Privacy Policy

Effective Date: June 8, 2026
Last Updated: June 8, 2026
Operated by DealsGrid LLC, Wyoming, United States

IMPORTANT: This Privacy Policy explains how DealsGrid LLC collects, uses, stores, and shares your personal data when you access or use the DealsGrid platform at https://dealsgrid.ai. By registering on or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the Platform. This Privacy Policy is incorporated into and forms part of the DealsGrid Terms of Use available at https://dealsgrid.ai/terms-of-use.

1. Definitions

For the purposes of this Privacy Policy, capitalised terms shall have the meanings ascribed to them in the DealsGrid Terms of Use. Additionally:

  • "Personal Data" means any information relating to an identified or identifiable natural person, including name, email address, telephone number, IP address, device identifiers, and behavioural data collected through the Platform.

  • "Processing" means any operation performed on Personal Data, including collection, storage, use, transfer, and deletion.

  • "Third-Party Processor" means any third-party service provider that processes Personal Data on behalf of the Company pursuant to a data processing agreement or equivalent contractual arrangement.

  • "Lead Data" means the contact information and inquiry details submitted by a Buyer when expressing interest in a Listing, including name, email address, telephone number, messenger handles, and the content of any message submitted.

  • "Cookie Policy" means the DealsGrid Cookie Policy available at https://dealsgrid.ai/cookie-policy, which governs the use of cookies and similar tracking technologies on the Platform.

2. Data Controller

The data controller responsible for the processing of your Personal Data is:

DealsGrid LLC
[REGISTERED ADDRESS PLACEHOLDER], Wyoming, United States
Email: privacy@dealsgrid.ai

The Company does not appoint a formal Data Protection Officer. For all privacy-related enquiries, requests, and complaints, please contact the Company at privacy@dealsgrid.ai. All correspondence should be submitted in English.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register on the Platform or interact with its features, you provide the following categories of Personal Data:

  • Registration data: full name, email address, telephone number, country of residence, and preferred language;

  • Messenger handles: WhatsApp number, Telegram username, or other messaging platform identifiers provided at registration or in a Lead inquiry form;

  • Lead Data: the content of any inquiry submitted in connection with a Listing, including any free-text message entered in the inquiry form. You are solely responsible for the content of messages you submit and should not include sensitive personal or financial information in free-text fields;

  • Account preferences: saved search filters, notification settings, favourite Listings, and communication preferences;

  • AI Feature inputs: text queries and prompts submitted to AI-powered features on the Platform. You should not submit sensitive personal data, financial information, or confidential information through AI features;

  • Social login data: if you register or log in using a third-party authentication provider (Google or Facebook), the Company receives your name, email address, and profile picture from that provider via Auth0. Your third-party account password is never shared with the Company.

3.2 Data Collected Automatically

When you access and use the Platform, we automatically collect the following technical and behavioural data:

  • Device and technical data: IP address, browser type and version, operating system, device type, screen resolution, and device identifiers;

  • Usage and behavioural data: pages visited, Listings viewed, search queries entered, filters applied, time spent on pages, clickstream data, and referral source;

  • Browsing history within the Platform: a record of Listings viewed during your session, stored in your account for the purpose of displaying your viewing history in your personal account cabinet;

  • Property alert activity: search filters saved for property alert subscriptions and notification delivery records;

  • Cookie and tracking data: data collected through cookies, pixels, and similar technologies as described in the Cookie Policy at https://dealsgrid.ai/cookie-policy.

3.3 Data We Do Not Intentionally Collect

The Company does not intentionally collect special categories of sensitive personal data, including racial or ethnic origin, political opinions, religious beliefs, health data, financial account details, government identification numbers, or passport data. If you voluntarily include such information in a free-text field (such as a Lead inquiry message), the Company assumes no enhanced duty of care in respect of that data beyond its standard data protection obligations. The Platform does not include form fields that request such information.

4. How We Use Your Personal Data

We process your Personal Data for the following purposes and on the following legal bases:

4.1 Platform Operation and Account Management

Legal basis: Performance of a contract (to provide you with the services you have requested).

  • Creating and managing your user account;

  • Enabling property search, filtering, and Listing browsing;

  • Displaying your saved favourites, browsing history, and submitted Lead inquiries in your account cabinet;

  • Processing and routing Lead inquiries to the relevant Agent or Developer;

  • Delivering property alert notifications matching your saved search filters via email, push notification, or other enabled channels;

  • Authenticating your identity and maintaining the security of your account.

4.2 Lead Qualification and Direct Contact

Legal basis: Legitimate interests (to verify the quality of Lead inquiries and maintain the integrity of the Platform) and your consent (where you have provided contact information for this purpose).

The Company may contact you using your registered contact details — including by telephone, email, WhatsApp, Telegram, or other messaging channels — for the purpose of verifying your identity or contact details, qualifying your Lead inquiry, confirming your interest in a Listing, or providing follow-up assistance. Such contact is made in the Company's legitimate interest in maintaining a high-quality lead marketplace and does not constitute unsolicited marketing.

Telephone contact is made solely using the telephone number you have voluntarily provided during registration or in a Lead inquiry form. If you do not wish to be contacted by telephone, you may opt out at any time by notifying the Company at privacy@dealsgrid.ai or by requesting to be added to the Company's internal do-not-call list. The Company will honour such requests within a reasonable time. Opting out of telephone contact does not affect your ability to receive other communications or use the Platform.

4.3 Marketing Communications

Legal basis: Consent (obtained at the time of registration through explicit acceptance of marketing communications).

With your consent provided at registration, the Company may send you marketing communications including:

  • Property guides, market reports, investment insights, and editorial content published on the Platform;

  • Property recommendations and curated Listing selections based on your search behaviour and preferences;

  • Promotional offers and announcements relating to DealsGrid services and partner offerings.

Marketing communications may be delivered via email (through SendGrid), WhatsApp Business, Telegram bot, telephone, or other contact channels you have provided. You may withdraw your consent to receive marketing communications at any time by clicking the unsubscribe link in any email communication or by contacting privacy@dealsgrid.ai. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal and does not affect your ability to use the Platform.

4.4 Analytics, Performance Monitoring, and Advertising

Legal basis: Legitimate interests (to understand Platform usage, improve our services, and operate advertising campaigns); and consent where required by applicable law.

We use your data for the following analytics, monitoring, and advertising purposes:

  • Analysing user behaviour on the Platform using Google Analytics and Google Tag Manager (GTM) to understand how users interact with the Platform and to improve its features and performance;

  • Monitoring Platform indexing and search performance using Google Search Console;

  • Operating retargeting and interest-based advertising campaigns using Meta Pixel (Facebook/Instagram Ads) and Google Ads. These tools allow us to display targeted advertisements to users who have previously visited the Platform on third-party websites and social media platforms. Your behaviour on the Platform — including pages visited and Listings viewed — may be used to build advertising audiences on Meta and Google platforms;

  • Monitoring Platform errors and performance issues using Sentry for error tracking and incident management.

You acknowledge that by using the Platform, your behavioural data may be transmitted to Meta Platforms Inc. and Google LLC for advertising purposes. If you do not wish your data to be used for retargeting advertising, you should not use the Platform, or you may opt out through the relevant platform's advertising settings (Facebook Ad Preferences, Google Ads Settings). Further details on cookies and tracking technologies are set out in our Cookie Policy at https://dealsgrid.ai/cookie-policy.

4.5 Platform Security and Fraud Prevention

Legal basis: Legitimate interests (to protect the Platform, its users, and the Company from fraud and security threats).

  • Detecting and preventing fraudulent Listings, fake accounts, spam, and abusive behaviour;

  • Managing user authentication and access control using Auth0 (operated by Okta, Inc.);

  • Protecting the Platform from malicious traffic and DDoS attacks using Cloudflare network security services.

4.6 Legal Compliance

Legal basis: Compliance with legal obligations.

We may process your Personal Data to the extent necessary to comply with applicable laws and regulations, respond to lawful requests from competent authorities, enforce our Terms of Use, and protect the legal rights and interests of the Company.

5. Sharing and Transfer of Personal Data

5.1 Transfer of Lead Data to Agents and Developers

When you submit a Lead inquiry in connection with a Listing, your Lead Data — including your name, email address, telephone number, messenger handles, and the content of your inquiry message — is transferred to the Agent or Developer responsible for that Listing. This transfer is made pursuant to your explicit consent provided at the time of submitting the inquiry, as described in the Terms of Use. Following such transfer, the Agent or Developer processes your Lead Data as an independent data controller, subject to their own privacy policies and applicable law. The Company is not responsible for the data processing practices of Agents or Developers following receipt of your Lead Data. You are advised to enquire about the privacy practices of any Agent or Developer before engaging with them.

Agents and Developers may access your Lead Data through the Platform's dashboard interface or via the Platform's API. Where an Agent or Developer has integrated the Platform's API with a third-party CRM or messaging system, your Lead Data may be transmitted to that third-party system. The Company requires Agents and Developers to ensure that any third-party provider to whom your Lead Data is transmitted is bound by appropriate data protection obligations, but the Company cannot guarantee or enforce compliance by third parties outside the Company's contractual reach.

5.2 Third-Party Processors

The Company engages the following categories of Third-Party Processors to operate the Platform. Each processor acts on the Company's instructions and is bound by appropriate data processing agreements or terms of service:

  • Cloud infrastructure and hosting: DigitalOcean (DigitalOcean LLC) and Amazon Web Services (Amazon Web Services, Inc.) — servers located in Kazahstan. These providers host the Platform's databases, application servers, and file storage;

  • Deployment and edge network: Vercel Inc. — used for Platform deployment, hosting of frontend assets, and global content delivery;

  • DDoS protection and CDN: Cloudflare, Inc. — all traffic to the Platform passes through Cloudflare's network for security and performance optimisation;

  • Authentication: Auth0 (Okta, Inc.) — manages user login, registration, and session management. Auth0 processes authentication data on our behalf;

  • Email communications: Twilio SendGrid (Twilio Inc.) — used to send transactional emails (account confirmations, notifications, Lead alerts) and marketing emails;

  • Messaging: WhatsApp Business API (Meta Platforms, Inc.) and Telegram Bot API (Telegram Messenger Inc.) — used to deliver Lead notifications, property alerts, and marketing communications via messaging platforms;

  • Real-time notifications: Pusher Ltd. — used to deliver real-time push notifications and in-platform alerts to users;

  • Error monitoring: Sentry (Functional Software, Inc.) — used to monitor, log, and diagnose application errors and performance issues. Error logs may contain partial user data such as URLs, session identifiers, and error context;

  • Payment processing: Stripe, Inc. — used to process payments from Agents and Developers for promotional packages. Stripe processes payment card data as an independent data controller in accordance with PCI-DSS standards. The Company does not store payment card numbers;

  • CRM: Amploo CRM — used internally by the Company to manage agent relationships, sales processes, and internal communications. Lead data and agent data may be stored in this system;

  • Analytics and advertising: Google LLC (Google Analytics, Google Tag Manager, Google Search Console, Google Ads) and Meta Platforms, Inc. (Meta Pixel) — as described in Section 4.4 above.

  • AI providers: OpenAI, L.L.C. (ChatGPT), Google LLC (Gemini), Anthropic PBC (Claude), and other AI providers as applicable — process queries and interaction data submitted through AI features on the Platform, as described in Section 16 of the Terms of Use.

5.3 Legal Disclosures

The Company may disclose your Personal Data to law enforcement authorities, regulators, courts, or other government bodies where required to do so by applicable law, court order, or regulatory requirement, or where the Company believes in good faith that such disclosure is necessary to protect the rights, safety, or property of the Company, its users, or the public.

5.4 Business Asset Transactions

In the event of a merger, acquisition, reorganisation, sale of all or substantially all of the Company's assets, or other similar transaction, your Personal Data may be transferred to the acquiring entity or successor as part of that transaction. The Company will make reasonable efforts to notify affected users by posting a notice on the Platform or by email prior to the completion of any such transaction where it involves a material change in the use of your Personal Data. Following such a transaction, your Personal Data will remain subject to the protections set out in the privacy policy of the successor entity.

6. International Data Transfers

DealsGrid LLC is incorporated in the United States. The Platform's servers are primarily located in [ASIA-PACIFIC REGION — e.g. Singapore / Tokyo]. By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in the United States or other countries outside your country of residence, which may have data protection laws that differ from those in your jurisdiction.

Several of the Third-Party Processors listed in Section 5.2 are based in the United States (including Google, Meta, Twilio SendGrid, Stripe, Auth0, Vercel, Cloudflare, Sentry, and OpenAI). Where personal data of EU/EEA residents is transferred to these processors, such transfers are made pursuant to standard contractual clauses approved by the European Commission, adequacy decisions, or other appropriate transfer mechanisms as required by the GDPR.

7. Data Retention

We retain your Personal Data for as long as necessary to fulfil the purposes for which it was collected, as set out in this Privacy Policy, or as required by applicable law. The following retention principles apply:

  • Account data: retained for the duration of your active account and for a reasonable period thereafter for the purposes of legal compliance, fraud prevention, and dispute resolution;

  • Lead Data: retained by the Company for business record purposes following submission to the relevant Agent or Developer. The Company does not impose a fixed deletion schedule on Lead Data given that property purchasing decisions may take place over extended periods of time, sometimes exceeding twelve (12) months from the date of initial inquiry;

  • Browsing and behavioural data: anonymised and aggregated following account deletion. Anonymised data that cannot identify an individual is retained indefinitely for analytics purposes;

  • Marketing communication records: retained for the duration of your consent and for a reasonable period thereafter for compliance purposes;

  • Error and security logs: retained for a limited period as required for security monitoring and incident investigation purposes.

When you delete your account, the Company will anonymise or delete your directly identifying personal data (name, email, telephone number, messenger handles) in accordance with its standard processes. Lead Data that has already been transmitted to an Agent or Developer prior to account deletion will not be recalled from those third parties.

In any event, the Company will not retain your Personal Data in identifiable form for longer than ten (10) years following the termination of your account or your last interaction with the Platform, whichever is later, unless a longer retention period is required or permitted by applicable law, including for the purposes of legal proceedings, regulatory compliance, or fraud prevention.

8. Your Rights

8.1 Rights Available to All Users

Regardless of your jurisdiction, you have the following rights in relation to your Personal Data:

  • Right to access: you may request confirmation of whether we hold Personal Data about you and request a copy of that data;

  • Right to rectification: you may request correction of inaccurate or incomplete Personal Data;

  • Right to withdraw consent: where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing;

  • Right to account deletion: you may request deletion of your account by contacting privacy@dealsgrid.ai. Account deletion will result in anonymisation of your directly identifying data as described in Section 7.

8.2 Additional Rights for EU/EEA Residents (GDPR)

If you are a resident of the European Union or European Economic Area, you have the following additional rights under the General Data Protection Regulation (EU) 2016/679:

  • Right to erasure ("right to be forgotten"): you may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful;

  • Right to restriction of processing: you may request that we restrict the processing of your Personal Data in certain circumstances;

  • Right to data portability: you may request to receive your Personal Data in a structured, commonly used, and machine-readable format;

  • Right to object: you may object to processing based on legitimate interests or for direct marketing purposes;

  • Right to lodge a complaint: you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available at https://edpb.europa.eu.

To exercise any of the above rights, please submit a written request in English to privacy@dealsgrid.ai. The Company will respond to your request within thirty (30) days. The Company reserves the right to verify your identity before processing any request and to decline requests that are manifestly unfounded, excessive, or repetitive.

9. Cookies and Tracking Technologies

The Platform uses cookies, pixels, and similar tracking technologies to operate, analyse, and improve the Platform and to serve targeted advertising. A cookie banner is displayed to users accessing the Platform from the European Union or European Economic Area, providing information about the cookies in use. Full details of the cookies used on the Platform, their purposes, and your options are set out in the Cookie Policy available at https://dealsgrid.ai/cookie-policy, which is incorporated into this Privacy Policy by reference.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, the Company will take the following steps:

  • Internal assessment: the Company will promptly investigate the nature, scope, and likely impact of the breach upon becoming aware of it;

  • Regulatory notification: where required by applicable law, including where the GDPR applies to the processing of EU/EEA residents' data, the Company will notify the relevant supervisory authority within seventy-two (72) hours of becoming aware of the breach, or as soon as reasonably practicable;

  • User notification: where the breach is likely to result in a high risk to your rights and freedoms, the Company will notify affected users without undue delay by email or other available contact channel, describing the nature of the breach, the data affected, and the steps being taken to address it.

11. Children's Privacy

The Platform is not directed at individuals under the age of 18. The Company does not knowingly collect Personal Data from children under 18 years of age. If the Company becomes aware that it has inadvertently collected Personal Data from a child under 18, it will take prompt steps to delete such data. If you believe that the Company has collected data from a child under 18, please contact privacy@dealsgrid.ai.

12. Data Security

The Company implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or disclosure. These measures include encryption of data in transit (HTTPS/TLS), access controls and authentication through Auth0, DDoS protection and traffic filtering through Cloudflare, error and anomaly monitoring through Sentry, and segregation of Buyer and Agent/Developer data in separate database structures. Notwithstanding the foregoing, no method of transmission over the internet or electronic storage is completely secure. The Company cannot guarantee absolute security of your Personal Data and accepts no liability for unauthorised access that results from circumstances beyond its reasonable control.

13. Third-Party Websites and Services

The Platform may contain links to third-party websites, including the websites of Agents and Developers. This Privacy Policy applies only to the Platform operated by DealsGrid LLC. The Company is not responsible for the privacy practices of third-party websites and recommends that you review the privacy policies of any third-party website you visit.

14. Changes to This Privacy Policy

The Company reserves the right to update or modify this Privacy Policy at any time. Changes will be effective upon posting of the revised Privacy Policy on the Platform, with the "Last Updated" date reflecting the date of the most recent revision. Where changes are material, the Company will make reasonable efforts to notify registered users by email or via a notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the posting of changes constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact:

DealsGrid LLC
[REGISTERED ADDRESS PLACEHOLDER], Wyoming, United States
Privacy enquiries: privacy@dealsgrid.ai
General & legal: legal@dealsgrid.ai

All privacy-related correspondence must be submitted in English. The Company will respond within thirty (30) days of receipt.