Home

Legal

Privacy notice

This notice explains how the operator of Deal Preflight collects, uses, discloses, stores, and protects personal data. Effective 13 September 2026.

1. Scope and who is responsible

This notice applies to the Deal Preflight website, accounts, listing analysis, report purchases, report sharing, transactional email, and support. Deal Preflight is operated by Pocket Rocket Works, a Singapore sole proprietorship (UEN 53531322E) and Deal Preflight is its trading name. Pocket Rocket Works is responsible for personal data under its control. Paluk Guptais the Data Protection Officer. For privacy questions or requests, email privacy@dealpreflight.com or use the contact page.

2. Information we collect

  • Email address, authentication events, account identifier, and security records.
  • Listing and business website links, listing text, deal names, financial and operating inputs, evidence selections, source excerpts, public-check results, generated reports, workspace notes, and share-link records.
  • When you choose CSV evidence columns for reconciliation, the selected file is processed in memory and the raw file is discarded. We retain the file name and fingerprint, selected column names, date range, row count, totals, monthly summary, and comparison with the saved claim.
  • Payment references, purchased credits, amount, currency, fulfilment status, and related transaction records. Deal Preflight does not receive or store your full card number.
  • Product events such as starting or completing an analysis, entering checkout, generating a report, copying questions, or sharing a report.
  • Support messages, contact details you provide, and technical information reasonably needed to diagnose a problem.
  • Teardown requests: your email, public listing link, concern, asking-price range, buying stage, acquisition source, and optional permission for an anonymized public example. Email subscriptions: your email, source, confirmation and unsubscribe records.

3. Where information comes from

Information comes directly from you, from public listing and business website pages you ask Deal Preflight to inspect, from public domain-registration data and provider documentation, from authentication and payment providers, and from normal operation of the service. Do not submit information obtained unlawfully or information you are not authorized to process.

4. Why we use information

We use information only for purposes reasonably connected with operating Deal Preflight, including to:

  • create and secure accounts, authenticate users, and prevent misuse;
  • import listings, run requested public checks, calculate previews, generate reports, reconcile selected evidence columns, and save your private deal workspace;
  • process purchases, grant credits, prevent duplicate fulfilment, and maintain transaction records;
  • send requested magic links, receipts, report-ready messages, and service notices;
  • review and respond to requested public-listing teardowns; publish an anonymized submission-based example only with the permission requested on the form;
  • send Deals Worth Investigating emails only after you separately opt in and confirm your email address. A teardown request does not subscribe you. You can unsubscribe through the link in each email;
  • provide support, investigate errors, monitor reliability, and improve the product flow;
  • comply with applicable law, enforce the Terms, and protect users, Deal Preflight, and others.

Deal Preflight does not sell personal data or share it for cross-context behavioural advertising. If we introduce a materially different use, we will provide notice and obtain consent where required.

5. Legal bases

Where a legal basis is required, we process account, analysis, report, and purchase data to perform our contract with you; security, support, reliability, and limited product analytics for our legitimate interests; transaction or compliance records to meet legal obligations; and data based on consent where we specifically ask for it. You may withdraw consent at any time, without affecting earlier lawful processing.

6. Service providers and overseas processing

Deal Preflight uses Supabase for authentication and database storage, Vercel for hosting, Stripe for checkout, OpenAI for structured extraction and report narrative, Resend for transactional and opted-in editorial email, and Google Analytics for limited traffic and conversion measurement. These providers process information needed for their role and may do so outside Singapore. We use reputable providers and take reasonable steps intended to ensure that transferred personal data receives a standard of protection comparable to applicable requirements, including contractual or other approved safeguards where required. You may ask us for information about applicable transfer safeguards.

7. AI processing and decisions

Listing text, structured deal inputs, source excerpts, calculations, and evidence choices may be sent to OpenAI to extract seller-stated information or draft a fact-constrained report. AI output can be incomplete or wrong. Avoid submitting unnecessary personal data, sensitive data, passwords, authentication codes, banking credentials, or confidential documents that you are not permitted to process. Scores and reports assist your own review. We do not use them to make decisions that produce legal or similarly significant effects about you.

8. Payments

Stripe collects and processes card and billing details under its own terms and privacy notice. Deal Preflight receives limited checkout and payment information needed to fulfil credits, issue receipts, handle disputes, and prevent duplicate fulfilment.

9. Cookies, authentication, and analytics

Deal Preflight uses essential browser storage and cookies to maintain authentication, security, attribution, and the requested workflow. Product events are recorded to understand whether core steps work and to diagnose failures. Google Analytics remains disabled unless you select “Allow analytics” in the analytics preferences. Your choice is saved in your browser and can be changed from “Analytics preferences” in the footer. Advertising storage and advertising signals remain disabled, and no listing text or report content is included in Google Analytics events. Deal Preflight does not use third-party advertising cookies or sell behaviour profiles.

10. Sharing and confidentiality

Deals and reports are private to the signed-in account by default. If you create a private report link, anyone who obtains that link may be able to view the shared report. Share it only with intended recipients. Deal Preflight does not make seller material confidential merely because it was uploaded. You remain responsible for complying with any NDA, marketplace rule, or confidentiality obligation that applies to you.

11. Security and incidents

We use reasonable administrative and technical safeguards, including access controls, private account ownership rules, signed payment webhooks, and restricted service credentials. No online system is completely secure. If a reportable data incident occurs, we will assess and make notifications required by applicable law.

12. Retention

We retain information only while reasonably needed to provide and secure the service, maintain credit and transaction integrity, resolve disputes, meet legal or accounting requirements, and establish or defend claims. Different records may have different retention periods. We will delete or anonymize personal data when it is no longer needed, subject to backups and records we must retain.

13. Your privacy rights

Depending on where you live, you may request access, correction, deletion, restriction, portability, or objection to processing; withdraw consent; or complain to your local data-protection regulator. Applicable rights may differ and lawful exceptions may apply. We will not discriminate against you for exercising an applicable privacy right. Use the support page and provide enough information to verify your account and request. Withdrawal or deletion may prevent us from continuing some services. We may retain information where permitted or required and may decline a request where an applicable exception applies.

14. Children

Deal Preflight is intended for adults evaluating business acquisitions and is not directed to children. Do not use the service if you are under 18.

15. Changes and contact

We may update this notice as the service or legal requirements change. The effective date will be updated when material changes are published. The Data Protection Officer is Paluk Gupta. For privacy questions, complaints, access or correction requests, or consent withdrawal, email privacy@dealpreflight.com or use the Deal Preflight contact page.