1. What we collect
- Account data: name, email, role (buyer/seller).
- Listing data you choose to provide, including confidential business details.
- Messages you send through the platform.
- Security and audit metadata: IP address and timestamps for sensitive actions.
2. How we protect it
Data is encrypted in transit (TLS) and at rest (AES-256) by our infrastructure provider. Access to confidential listing details is restricted at the database level and granted only to the listing owner and to buyers who have accepted the applicable NDA. Access to sensitive records is logged.
3. How we use it
We use your data to operate the marketplace, enable confidential messaging, enforce NDA gating, prevent fraud, and meet legal obligations. We do not sell your personal information, and we do not expose your phone number or email to other users — all contact happens through in-app messaging.
4. Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we hold about you, to request its deletion, and to opt out of any sale or sharing of personal information. Business financial records in a listing may include sensitive personal information, which we treat accordingly. To exercise these rights, contact us through your account settings.
5. Retention
We retain personal data only as long as needed to provide the service and meet legal obligations, after which it is deleted or de-identified.
6. Contact
Questions about this policy can be directed to DealNest through your account. This policy may be updated; material changes will be posted here.