Privacy Policy

DealBird is a brokerage platform for buying and selling online businesses. That means we handle information that is genuinely sensitive — your business's financials, your identity as a seller, your interest as a buyer. This policy explains what we collect, how we use it, and the controls that keep confidential information confidential.

1. Information We Collect

Account information. When you create an account (including via Google sign-in or email magic link), we collect your name, email address, and profile picture.

Business and financial data. When you request a valuation or list a business for sale, we collect the information you submit about that business: revenue, profit, traffic, business model, URLs, and supporting documents you upload to your data room.

Buyer verification data. When you sign an NDA or make an offer as a buyer, we collect the identity and contact details needed to execute the NDA and, where applicable, information used to verify you as a serious buyer.

Usage and analytics data. We log how listings and data rooms are used — including which buyer viewed a listing or data room, their IP address, timestamps, and how long they viewed it. This view tracking is a core feature: sellers are shown every view of their own data room.

Payment information. Payments are processed by Stripe. We do not store full card numbers or bank credentials on our servers.

2. How We Use Your Information

• Producing AI valuations from the business data you submit and comparable-sale data
• Building, publishing, and promoting listings you have authorized under a signed mandate
• Matching buyers and sellers, processing NDAs, and managing offers
• Showing sellers analytics about views of their listings and data rooms
• Sending transactional email (via Resend) — NDA confirmations, offer notifications, deal updates
• Processing payments (via Stripe) and supporting escrow closings (via Escrow.com)
• Providing customer support and improving the product

We do not sell your personal information, and we do not sell or share your business financials for any purpose other than running your sale process as you have authorized it.

3. NDA-Gated Data Handling

Seller confidentiality is central to how DealBird works. Public listing teasers do not identify the business — no name, URL, or identifying details. A seller's financials, URL, and data-room contents are only disclosed to buyers who have (a) signed a digital NDA for that listing and (b) been approved by the seller. Every such disclosure is logged, and the log is visible to the seller.

4. Sharing With Service Providers

We share data with the following providers only as necessary to operate DealBird:

• Vercel — application hosting
• Neon — database hosting
• Resend — transactional email delivery
• Stripe — payment processing
• Escrow.com — escrow services for deal closings (a transaction you enter into directly with Escrow.com)
• UploadThing — file storage for documents you upload
• Google — authentication (sign-in only)

Each provider receives only the data required for its function. We may also disclose information where required by law.

5. Security

We use industry-standard measures including HTTPS encryption in transit, access controls on data rooms, signed and verified authentication parameters, and logging of access to confidential material. No system is perfectly secure, and we encourage you to use a strong, unique account credential.

6. Data Retention

Account data is retained while your account is active. Listing, NDA, and transaction records are retained after a deal closes or a mandate ends, because both sides may need them (for example, for tax, legal, or dispute purposes). If you delete your account, we remove personal data not subject to these retention needs within 30 days; NDA and transaction records are retained for as long as legally necessary.

7. Your Rights (GDPR / CCPA)

Depending on where you live, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to the retention needs above)
• Export your data in a portable format
• Object to or restrict certain processing
• Not be discriminated against for exercising these rights

To exercise any of these rights, email privacy@dealbird.ai. We respond to verified requests within the timelines required by applicable law.

8. Children's Privacy

DealBird is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post material changes on this page and update the effective date above.

Questions about this policy? Contact us at privacy@dealbird.ai.