Privacy policy

Dealtab (dealtab.app) is a brand-deal tracker for creators, built and run by Uttej. In this policy “Dealtab”, “we” and “us” mean the service and the people running it. Questions about privacy go to hello@dealtab.app.

• Your account: your email address. If you sign in with Google, the name and email Google shares with us.
• What you put into Dealtab: deals, brand names, the names and email addresses of your brand contacts, fees, dates, deliverables, usage rights and exclusivity, notes, invoices, your rate card, and the business details you add for invoices (such as your business name, address, tax ID and payment details).
• Emails Dealtab sends: a log of the reminder emails sent to you and the chase emails you approved (recipient, subject, message and time), shown to you under Settings.
• AI assistant connections: the name and permissions of each API key you create. The key itself is stored only as a one-way fingerprint. Changes made through a key are labelled with its name in the deal’s timeline.
• Technical data: our hosting provider keeps short-lived server logs (IP address, browser type, the page requested and the time) to keep the service secure and fix problems.
• Payments: when you subscribe, payment is handled by Dodo Payments, our Merchant of Record. We receive your subscription status and a customer ID, never your card number.

We don’t use advertising, tracking cookies or third-party analytics. The only cookies are the ones that keep you signed in. Your light or dark theme choice is kept in your own browser’s storage.

• To run Dealtab for you: show your board, calendar and money view, work out deadlines, and make your invoice PDFs.
• To email you reminders about your deliverables, invoices and usage rights (you can turn each kind off in Settings).
• To send a chase email to a brand contact, only after you have seen the draft and confirmed it.
• To keep the service secure, prevent abuse, and answer you when you write to us.
• To email you about your account, such as your trial ending or a change to these policies. We won’t send you marketing emails without asking first.

We don’t sell your data, share it with advertisers, or use your deals to train AI models.

When you add a brand contact, you decide what goes in and you’re responsible for having a good reason to keep and email it, such as an existing business relationship. We process that information only to provide Dealtab to you. Chase emails are sent from Dealtab’s email address with replies going to yours, and only after you confirm each one.

We use a small number of providers to run Dealtab. Each only gets what it needs to do its job:

• Supabase: our database and sign-in (United States).
• Railway: hosting for the app (United States).
• Resend: delivering sign-in links, reminders and the chase emails you approve.
• Cloudflare: our domain’s DNS.
• Dodo Payments: payments, tax and receipts, once you subscribe.
• Google: sign-in, only if you choose “Continue with Google”.

If you connect an AI assistant (such as ChatGPT, Claude or Grok) with a Dealtab API key, the assistant receives the data you ask it to read or change, and its provider handles that data under its own privacy policy. You can revoke a key any time in Settings.

Your data is stored in the United States. If you use Dealtab from elsewhere, your data is transferred to and processed in the United States.

• Every connection uses HTTPS, and the database is encrypted at rest.
• Every record belongs to one account; queries are scoped to your account, and database row-level security adds a second check.
• API keys are stored only as fingerprints, have limited permissions, and can be revoked at any time.
• Nothing goes to a brand without your confirmation, and assistants can’t send email without a key you allowed to.

No system is perfectly secure. If we ever learn of a breach that affects your data, we’ll tell you promptly.

We keep your data while your account exists, including after a trial ends, so it’s there if you come back. To delete your account and everything in it, email hello@dealtab.app from the address you sign in with. We delete it within 30 days, along with the email logs, and confirm when it’s done.

You can ask us for a copy of your data, to correct it, or to delete it, and you can object to how we use it. Depending on where you live (for example under the GDPR or California law) you may have further rights; we honour these requests wherever you are. Write to hello@dealtab.app and we’ll answer within 30 days. You can also complain to your local data protection authority.

Dealtab isn’t meant for anyone under 16, and we don’t knowingly collect their data.

If we change this policy, we’ll update the date at the top. For significant changes we’ll also email account holders before they take effect. See also our terms of service.