Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account information: Name, email address, password, company name (if applicable), and billing information.
• Profile information: Profile picture, job title, industry, and preferences you choose to provide.
• Negotiation data: Proposals, counter-offers, messages, documents, and other content you create or upload during negotiations.
• Communication data: Feedback, support requests, and correspondence you send to us.

1.2 Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, device identifiers, pages visited, time spent on pages, and navigation patterns.
• Log data: Server access logs, error logs, and performance data collected automatically when you use the Service.
• Cookies and tracking technologies: See Section 6 (Cookies) below for details.

1.3 Information from Third Parties

We may receive information about you from third-party services you connect to your AgentDeal account (such as authentication providers) or from our payment processor (Stripe) when you subscribe to a paid plan.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve the Service and its features.
• To create and manage your account and authenticate your identity.
• To process AI-powered negotiation features, including generating proposals, strategies, and alignment scores.
• To process payments and manage subscriptions.
• To communicate with you about your account, the Service, and updates.
• To provide customer support and respond to your inquiries.
• To monitor and analyze usage patterns to improve user experience.
• To detect, prevent, and address fraud, security issues, and technical problems.
• To comply with legal obligations and enforce our terms.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

3. AI and Data Processing

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with the following categories of recipients:

• Payment processing:We use Stripe, Inc. to process subscription payments. Stripe receives and stores your payment card details and billing information in accordance with PCI-DSS requirements. Stripe's use of your personal data is governed by Stripe's Privacy Policy.
• AI service providers: As described in Section 3, we share your negotiation data with LLM API providers solely to generate AI responses for your use of the Service.
• Analytics providers: We use analytics services to understand how users interact with our Service. See Section 6 (Cookies) for more details.
• Service providers: We may share data with trusted third parties who assist us in operating the Service (e.g., hosting providers, email services), subject to confidentiality obligations.
• Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request.

5. Data Storage and Security

Your data is stored on secure servers hosted in the United States. We implement industry-standard security measures to protect your personal data, including:

• Encryption of data in transit using TLS/SSL (HTTPS).
• Encryption of data at rest using AES-256 encryption.
• Regular security assessments and vulnerability testing.
• Access controls limiting data access to authorized personnel on a need-to-know basis.
• Secure authentication mechanisms and session management.
• Regular backups and disaster recovery procedures.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you acknowledge that you provide your information at your own risk.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the Service. The types of cookies we use include:

• Essential cookies: Required for the Service to function properly, including session authentication and security features. These cannot be disabled.
• Analytics cookies: We use Google Analytics 4 (GA4) to collect anonymous usage data such as page views, session duration, and traffic sources. GA4 data is anonymized and aggregated, and we do not link analytics data to individual user identities. You can opt out of GA4 tracking using the Google Analytics Opt-out Browser Add-on.
• Functional cookies: Remember your preferences and settings to provide a personalized experience.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

7. Your Data Rights

7.1 General Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data, subject to certain legal exceptions.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: Object to our processing of your personal data in certain circumstances.

7.2 GDPR (European Economic Area)

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with a supervisory authority in your jurisdiction. We process your data under the following legal bases: performance of a contract, legitimate interests, consent, and legal obligations.

7.3 CCPA (California)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following additional rights:

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: Request that we delete any personal information we have collected from you.
• Right to opt out of sale: We do not sell personal information, so no opt-out is necessary.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us at privacy@agentdeal.io. We will respond to your request within 30 days (or 45 days where permitted by applicable law).

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Account data: Retained for the duration of your account and for up to 90 days after account deletion to allow for recovery.
• Negotiation data: Retained for the duration of your account. Upon account deletion, negotiation data is deleted within 90 days.
• Billing records: Retained for 7 years as required by tax and accounting regulations.
• Analytics data: Anonymized and aggregated analytics data may be retained indefinitely.
• Log data: Server logs are retained for up to 12 months for security and debugging purposes.

When personal data is no longer needed, we will securely delete or anonymize it in accordance with our data retention schedule.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe that a child under 13 has provided us with personal data, please contact us at privacy@agentdeal.io. Users between the ages of 13 and 18 should use the Service only with the involvement of a parent or guardian.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

For transfers from the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or rely on other lawful transfer mechanisms as applicable.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date at the top of this page. For significant changes, we will also send a notification to the email address associated with your account. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after the posting of changes constitutes your acceptance of such changes.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For legal inquiries, please contact legal@agentdeal.io.