Privacy Policy

Account information — name, email, password (stored hashed), role (broker, buyer, tenant), and for brokers a real estate license number used for verification.

Profile and content— anything you choose to publish: profile details, photos, listings, rent rolls, closed-deal track records, comments, messages, and preferences such as a buyer's buy-box.

Usage information — standard logs and product analytics (pages viewed, actions taken, device/browser type) used to keep the service secure and improve it.

To operate the platform: showing broker storefronts and deals, delivering follows/notifications/messages, verifying broker licenses, processing payments through our payment provider, preventing abuse, and improving the product. We send transactional email (and marketing email you can opt out of).

You can optionally connect your own Airtable or Google account to import data — for example pulling a rent roll from one of your Airtable bases into a deal instead of retyping it. For these connections:

You authorize them explicitlyvia the provider's own consent screen (OAuth). We request read-only scopes — for Airtable, permission to read records and base schema. We never edit, add, or delete anything in your Airtable bases or Google Sheets.

We fetch data only when you trigger a sync.The rows you import become part of the deal you attached them to, where you can review and edit them before publishing. We don't crawl or sync your bases in the background.

Access tokens are stored server-side, are never exposed to other users or to the browser, and are used solely to perform the syncs you request.

You can disconnect at any time from the sync panel (or by revoking access in your Airtable or Google account settings). Disconnecting deletes our stored tokens for that service. Data you already imported into a deal stays with that deal until you edit or delete it.

Content you publish is visible according to its audience (public deals are public; private deals are gated). We share data with service providers who run the platform for us — hosting and database (Supabase), payments and identity verification (Stripe), maps (Google), email delivery — under their own privacy commitments. We disclose information if required by law. We do not sell personal information.

We keep your data while your account is active. You can delete your content, disconnect connected services, or ask us to delete your account entirely — email support@dealflix.ai. After a deletion request we work to these periods:

· Account, profile and published content — 30 days. Removed from the live platform immediately, purged from our systems within 30 days.
· Backups — 90 days. Backups roll off on their own schedule; deleted data is not restored from them.
· Payment and tax records — 7 years. Invoices, payouts and the figures behind them. We are required to keep these and cannot delete them on request.
· Executed NDAs — 7 years. They are a record of an agreement between two other parties, and deleting one would destroy a document either of them may need.
· Security and access logs — 12 months.
· Messages — kept for the other participant. Deleting your account removes your copy; the person you were talking to keeps theirs, the same way email works.

We may also keep what we need to resolve a dispute, enforce our agreements, or comply with the law, for as long as that reason lasts.

Data is encrypted in transit, access to production systems is restricted, and per-user authorization rules (row-level security) gate every read and write in our database. No system is perfectly secure — if we learn of a breach affecting your personal data we will notify you and, where Texas law requires it, the Attorney General, without unreasonable delay and in any event within 60 days of determining a breach occurred.

Brokers give us a mobile number during onboarding. Today we use it for one thing: security codes — the one-time passcodes that confirm it is you signing in or approving something. These are part of the service, not marketing, and they are sent to the number on your account.

We do not send marketing or promotional texts. If we ever add deal alerts by text, they will be opt-in: you will be asked first, told what you are signing up for, and able to stop at any time by replying STOP. Reply HELP for help. Message and data rates may apply.

We do not sell or share mobile numbers with anyone for their own marketing.

We use cookies that are necessary to run the site — keeping you signed in, holding your session, and remembering preferences such as which tab of your inbox you were on. Turning these off in your browser will break signing in.

We also record basic usage — pages viewed, actions taken, device and browser type — to keep the platform secure and to see what is worth improving. We do not run third-party advertising cookies and we do not use your activity here to target ads anywhere else.

Texas residents have rights under the Texas Data Privacy and Security Act, and we extend the same rights to everyone who uses Dealflix regardless of where they live. You may ask us to:

· confirm whether we process your personal data, and give you a copy of it;
· correct data that is wrong;
· delete data we hold about you;
· provide it in a portable, machine-readable form; and
· opt out of targeted advertising, the sale of personal data, or profiling with legal effects — none of which we do today.

Ask by emailing support@dealflix.ai. We respond within 45 days, and may extend once by another 45 days where a request is complex, telling you why. We may need to verify who you are before acting — usually by confirming control of the account email.

If we refuse a request, you may appeal by replying to our decision. We will decide the appeal within 60 days and explain the reasoning in writing. If we deny the appeal, you may complain to the Texas Attorney General.

We do not sell personal data as that term is defined in Texas or California law, and we do not process it for targeted advertising.

Dealflix is operated from the United States and intended for users in the United States. Our brokers are licensed in Texas and the deals here are Texas commercial real estate. We do not target the service at people in the European Economic Area or the United Kingdom, and it is not designed for the data protection regimes that apply there.

If you use Dealflix from outside the United States, you are sending your data to be processed in the United States.

Dealflix is a business platform for licensed brokers and the people who buy from them. It is not for anyone under 18, we do not knowingly collect data from children, and we delete such data if we discover it.

We may update this policy as the product evolves; material changes will be posted here with an updated date.

Questions, or a request under section 9? support@dealflix.ai, or write to Dealflix LLC, 11311 Fuqua St, Houston, TX 77089. Dealflix LLC is the controller of the personal data described here.