Privacy Policy

Last updated: May 24, 2026

Deal Flow Alert ("we", "our", "us") is operated by Idillo Inc. This Privacy Policy describes how we collect, use, and share information when you use the dealflowalert.com website and our weekly digest service.

1. What we collect

• Account information. Email address and (optionally) your name.
• Payment information. Handled directly by Stripe at checkout. We never see or store your full card number; we receive only a Stripe customer ID, the last four digits, and the card brand.
• Search criteria. Industry, state, price range, and any free-form notes you submit so we can match listings to you.
• Interaction data. Which listings you mark Interested, Hidden, or Contacted in your dashboard, so we can improve relevance.
• Standard technical data. IP address, browser type, and pages visited, captured through our hosting provider's standard request logs.

2. How we use it

We use this information to deliver matching listings to you, send the weekly digest and transactional emails (receipts, trial reminders, account notices), process billing, prevent abuse, and improve the service over time.

3. Who we share it with

We share the minimum data necessary with the service providers we use to operate Deal Flow Alert. We do not sell or rent personal information.

• Stripe: billing, subscription management, and card tokenization.
• Brevo: delivery of transactional and digest email.
• Supabase: hosting and database for your account and search criteria.
• Vercel: website and serverless function hosting.
• Apify: fetching publicly available listing pages on our behalf.
• Google: sign-in via Google OAuth, if you choose to use it.

4. Cookies

We use first-party session cookies to keep you signed in. We do not run third-party advertising cookies or cross-site tracking pixels in v1.

5. Data retention

We retain your account data and search criteria for as long as your subscription is active, and for 90 days after cancellation, so we can re-activate your account on request and meet our recordkeeping obligations. You may request earlier deletion by emailing the address in section 9.

6. Your rights

You can request access to the personal data we hold about you, request correction of inaccurate data, request deletion of your account, or request an export of your data in a portable format. Email the address in section 9 to exercise any of these rights; we will respond within 30 days.

7. CAN-SPAM compliance

Every commercial email we send includes a working unsubscribe link and the physical mailing address of Idillo Inc. Unsubscribing stops the weekly digest immediately; transactional emails related to your subscription (receipts, trial reminders, cancellation confirmations) will still be sent for as long as the account is active.

8. Children

Deal Flow Alert is intended for adults aged 18 or older. The service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

9. Contact

Idillo Inc., Orlando, FL, USA. Privacy questions and data requests: privacy@dealflowalert.com.