Privacy

What is kept

• Your book — the deals, the numbers, the notes, the documents you upload. Held for your organization, loaded only for people who belong to it.
• Your account — an email address, a name if you gave one, a password held as a scrypt hash with its own salt (never the password itself), and the dates you signed in.
• A record of the door — who signed in, when, and from which address, so that an owner can see who has been in their organization.
• Public records — what state and federal registers say about companies. That is public data about companies, not about you, and it is shared across every organization because it is the same country.

What is not kept

No card number ever reaches this software. No tracking, no advertising identifiers, no third-party analytics: there is no script on the page that reports to anybody. Your book is not used to train anything.

Who sees it

People in your organization see your book. An outside collaborator you name on a deal sees that deal's data room and its request list, and nothing else — not the model, not the risk register, not your other deals. The hosting provider and the database provider hold the bytes because they must to run the service. Nobody else.

Where it is

On servers in the United States. The book is one JSON document per organization; the files you upload are objects in the same account.

What you can ask for

A copy of everything, in one file, at any time — Settings, "A copy of the book". Your own lines in the door record, as a file, at any time — Settings, "Your door record"; an owner can take the whole organization's record the same way. Deletion of your account, at any time — Settings, "Delete your account": your sign-in goes at once, and if you are the last person in the organization the book and every file in it go with you. The organization's door record keeps the lines about you coming and going, because it is that organization's security record; ask and they are removed. Correction of anything in the book, by editing it yourself, which is the whole point of the software.

If a public record names you

The registers this software reads name the people who own and run companies — officers, managers, registered agents. You can ask to be taken out: write to admin@dealste.com with the name and the state. The name goes on a suppression list that is kept for good: it is dropped from every officer list and people view here, and no later refresh brings it back. A record a state has voided is removed the same way, once a month. Some federal contractor records carry a name and address from Dun & Bradstreet (D&B Open Data), via SAM.gov, and say so where they are shown.

DealSTE is not yet registered as a data broker in California or any other state. That registration, and the California deletion platform (DROP) that comes with it, are being prepared; this page will say when they are in place, and until then a request to the address above is honoured by hand.