Privacy Policy

Deal Wizard Ltd is a company registered in England and Wales with our registered address at 68 Priors Croft, London E17 5NH, UK. We comply with the UK General Data Protection Regulation (UK GDPR) and other applicable privacy laws.

Deal Wizard Ltd is the controller of the personal data described in this policy. You can contact us at contact@dealwizard.ai.

We collect the following types of information:

- Account Information: Full name and email address and, if you choose to add them, phone number, bio, LinkedIn profile, website and location; your account type (investor or deal sourcer), your analysis credits and their history, and your report privacy setting.

- Sign-in Information: Sign-in is handled by Google Firebase Authentication, which stores your email address, a hash of your password (we never see your password) and sign-in details such as when your account was created and when you last signed in. If you sign in with Google, Firebase receives your email address and name from your Google account.

- Analyses and Reports: The property listing links you submit, the investment strategy and finance assumptions you enter, the reports we generate for you and whether each report is public or private.

- Communications: Messages you send us through our contact forms (name, email, subject and message) and the email address you give us to subscribe to our newsletter or to download the investor checklist.

- Technical Data: Our servers keep technical logs (pages and requests served, errors, and a shortened IP address with its last part removed) to keep the platform secure and working. If an administrator changes your account (for example your credits or role), we keep a record of that change.

We do not use analytics tools and we do not track you across other websites.

We use your data to:

- Provide and improve our services, including running the analyses you request.

- Manage your account and your analysis credits.

- Send service-related notifications, for example when your report is ready or your credits are running low.

- Answer the messages you send us.

- Send you our newsletter or the investor checklist (only if you asked for them).

- Keep the platform secure and prevent abuse.

- Comply with legal obligations.

Newsletter: we store the email address you give us to send you occasional news about Deal Wizard. We have not sent a newsletter yet; before we send the first one, we will name here the service we use to send it. You can unsubscribe at any time by emailing us at contact@dealwizard.ai.

We process personal data under the following legal bases:

- Consent: For our newsletter and other non-essential communications.

- Contract: To provide the Deal Wizard service you signed up for.

- Legal Obligation: Where necessary to comply with UK law.

- Legitimate Interests: To keep the platform secure, answer your messages and improve functionality.

We do not sell your data. We share it only with the service providers that help us run Deal Wizard, each receiving only what it needs:

- OVHcloud (hosting): our servers and database run in an OVHcloud data centre in France (EU).

- Google Firebase Authentication (sign-in): your email address, password hash, name if you sign in with Google, and sign-in details.

- Google Gemini (AI analysis): property data only — listing details, photos and floor plans, the postcode and the finance assumptions you enter. We do not send your name, email address or other personal data to the AI model.

- Google Maps (location and Street View): the location of the property being analysed.

- Listing data: a listing-data provider accessed through RapidAPI, and the property portals (Rightmove, Zoopla, OnTheMarket), receive the listing you submitted and searches for comparable properties. No personal data is sent.

- MailerSend (email delivery): when email sending is enabled, your email address and the content of the emails we send you (for example “your report is ready” or “your credits are running low”). Messages from our contact forms are forwarded to our own mailbox through MailerSend.

- Legal authorities when required.

Reports you keep public can be seen by anyone on the platform, for example on the Properties page. They show the property and the analysis, but not your name or email address. You can make a report private at any time, or choose in your profile that new analyses start as private.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal obligations.

- Account information, credit history and reports: for as long as your account exists.

- If you ask us to delete your account, we delete your account information, your credit history, your sign-in record at Firebase, your private reports, and the contact messages and newsletter sign-up made with your email address. Reports that are public at that moment stay on the platform without your personal data: they show only the property and the analysis and are no longer linked to you or your email address. If you want a public report removed as well, make it private before you ask.

- Contact messages: 30 days after we receive them, after which they are deleted automatically.

- Newsletter email address: until you ask us to remove it.

- Server logs: up to 30 days, after which they are deleted automatically.

- Backups: we make a daily backup of our database and keep the 30 most recent backups, so deleted data disappears from our backups within about 30 days.

We use one cookie, and it is strictly necessary:

- __session: keeps you signed in. It is set only when you log in, cannot be read by scripts on the page (HttpOnly), and expires after 14 days or when you log out.

When you log in, the Google Firebase sign-in library also keeps your sign-in state in your browser’s storage on our site; it is removed when you log out.

We do not use analytics, advertising or tracking cookies, so we do not show a cookie banner.
You can manage cookie preferences through your browser settings.

Our pages load fonts and icons from our own servers. Google content loads only when you choose it: the Street View panel on a report appears after you click "Show Street View", and signing in with Google opens a Google window. Only then does your browser connect to Google, which receives your IP address and may set its own cookies. You can learn more about how Google processes data here: https://policies.google.com/privacy

Under the UK GDPR, you have the right to:

- Access your data.

- Rectify inaccurate data.

- Request deletion of your data.

- Object to or restrict processing.

- Data portability.

- Withdraw consent at any time (where applicable).
To exercise your rights, including deleting your account or unsubscribing from our newsletter, email us at contact@dealwizard.ai . You can also update your profile details and the privacy of your reports yourself in your account.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

All connections to the platform use HTTPS (TLS). Our database is not reachable from the internet, and only authorised administrators can access the servers and the administration area. Daily database backups are copied to a private backup server that is not reachable from the internet.

Our servers and database are hosted by OVHcloud in France (EU). Database backups are stored on a private backup server operated by the owner of Deal Wizard.

Some of the service providers listed above, such as Google, may process data outside the UK and the EU, for example in the United States. Such transfers are protected by safeguards such as the EU–US Data Privacy Framework (and its UK Extension) or Standard Contractual Clauses.

We may update this Privacy Policy from time to time. The effective date above shows the current version, and we will tell you about material changes by email or a notice on the website.