including the sale of personal information (we do not sell personal information).
• Right to Correct: Request correction of inaccurate personal data.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at contact@dealroute.ai. We will respond to verifiable requests within 45 days.

7. International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you may have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Restrict Processing: Request that we limit the processing of your personal data under certain circumstances.
• Right to Object: Object to processing of your personal data for direct marketing or based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Our legal basis for processing personal data includes: performance of a contract (providing the Service), legitimate interests (improving the Service, fraud prevention), and consent (where explicitly obtained). We do not currently target EU residents, but we respect GDPR rights for any EU visitors or users. To exercise these rights, contact us at contact@dealroute.ai.

8. Cookies and Tracking

We use cookies for authentication session management and website analytics. We do not use third-party advertising cookies or cross-site tracking technologies.

• Essential Cookies: Required for the Service to function, including authentication sessions and remembering your cookie preferences. Cannot be disabled.
• Analytics Cookies: We use Google Analytics (GA4) to understand how visitors interact with our website. GA4 may set cookies to distinguish unique users and track session information. These cookies collect anonymized usage data and do not identify you personally. Analytics cookies are set only with your consent.

When you first visit the site we ask for your consent to set analytics cookies. You can change your choice at any time via the “Cookie preferences” link in the site footer. We also respect the browser Do Not Track signal as a request to disable analytics cookies.

9. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we have inadvertently collected such information, please contact us at contact@dealroute.ai.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at the address associated with your account and update the “Effective Date” at the top of this page. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: