Legal
Privacy Policy
What we collect, why, who receives it, and your rights.
Last updated
Who we are
GetDeal Inc., a corporation incorporated under the laws of the State of Delaware, USA, with registered office at 8 The Green, Ste R, Dover, DE 19901, USA, is the controller of the personal information described in this policy. We are established in the United States and have no office in the European Union or the United Kingdom.
Questions about this policy, and requests under it, go to support@getdeal.ai. Legal notices go to contact@getdeal.ai.
When we act with an investor
Where an investor commissions an assessment of a company under terms that make GetDeal and that investor joint controllers of the analysis and its delivery, those terms make GetDeal your single point of contact for the rights described below. Until an investor has agreed such terms, GetDeal alone is the controller of the assessments it produces. How we handle information about the people named in the companies we assess is set out in our transparency notice.
What we collect
When you create an account
- Your name, email address and a password, or the name and email address your Google account provides if you sign in with Google
- The role you choose — founder or investor — and the profile details you enter during onboarding, including your company, its website and, for investors, your firm and investment focus
- Your consent to the Terms of Service and this policy, where the sign-up form asks for it
When you list a company
- The information you enter about the company: its description, financial figures, funding history, team, and the documents you upload to its data room, such as pitch decks, financial statements and contracts
- Text from your company’s public website, when you ask us to fill your listing from it
- Names, roles and contact details of the people you name as your company’s key people or references
When you use the platform
- Messages you send in a deal’s chat, requests you make, documents you open in a data room and when you opened them, and the agreements you sign
- Your verification submissions, where the platform asks you to verify who you are
- Payment details are entered with our payment provider, not with us; we receive a record of what was purchased and the email address it was purchased under
When you visit the public website
- A random identifier in a cookie, which is not derived from anything about you and is used only to limit how much of the public directory one visitor can extract in a day
- Ordinary server logs: the address a request came from, the page requested, the time, and the browser identification your browser sends
People we contact on behalf of listed companies
When a listed company asks us to introduce it to investors, we hold the names, work email addresses, firms and professional profile links of investment professionals we contact. That information comes from public professional sources and from the company’s own contacts, and we hold it only to make and follow up the introduction.
Why we use it, and on what legal basis
- To run the marketplace — accounts, listings, deal rooms, chat, signatures and payments — because that is the service you asked for (performance of a contract).
- To produce an analysis of a listed company, or of a company an investor asks about, for the investor and for our own listing review, under our legitimate interest in running a marketplace where listings can be assessed. The analysis is generated from the company’s own public website and other public sources.
- To introduce listed companies to investment professionals, under our legitimate interest in running an introduction marketplace, and theirs in hearing about relevant companies; any of them can ask us to stop at any time.
- To keep the platform secure and to limit abuse, under our legitimate interest in doing so.
- To send you the emails the service needs — verification, notifications about your deals, receipts — because the service does not work without them. We do not send marketing email to account holders.
- To meet legal obligations, including record-keeping for signed agreements and payments.
- Where we rely on your consent, we ask for it separately and you can withdraw it at any time.
Who receives it
We do not sell personal information. The following receive it in the course of providing the service:
- The other party to a deal: a founder and an investor see each other’s names, profiles, messages and, once a non-disclosure agreement is signed, the documents shared in the deal room.
- Our hosting provider, on whose server in Germany the platform, its database and its uploaded files run.
- Google, when you sign in with Google, and when a call is scheduled through Google Calendar (the attendees’ names, email addresses and the time).
- Our transactional email provider, which delivers the emails the service sends and receives the recipient address and message content.
- Our payment provider, Stripe, when you make a purchase.
- An analysis service operated for us by a third-party developer, which receives a company’s name and website address, and any claims extracted from a founder’s uploaded deck, and which in turn uses AI model providers and public-data sources to produce the analysis.
- An AI model gateway, which receives the public website text of a company when a listing is filled from it, and the text of a pitch deck when a founder uploads one, to extract the listing’s details.
- A messaging service that carries operational alerts to our team; an alert may include a company name and the domain part of an email address, never the full address.
- YouTube, when you play a video embedded on our market pages: the embedded player is loaded from YouTube and sets YouTube’s cookies in your browser.
Our list of sub-processors names each provider once a data-processing agreement with it is signed. No such agreement has been signed yet, so that list is empty and the providers are described here instead.
Where and how it is stored
The platform, its database and the files you upload are kept on a single application server operated by our hosting provider in Germany. Uploaded files — decks, financial statements, contracts, avatars — are stored on that server’s local disk, not in a separate cloud storage service. Access to a data-room document is limited to the people its owner has granted access to, each download is watermarked for the person who downloaded it, and every open and download is logged.
International transfers
We are a United States company, so information about people in the European Union and the United Kingdom is accessed from the United States, and some of the providers listed above process it there. We have not yet put in place a specific transfer mechanism for those transfers; until we do, they rest on the necessity of the transfer for the contract you have with us, or, where an investor commissions an assessment, for a contract made in your interest.
How long we keep it
- Your account and profile: for as long as the account exists, and for a short period afterwards to close out anything open.
- Listings, deal rooms, messages and signed agreements: for as long as the listing or deal is active, and afterwards for as long as a record of a completed or attempted transaction is needed, because a signed agreement is a record of what was agreed on a date.
- Uploaded documents: for as long as the listing they belong to exists, or until you delete them.
- Information about people named in a company assessment: as described in the transparency notice.
- Server logs and the website visitor cookie: the cookie for thirty days; server logs for fourteen days.
These periods are the rules of our internal retention schedule. The automated deletion that enforces them is being built; until it runs, deletion under the schedule is carried out by hand and on request.
Your rights
You can ask to see the information we hold about you, to correct it, to have it erased, to restrict or object to its use, and to receive a copy of what you gave us in a portable form. We verify your identity before disclosing anything. Where the information already appears in a report we delivered to someone, we cannot unsay it, so instead we lock it: it is kept, excluded from any further use and from any future version of the report. To use any of these rights, email support@getdeal.ai.
People in the European Union and the United Kingdom also have the right to complain to a data protection supervisory authority — in the UK, the Information Commissioner’s Office.
What we do not track
The platform is built to record page views and which listings were shown to whom, and both are switched off. No page view and no listing impression is recorded today. If either is switched on, this policy will say so first.
Children
The platform is for businesses and professional investors. It is not directed at anyone under 18, and we do not knowingly hold information about anyone under 18.
Changes to this policy
The date at the top of this page is the date it was last changed. To close your account, ask us at the support address below. A change that affects what we collect or who receives it is announced to account holders by email before it takes effect.
Contact
GetDeal Inc., 8 The Green, Ste R, Dover, DE 19901, USA. Privacy requests: support@getdeal.ai. Legal notices: contact@getdeal.ai.
Complaints
If you are unhappy with how we have handled your information or a request, tell us first and we will answer within a month. You may also complain to the supervisory authority where you live.
See also our Terms of Service.