Privacy Policy

Dealwize processes only information necessary to provide AI-powered deal intelligence, sales analysis, and qualification recommendations. Depending on how you interact with Dealwize (via our web application, API, or Model Context Protocol [MCP] integrations such as ChatGPT), we process the following categories of data:

• Uploaded Transcripts & Sales-Call Content: Audio transcripts, video meeting transcripts, call dialogues, speaker turn recordings, sales conversations, objections, and qualification details submitted for analysis.
• Email and Meeting Notes: Meeting summaries, email threads, CRM notes, and follow-up action items provided to augment deal context.
• Customer and Contact Names: Prospect names, stakeholder names, job titles, business email addresses, and contact details contained within submitted sales materials or entered into deal records.
• Business and Company Information: Target company names, account details, company size, budget numbers, deal values, competitor references, and procurement timelines.
• Generated Deal Intelligence: Deal health scores, MEDDPICC qualification frameworks, risk indicators, buyer sentiment signals, action items, executive summaries, and strategic deal recommendations generated by our AI pipeline.
• Saved Dealwize Deals: Persistent deal workspaces, pipeline stages, custom tags, and historical deal archives stored in authenticated accounts.
• User Identity & Account Credentials: Your name, work email address, organization details, and login credentials used to authenticate and manage your Dealwize account.
• Technical & Usage Metadata: Browser type, IP address, session timestamps, and feature interactions used solely to maintain platform performance, debugging, and security.

Dealwize is designed to assist sales professionals and revenue teams in evaluating sales opportunities. Because sales conversations frequently involve multiple participants:

You represent and warrant that you have obtained all required notices, consents, or legal authority (including compliance with applicable wiretapping, recording, and data privacy regulations) before uploading, streaming, or transmitting any call recording, transcript, or customer data to Dealwize.

When interacting with Dealwize through conversational AI platforms (such as the Dealwize MCP server for ChatGPT or third-party LLM connectors):

• Anonymous / Ephemeral Processing: An anonymous transcript may still be transmitted to Dealwize for processing even if the user hasn't created a persistent Dealwize account. In these instances, the transcript and context are processed in-memory solely to generate the immediate deal analysis requested by the user.
• Connected Accounts: If you connect your authenticated Dealwize account via MCP or OAuth, the generated deal intelligence and summaries may be saved to your persistent Dealwize deal board based on your explicit commands.

We maintain a strict stance regarding customer proprietary data and artificial intelligence models:

• No Training on Your Data: We do NOT use your uploaded transcripts, sales-call content, meeting notes, customer information, or generated deal intelligence to train, retrain, or fine-tune public foundation models, proprietary base models, or third-party AI models.
• Zero-Retention AI Processing: Our enterprise agreements with AI model providers (including OpenAI, Anthropic, and Google Gemini) ensure that your data is processed via zero-data-retention / non-training API endpoints that prohibit the provider from using your submitted content for model training.

We partner with vetted, enterprise-grade subprocessors to operate Dealwize securely. All subprocessors are bound by Data Processing Addendums (DPAs) and confidentiality obligations:

• AI Inference Providers: OpenAI, Anthropic, Google (Gemini) — utilized for natural language processing, transcript summarization, and deal qualification scoring under strict commercial non-training terms.
• Database & Cloud Storage: Supabase / PostgreSQL, Amazon Web Services (AWS) — securely stores encrypted user accounts, authentication tokens, system assets, and saved deal data.
• Edge & Cloud Hosting Infrastructure: Fly.io, Cloudflare, AWS — backend application hosting and API compute, edge routing, SSL/TLS encryption in transit, DDoS protection, and web application delivery.
• Transactional Email & Communications: MailerSend — provides deliverability infrastructure for transactional account emails, authentication links, and essential product notifications.
• Analytics & Performance Monitoring: Google Analytics — processes aggregate, pseudonymized interaction metrics to help us monitor performance, identify usability bottlenecks, and improve product reliability.

We retain your data only for as long as necessary to fulfill the purposes described in this policy:

• Saved Deals & Account Data: Retained for the lifetime of your active account or until you delete specific deals or your account.
• Ephemeral MCP / Anonymous Sessions: Unauthenticated transcripts processed via ChatGPT MCP or guest tools are processed in volatile memory and are not stored in persistent deal archives.
• Operational & Security Logs: Technical logs (such as request timestamps and error traces) are retained for up to 30 days for security diagnostics and troubleshooting, after which they are permanently purged.

You retain full control over your information and deal assets:

• Self-Service Item Deletion: You can delete individual deals, uploaded transcripts, and generated intelligence at any time directly within the Dealwize application.
• Full Account Deletion: You can request complete account deletion at any time from your account settings or by emailing privacy@dealwize.co. Upon request, all associated deals, transcripts, contact information, and account records are permanently purged from our active databases within 30 days.
• Data Subject Rights: Depending on your jurisdiction (including GDPR, UK GDPR, and CCPA), you have the right to access, rectify, port, or request erasure of personal data we hold about you.

All data in transit is encrypted using modern TLS 1.3 encryption, and all persistent database records are encrypted at rest using AES-256. We employ strict multi-tenant isolation, role-based access controls, and routine security audits to protect your confidential deal data.

We use essential cookies to maintain secure authenticated sessions and remember user preferences, as well as performance measurement via Google Analytics to analyze aggregate traffic patterns and improve platform stability. You can adjust cookie preferences in your browser settings. We do not sell your personal data or engage in third-party cross-site behavioral tracking.