Privacy Policy

Effective: March 9, 2026  |  Last updated: April 23, 2026

This Privacy Policy describes how Deal Run LLC ("Deal Run," "we," "us," or "our") collects, uses, and shares information in connection with your use of the Deal Run platform, website, and services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

Geographic Scope

Deal Run operates from the United States and our services are directed to US real estate investors only. We do not intentionally target, offer services to, or knowingly collect personal data from residents of the European Union, United Kingdom, European Economic Area, or any other jurisdiction outside the United States. If you are accessing our website from outside the US, please be aware that our services and privacy practices are designed for a US audience.

1. Information We Collect

Account information. When you create an account or subscribe, we collect your name, email address, phone number, company name, and billing information.

Transaction and billing data. We collect information related to your subscriptions, payments, credit purchases, invoices, and billing history. Payment method details are processed by our third-party payment processor and are not stored on our servers.

Usage data. We collect information about how you interact with the Service, including searches performed, deals created, skip traces requested, marketing packages sent, investor lists built, outreach activities, and features used.

Location data. When you use investor search and other location-based features, we collect geographic coordinates, search radius, and property addresses. We may also collect general location information from your IP address.

Device information. We automatically collect browser type, operating system, IP address, device identifiers, referring URLs, pages visited, and timestamps.

User-generated content. We collect photos, descriptions, marketing packages, notes, and other content you create or upload through the Service.

Communications. We collect the content of messages, emails, and outreach communications you send through the Service, as well as any communications you have with our support team.

Third-party data. We receive property records, investor identification data, skip trace results, and other real estate data from licensed third-party data providers and public records, which we associate with your account and searches.

2. How We Use Your Information

We use your information to:

  • Provide, operate, and improve the Service
  • Process payments and manage subscriptions
  • Deliver investor search results, skip trace data, property analysis, and other platform features
  • Send transactional communications (account setup, billing, security alerts)
  • Send promotional communications (product updates, tips, offers) — you may opt out at any time
  • Provide customer support
  • Monitor for fraud, abuse, and violations of our Terms of Service
  • Analyze usage patterns to improve features and user experience
  • Enforce our Terms of Service and protect the rights and safety of Deal Run LLC and its users

We do not sell your personal information to third parties.

3. Data We Provide to You

Property data, investor identification results, skip trace results, and AI-generated estimates are sourced from public records, MLS data, and licensed third-party data providers. This data is provided for your legitimate business use in real estate investment. You are solely responsible for complying with all applicable laws — including the Telephone Consumer Protection Act (TCPA), CAN-SPAM Act, do-not-call regulations, and state telemarketing laws — when using this data for outreach. See our Terms of Service for data use restrictions.

4. Data You Provide About Others

When you use skip tracing, investor identification, or outreach features, you may receive personal information about third parties (property owners, investors, and other individuals). You are solely responsible for ensuring your use of this information complies with all applicable laws. Deal Run LLC is not responsible for your outreach activities or any claims arising from your use of third-party data obtained through the Service.

5. Data Sharing

We share your information only in the following circumstances:

  • Service providers. We share data with third-party service providers that help us operate the platform, including payment processing, email delivery, data providers, cloud infrastructure, and analytics. These providers are contractually obligated to use your data only to provide services to us.
  • Legal requirements. We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Deal Run LLC, our users, or the public.
  • Fraud and abuse prevention. We may share information with third parties for the purposes of fraud detection, abuse prevention, and credit risk reduction.
  • Business transfers. In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

6. Artificial Intelligence

Certain features of the Service use artificial intelligence and machine learning, including property valuations, repair estimates, investor scoring, condition assessments, and automated recommendations. AI-generated outputs are estimates only and should not be relied upon as professional appraisals, inspections, legal advice, or guaranteed valuations. We may use third-party AI platforms and services to provide these features. AI-generated content is not independently verified by Deal Run LLC.

7. Communications

By creating an account, you consent to receive communications from Deal Run LLC via email, SMS/MMS, push notifications, and telephone, including messages delivered using automatic telephone dialing systems (ATDS) or prerecorded/artificial voice technology, for transactional, service, and promotional purposes. Message and data rates may apply. You may opt out of promotional messages at any time by texting STOP or clicking the unsubscribe link in any email. Consent to receive automated messages is not a condition of purchase.

8. Data Security

We use industry-standard security measures including encryption in transit (TLS) and at rest, secure cloud infrastructure, access controls, and regular security reviews. No system is 100% secure, and we cannot guarantee absolute security of your information.

9. Data Retention

We retain your data as long as necessary to provide the Service and fulfill the purposes described in this policy. Upon account termination, we have no obligation to store or maintain your data or content. We may delete your account data at any time following termination. Billing records are retained as required by applicable tax and accounting laws. Aggregated, anonymized usage data may be retained indefinitely.

Specific retention periods. Where applicable, our retention practices are:

  • Account data: retained while your account is active, plus 30 days after account deletion.
  • Billing records: retained for 7 years to comply with tax and audit requirements.
  • Usage and analytics data: retained for up to 2 years.
  • Backups: rotating 30-day retention.

10. Analytics and Monitoring

We use third-party analytics and monitoring tools to understand how users interact with the Service, diagnose errors, and improve performance and usability. These tools may collect device information, usage data, and interaction data as described below.

  • Google Analytics. We use Google Analytics to measure traffic, navigation patterns, and conversion events. Google Analytics collects device information, pages visited, session duration, and referral sources. Data is processed by Google LLC under its privacy policy. You may opt out using the Google Analytics Opt-out Browser Add-on.
  • PostHog. We use PostHog for product analytics and session replay, including page views, feature usage, mouse movements, clicks, scrolls, and page navigation. Session replays help us identify usability issues and improve the user experience. Sensitive input fields (passwords, payment details) are masked by default. PostHog is disabled within the native mobile app. Data is processed by PostHog, Inc. under its privacy policy.
  • Intercom. We use Intercom to provide live chat support, in-app messaging, and help documentation. Intercom receives your name, email, and account information to identify you in support conversations. Chat history and messages are stored by Intercom. Data is processed by Intercom R&D Unlimited Company under its privacy policy.
  • Cobrowsing and support tools. We may use third-party cobrowsing and session replay tools to provide real-time technical support. When a support session is active, these tools may allow our support team to view your screen in real time to help diagnose and resolve issues. Sensitive input fields are masked. These tools operate on the web version of the Service only and are not active within the native mobile app.

We may use additional third-party analytics, monitoring, and support tools not listed above. All such tools are subject to the same data handling practices described in this policy. Analytics and support tools used on the web version of the Service are generally not active within the native iOS or Android app, except for Intercom (live chat support).

10a. Google User Data (Gmail Integration)

If you choose to connect your Gmail account to send outreach emails through Deal Run, we request access to the gmail.send scope. This permission allows the Service to send email messages on your behalf from your connected Gmail account.

What data we access. We request only the ability to send email — we do not request permission to read your inbox, browse your messages, or access your labels. When you send an outreach email or blast through Deal Run, we transmit the recipient address, subject line, and message body to Google's Gmail API for delivery from your mailbox.

What data we store. We store a Google-issued refresh token (encrypted at rest using envelope encryption with keys managed in Google Cloud KMS) so we can send on your behalf without re-prompting you for consent on every send. We store your Gmail address to display in your connected-account settings. We do not store the content of messages you send through Deal Run beyond the standard outreach logs that already apply to non-Gmail outreach (recipient, subject, send timestamp, delivery status, and engagement outcomes such as opens and clicks).

How the data is used. Gmail API access is used solely to send outreach emails that you have explicitly queued through the Service. Deal Run does not use Gmail data for advertising, does not transfer Gmail data to third parties, and does not use Gmail data for any purpose beyond sending the messages you compose within the Service. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. You may revoke Deal Run's Gmail access at any time by visiting your account settings and clicking "Disconnect Gmail," or directly through your Google Account at myaccount.google.com/permissions. Upon disconnection, we immediately delete the stored refresh token and cease all API access on your behalf.

No human access. Deal Run personnel do not read, view, or access the content of emails sent through your connected Gmail account, except as required for security investigations (e.g., compromised account), to comply with applicable law, or with your explicit consent (e.g., troubleshooting a support ticket you initiated).

11. In-App Purchases

If you subscribe through the iOS or Android app, your purchase is processed by Apple or Google respectively. We use RevenueCat, Inc. as our in-app purchase management platform to synchronize subscription status across platforms. RevenueCat receives your anonymous app user ID and purchase transaction data. RevenueCat does not receive your name, email, or other personal information directly from the purchase. Data is processed under RevenueCat's privacy policy.

12. Cookies

We use essential cookies for authentication and session management. We use analytics cookies and similar technologies (local storage, session storage) to understand usage patterns and improve the Service. You can control cookie settings through your browser. Disabling cookies may affect the functionality of certain features.

13. Your Rights

You may: (a) access and download your data; (b) correct inaccurate information; (c) request deletion of your account and associated data; (d) opt out of non-essential communications. To exercise these rights, contact us at support@dealrun.ai. We will respond within a reasonable timeframe.

14. California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), including the right to know what personal information we collect, request deletion, correct inaccurate information, limit use of sensitive personal information, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, contact privacy@dealrun.ai.

Categories of personal information collected. In the past 12 months, we have collected the following categories of personal information:

  • Identifiers: name, email address, phone number, IP address, device ID, Firebase UID.
  • Commercial information: subscription plan, billing history, trial status, transaction records.
  • Internet or other electronic network activity: browsing behavior, clickstream data, session recordings, feature interactions.
  • Geolocation data: approximate location derived from IP address.
  • Professional or employment-related information: company name and role (for wholesalers and real estate professionals).
  • Inferences: usage patterns, feature preferences, engagement profiles drawn from other data.
  • Sensitive personal information: phone number (used for SMS communications) and precise geolocation (from IP).

Sources of personal information. We collect personal information from the following sources:

  • Directly from you, when you complete forms, create an account, subscribe, upload content, or contact support.
  • Automatically, through cookies, analytics tools, session replay, error tracking, and server logs when you use the Service.
  • From third parties, including RealEstateAPI (property and investor data), Firebase Auth (authentication metadata), Stripe (billing and payment status), and skip trace providers (contact data for properties you search).

Right to Correct. California residents have the right to correct inaccurate personal information we maintain. To request correction, email privacy@dealrun.ai with the specific information to be corrected and supporting documentation.

Right to Limit Use of Sensitive Personal Information. California residents have the right to limit our use of sensitive personal information (such as phone numbers and precise geolocation) to only what is necessary to provide our services. To exercise this right, email privacy@dealrun.ai.

Shine the Light. California Civil Code §1798.83 permits California residents to request disclosure of personal information shared with third parties for their direct marketing purposes. Deal Run does not share personal information with third parties for their direct marketing purposes.

15. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information.

16. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be communicated via email or in-app notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Questions? Contact us at support@dealrun.ai.