Legal

Privacy Policy

Effective date: January 1, 2025 · Last updated: March 2025

DealFlow AI operates an AI-powered real estate platform that includes automated calling, data sourcing, and transaction facilitation. Because of this, we handle more sensitive data than a typical SaaS product. This policy explains exactly what we collect, why, and how it is protected.

1. Who We Are

DealFlow AI ("DealFlow AI," "we," "us," or "our") operates an AI-powered real estate wholesale marketplace that automates buyer discovery, outreach, deal matching, and contract generation. Our platform is accessible at dealflow.ai. For privacy-related inquiries, contact us at hello@dealflow.ai.

2. Information We Collect

We collect information in the following ways: Information you provide directly: When you join our waitlist, create an account, or contact us, we collect your name, email address, phone number, professional role (wholesaler, cash buyer, or both), and any other information you choose to provide. Property and transaction data: If you are a wholesaler, you may upload property details, contract information, and deal-related documents. If you are a buyer, you may provide your investment criteria, purchase history, and preferences. AI call data: When our AI voice agents contact you or call buyers on your behalf, those calls may be recorded and transcribed. Call recordings and transcripts are stored and used to update buyer profiles, improve matching accuracy, and for quality assurance. All calls are subject to applicable federal and state wiretapping and call recording laws. Third-party data sources: We source property ownership records, transaction histories, and contact information from licensed third-party data providers including, but not limited to, ATTOM Data Solutions and Melissa Data. This data is used to identify and verify cash buyers in your target markets. Automatically collected data: We collect standard log data including IP addresses, browser type, pages visited, referring URLs, and timestamps. We also use cookies and similar tracking technologies as described in Section 9. Communications: If you contact us by email or other means, we retain those communications and any information contained in them.

3. How We Use Your Information

We use the information we collect to: •Operate, maintain, and improve the DealFlow AI platform •Match real estate deals with qualified cash buyers based on stated investment criteria •Conduct AI-powered outreach calls on behalf of wholesalers to identify and qualify buyers •Generate and facilitate assignment contracts and related transaction documents •Send you transactional communications, product updates, and early access notifications •Verify the identity and purchase history of cash buyers in our network •Improve the accuracy of our AI matching and qualification systems using call transcripts and outcomes •Comply with legal obligations, including TCPA compliance and state-specific real estate regulations •Detect and prevent fraud, abuse, and other harmful activity •Respond to your requests and provide customer support

4. AI Voice Calls and TCPA Compliance

DealFlow AI uses artificial intelligence voice agents to contact real estate investors and cash buyers on behalf of wholesalers using our platform. This section is important. Consent: By registering as a cash buyer or providing your phone number to DealFlow AI or a wholesaler using our platform, you expressly consent to receive automated and pre-recorded calls and text messages from DealFlow AI and its users at the number you provide. This consent is not a condition of any purchase. Opt-out: You may opt out of AI-initiated calls or texts at any time by replying STOP to any text message, stating "remove me" or "do not call" during any call, or emailing hello@dealflow.ai. Opt-out requests are processed within 24 hours and applied across the platform. Call times: Automated calls are restricted to the hours of 8:00 AM to 9:00 PM in the recipient's local time zone, in compliance with the Telephone Consumer Protection Act (TCPA) and applicable state laws. Call recording: Calls made through our platform may be recorded. Where required by law, we announce the recording at the start of the call. By continuing a call after such announcement, you consent to recording. Do Not Call Registry: We honor the National Do Not Call Registry. Wholesalers using our platform agree not to use DealFlow AI to contact numbers on the DNC Registry without appropriate consent on file.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances: With other platform users: Wholesalers can see buyer profiles including investment criteria, preferred markets, and deal history. Buyers can see deal details submitted by wholesalers. Personally identifiable contact information is only shared when both parties have been matched and a deal interaction has been initiated. With service providers: We share information with trusted vendors who help us operate the platform, including cloud infrastructure (Supabase), AI calling (Vapi.ai), communication services (Twilio), payment processing (Stripe), contract generation (Anvil), and data providers (ATTOM, Melissa Data). These providers are contractually bound to handle your data only as necessary to provide their services. For legal reasons: We may disclose information if required by law, subpoena, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of DealFlow AI, our users, or others. Business transfers: If DealFlow AI is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our platform before your information becomes subject to a different privacy policy. With your consent: We may share information for any other purpose with your explicit consent.

6. Data Security

We implement industry-standard technical and organizational security measures to protect your information, including encryption of data in transit (TLS) and at rest, access controls limiting data access to authorized personnel, regular security assessments, and monitoring for unauthorized access or anomalies. Despite these measures, no system is completely secure. We cannot guarantee that your information will never be accessed, disclosed, altered, or destroyed. If we become aware of a security breach that affects your information, we will notify you in accordance with applicable law.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically: •Waitlist data is retained until you request deletion or we launch and migrate you to an active account •Account data is retained for the duration of your account plus 3 years after closure •Call recordings and transcripts are retained for up to 2 years for quality assurance and legal compliance •Transaction and contract records may be retained for up to 7 years to comply with financial recordkeeping requirements •You may request deletion of your data at any time (see Section 8), subject to our legal retention obligations

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information: Access: Request a copy of the personal information we hold about you. Correction: Request that we correct inaccurate or incomplete information. Deletion: Request that we delete your personal information, subject to certain legal exceptions. Portability: Request that we provide your data in a portable format. Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any email we send. Opt-out of AI calls: As described in Section 4. California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to opt out of sale (we do not sell personal information), and the right to non-discrimination for exercising your rights. To exercise any of these rights, email hello@dealflow.ai. We will respond within 30 days.

9. Cookies and Tracking

We use cookies and similar technologies to operate our platform, remember your preferences, analyze usage patterns, and improve performance. Specifically: Essential cookies: Required for the platform to function. These cannot be disabled. Analytics cookies: Help us understand how users interact with the platform (e.g., page views, session duration). We use privacy-respecting analytics tools. Preference cookies: Remember your settings and choices across sessions. You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. We do not use third-party advertising cookies.

10. Third-Party Data and Real Estate Records

DealFlow AI sources property ownership and transaction data from licensed public records providers. This data is used solely to identify verified cash buyers and facilitate deal matching. We do not use this data for any purpose unrelated to the platform's core function. If you are a real estate investor whose information appears in our buyer database based on public records, you may contact us at hello@dealflow.ai to review, update, or remove your information from our system.

11. Children's Privacy

DealFlow AI is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at hello@dealflow.ai.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by posting a notice on our platform at least 14 days before the changes take effect. Your continued use of DealFlow AI after the effective date of the updated policy constitutes your acceptance of the changes. We encourage you to review this policy periodically.

13. Contact

For questions, concerns, or requests related to this Privacy Policy or your personal information, contact us at: DealFlow AI hello@dealflow.ai We take privacy inquiries seriously and will respond within 5 business days.