Privacy Policy

1. Information we collect

We collect the following types of information when you use DealDex:

• •Account data: name, email address, and password (stored with bcrypt hash).
• •Lead search data: industries, cities, and countries you search for, and the results obtained (business names, phones, public emails, social media, websites).
• •Usage data: pages visited, features used, usage frequency, and performance data.
• •Business profile data (optional): company name, description, value proposition, industry, role, country, and company size.
• •Google OAuth data (if you use that sign-up method): name, email, and profile picture provided by Google.
• •LinkedIn data (via enrichment): work experience, education, skills, and professional summary obtained from public profiles.

2. How we use the information

We use your information to:

• •Provide and improve the lead search and management service.
• •Generate personalized sales messages with artificial intelligence.
• •Manage your account, plans, and subscriptions.
• •Send service-related communications (email verification, plan changes).
• •Analyze service usage to improve it.
• •Perform web scraping of lead websites (public emails, social media profiles, tech stack).
• •Generate budgets and commercial proposals with artificial intelligence.

3. Third-party services

DealDex uses the following third-party services to operate:

• •Google Maps Platform: to search businesses by industry and geographic location.
• •OpenAI API: to generate personalized sales messages (AI sales pitch) and budgets.
• •MercadoPago: payment processing for users in Argentina and Latin America.
• •Lemon Squeezy: international payment processing.
• •Upstash Redis: caching and rate limiting to protect the service.
• •Amazon Web Services (AWS): application hosting and infrastructure.
• •Apify: scraping of public LinkedIn profiles for lead enrichment.
• •Resend: transactional email delivery (verification, password recovery, notifications).
• •Google OAuth: authentication and registration via Google account.
• •Google Analytics 4 + Google Tag Manager: website analytics, subject to user cookie consent.

4. Storage and security

Your data is stored in a PostgreSQL database on AWS RDS (São Paulo region, sa-east-1, Brazil). As DealDex is an Argentine company, this constitutes an international data transfer; Brazil is recognized by Argentina's AAIP as a country with an adequate level of personal data protection. Passwords are stored with bcrypt hash. All communication is done through HTTPS. We implement industry-standard security measures to protect your data.

5. Data retention

We retain your data as long as your account is active. If you delete your account, all your personal data, saved leads, and settings will be permanently removed from our systems.

6. Your rights

You have the right to:

• •Access all personal data we hold about you.
• •Rectify any incorrect data from your account settings.
• •Delete your account and all associated data at any time.
• •Export your leads in CSV format (available on Pro and Agency plans).
• •Withdraw analytics cookie consent at any time through the cookie banner or your browser settings.
• •Exercise your HABEAS DATA rights under Argentina's Personal Data Protection Law 25,326 by contacting us at hola@dealdex.app.

7. Cookies and similar technologies

DealDex uses different categories of cookies:

• •Essential cookies (always active): user session (next-auth), language preference (NEXT_LOCALE), theme (theme-preference), detected country (geo-country). Required for the service to function.
• •Analytics cookies (require consent): Google Analytics 4 (_ga, _ga_*) to analyze site usage. Only activated if you accept analytics cookies in the banner.
• •Payment cookies (as needed): MercadoPago and Lemon Squeezy may set cookies during the payment process.
• •You can manage your cookie preferences at any time through the cookie banner (visible on your first visit) or from your browser settings.

8. AI and automated processing

DealDex uses artificial intelligence in several features:

• •Generation of personalized sales pitches for contacting leads.
• •Generation of professional budgets and commercial proposals.
• •Summaries of LinkedIn profiles obtained through enrichment.
• •AI-generated outputs are suggestions and drafts. The user is responsible for reviewing, editing, and approving all generated content before using it.

9. Public data collection (web scraping)

DealDex collects data from public sources for lead enrichment:

• •Google Maps data: business name, address, phone, rating, hours, and category.
• •Website data: public contact emails, social media profiles, tech stack.
• •LinkedIn data: public professional profile information (experience, education, skills).
• •All collected information comes exclusively from publicly accessible sources. We do not access private or protected information.

10. Applicable legal framework

The processing of personal data at DealDex is governed by the following legislation:

• •Argentina's Personal Data Protection Law 25,326 and its Regulatory Decree 1558/2001.
• •Brazil's General Data Protection Law (LGPD), as data is hosted on infrastructure located in São Paulo.
• •EU GDPR principles as a best practice reference, although the service is not specifically targeted at the European market.

11. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or through a notice in the application.

12. Contact

If you have questions about this privacy policy, write to us at: