Privacy Policy.

1. Who We Are and What This Policy Covers

This Privacy Policy is published by DealStake Inc., a Delaware corporation with its registered office at 16192 Coastal Hwy, Lewes, DE 19958 ("DealStake", "we", "us"). DealStake provides a software platform that prepares, sends and answers business email for its customers, who are commercial-finance brokers and similar businesses. This policy covers the platform at origination.dealstake.io and the website at dealstake.io. Questions and requests: support@dealstake.io.

2. Our Roles

2.1 Customers and their teams. The businesses that open a DealStake workspace and the people they invite. We determine how their account information is handled, so we are the business responsible for it.

2.2 Merchants. The businesses our customers upload and email, the people who answer those emails, and the people who submit documents through an upload link. The customer determines what merchant information is collected and why. We process it on the customer's instructions as its service provider under the Data Processing Terms. A request about merchant information goes to the customer that holds it (section 9), except a request to stop receiving email, which we apply ourselves.

2.3 Website visitors. People who visit dealstake.io or book a walkthrough. We are the business responsible for that information.

2.4 Referral Program participants. The individuals and businesses that join the Referral Program, whether or not they are customers. We determine how their information is handled, so we are the business responsible for it.

3. Information We Collect

3.1 From customers and their teams. Name, email address, business name and logo, the legal business name and postal address that go on every outreach email, sign-in events with IP address and browser, when you were last active, how you reached our site before you signed up, the page you arrived on, and the approximate city and region of your IP address, settings and preferences, support requests, and billing details. Payment card details are collected by our payment processor on its own pages and do not reach our servers.

3.2 About merchants, from our customers. Whatever the customer uploads, typically business name, contact name, title, email address, phone number, postal address, website, social profile links, industry, revenue figures and notes. Columns that appear to hold government identifiers, dates of birth or bank or card details are dropped at upload. We add information compiled about the business, the communications sent and received, what the service understood from a reply, and documents a merchant chooses to submit through a secure upload link, which can include financial statements and identity documents.

3.3 From website visitors. The information you submit when you book a walkthrough, and routine server logs. These record your IP address, browser, the page you asked for and the page that sent you.

3.4 Sources. We collect information directly from customers and their teams, from the lists and settings customers upload, from merchants when they reply or submit documents, from public sources about businesses, and from the service providers in section 7.

3.5 From Referral Program participants. The name, and the business name if you give one, that you enter when you join; the email address you sign in with; the record of your acceptance of the Referral Program Terms, which includes the version, the time, your IP address and your browser; your referral code; the businesses credited to you, the commissions they earned you, your statements and the payments made to you; and the identifier of your account with our payment processor, with its status and the last four digits of your bank account. Your bank account number and tax identification are collected by our payment processor on its own pages, under its own agreement with you, and do not reach our servers.

3.6 Referral links and codes. When anyone opens a referral link or enters a referral code, our load balancer logs the request, including the code, the time, the IP address and the browser. When a customer creates a workspace through a referral link or code, we record which participant referred it and when. A browser that opens a referral link keeps a cookie that remembers the code (section 12).

4. How We Use Information

4.1 Customers and their teams. To provide and operate the workspace, bill, secure the account, provide support, send account notices, and comply with law.

4.2 Merchants. To prepare and send communications on the customer's behalf, compile information about the business, validate contact details, respond to replies, receive and organize documents, apply stops and consent rules, and meter and bill the customer's usage.

4.3 Website visitors. To respond to your request, comply with law, and understand which pages and sources bring visitors to the site.

4.4 No advertising. We do not use personal information for advertising, for profiling unrelated to the service, or for sale.

4.5 Referral Program participants. To credit referred businesses, calculate and pay commissions, issue statements, have our payment processor file tax forms where the law requires, prevent abuse and self-referral, and comply with law.

5. Automated Processing and Artificial Intelligence

5.1 Automated communications. Communications are prepared and sent by automated features, some of which use artificial intelligence provided by outside providers, in accordance with each customer's settings. A customer can pause sending, stop communications to any business or take over any conversation at any time.

5.2 No training. DealStake does not use customer or merchant information to train artificial intelligence models. We select artificial intelligence providers for quality and cost and may change them; the Data Processing Terms describe how customers are told.

5.3 Documents. Documents a merchant submits are read by automated means to check completeness and the name on the account.

6. Platform Records

We maintain records of our own, compiled in operating the service from public sources, such as information about businesses and industries, together with templates and defaults, and the results of checks we run on contact details while providing the service. These records do not contain a customer's lists, communications, settings or documents, and we use them to serve every customer. We are the business responsible for them.

7. How We Disclose Information

7.1 Service providers. We disclose information to the service providers that operate the platform for us, in these categories: cloud hosting and infrastructure; artificial intelligence services; email delivery; contact validation and business information; payment processing; authentication and identity; account communications; and monitoring and security. Each is bound by contract to process information only for us.

7.2 Other disclosures. We disclose information when the law requires it, to protect rights, safety and the integrity of the service, and to a successor if DealStake is acquired, under this policy.

7.3 No sale, no sharing. We do not sell personal information. We do not sell or rent lists. We do not share personal information for cross-context behavioral advertising. We never use one customer's workspace data to prepare or send communications for another customer, we never disclose one customer's workspace data to another customer, and we never resell a customer's workspace data or the lists it buys through the Marketplace.

7.4 The Referral Program. We tell a participant the business name of a customer credited to it only after that customer's first dated payment, the dates of its credit, and the commission it earned, and nothing else about the customer's workspace, lists, conversations or contacts. That is account information, not workspace data. We show a person who opens a referral link or enters a code the name the participant gave us. We share a participant's identity and payout details with our payment processor, which collects and keeps the bank and tax details it needs under its own terms and privacy notice. DealStake never resells your data, and never resells the lists a business buys through the Marketplace.

8. De-identified and Aggregated Data

We may create information that is combined across customers and de-identified so that it cannot reasonably be linked to a customer, a merchant or any person, and use and publish it for analytics, benchmarking, security, product development and other lawful business purposes. We take reasonable measures to keep it de-identified, we publicly commit to maintain and use it only in de-identified form and never to attempt to re-identify it, and we require anyone who receives it to commit to the same by contract.

9. Your Rights and Choices

9.1 If a DealStake customer emailed you. Reply to the email and ask to stop, or write to support@dealstake.io naming the address that was contacted. Communications to you from that customer's workspace stop at once, including follow-ups, and we keep a record so they do not restart. To ask what a customer holds about you, or to have it corrected or deleted, write to support@dealstake.io; we forward your request to the customer within five business days and help it respond.

9.2 If you are a customer or a team member. You can view and change your own details in Settings, see your team's sign-ins and your agreements with DealStake in Settings, request a record of DealStake staff access to your workspace, request an export of your merchant records, and close your account.

9.3 If you are a website visitor. To ask about information we hold about you or to request its deletion, email support@dealstake.io.

9.4 California and other states. Residents of California and of other states with comprehensive privacy laws may have the right to know what personal information we hold about them and how we use and disclose it, to have it corrected or deleted, to opt out of sale or sharing, and not to be treated differently for exercising a right. We do not sell or share personal information, so there is nothing to opt out of. Send requests to support@dealstake.io. We verify a request by replying to the email address we hold or by asking the customer that holds your information to confirm it. An authorized agent may submit a request with your written permission.

9.5 If you are a Referral Program participant. You can see your record on the Referrals page and leave the program there at any time. Leaving ends your link, and your name and business name are removed from our program records once any balance owed to you is paid. We keep your sign-in email so you can read your statements, and the statement, payment and acceptance records described in section 10. To ask about other information we hold about you, write to support@dealstake.io.

10. How Long We Keep Information

Information	Retention
Merchant records, communications and documents in a customer's workspace	While the account is open and the customer keeps them; deleted within ninety days after the account closes
Opt-out, unsubscribe and do-not-contact records	Kept, so the stop holds
Platform Records	As long as they are useful for the service, with no customer attribution after that customer's account closes
Customer account, billing and tax records	As tax and accounting law requires
Sign-in, access, administrative and acceptance records	Kept as security and contract evidence
Server logs and error reports	Up to ninety days
Load balancer request logs, including referral link and preview requests	Thirty days
Traffic statistics without IP addresses	Kept as long as they are useful
Referral Program records: name and business name	While you participate; removed once you leave and any balance owed to you is paid
Referral statements, commission records, payment account identifier and acceptance record	Kept as tax, accounting and contract evidence for as long as the law and any remaining payment or claim require
Backups	On a rolling schedule; backups made before a customer deletion are held under restricted access for disaster recovery only
Copies of communications at our email delivery provider	Under that provider's retention schedule
Website requests	As long as needed to respond

Our payment processor keeps the identity, bank and tax details it collected from participants under its own terms and privacy notice, as financial regulation and tax law require. Removing your record from our program does not remove what it holds.

11. Security

We maintain administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encryption in transit and at rest, logical separation of each workspace, restricted and recorded staff access, and monitoring. No method is perfectly secure. If a security incident affects personal information in a customer's workspace, we notify the affected customer within seventy-two hours of confirming it.

12. Cookies

The platform sets one cookie to keep you signed in, plus the cookies our sign-in provider needs. When you open a referral link, the platform also sets a first-party cookie named em_referral that remembers the referral code for ninety days. It is used only to show who referred you when you create a workspace, and the Clear referral button on that page removes it. The website sets none of its own. We use no advertising or analytics cookies.

13. Children

The platform and the website are for businesses and adults. We do not knowingly collect information from anyone under eighteen.

14. The dealstake.io Website

14.1 What we collect on the website. The information you submit when you book a walkthrough, and routine technical logs that our servers keep.

15. Changes

When we change this policy we post the new version with a new effective date and keep every version. For a material change we also notify our customers' workspace owners by email.

16. Contact

support@dealstake.io, or by post to DealStake Inc., 16192 Coastal Hwy, Lewes, DE 19958.