DealFlowPlugin.com ("we," "our," or "us"), operated by Sean Mahoney, respects your privacy. This policy explains what information we collect when you visit dealflowplugin.com or purchase Deal Flow, how we use it, and your rights regarding that information.

1. Information We Collect

When you purchase Deal Flow: We collect the information you provide during checkout via Stripe: name, email address, and billing address. Stripe processes your payment card information directly — we never receive or store raw card data.

When you activate your license: The Deal Flow plugin installed on your server contacts our license API at purchase activation. The API receives your Mautic® instance subdomain and your license key to verify the license. We log this activation event (subdomain, timestamp, license key hash) for license validation and support purposes.

When you visit this website: We collect standard web server logs (IP address, browser type, pages visited, referrer) for security and analytics purposes. We do not use cookies beyond what is strictly necessary for site function. We do not track you across other websites.

When you contact us: If you email us for support, we retain that correspondence to provide support and improve the product.

2. How We Use Your Information

We do not sell, rent, or trade your personal information to third parties. We do not use your information for advertising.

3. What We Do Not Collect

Deal Flow is a self-hosted plugin that runs on your server. We have no access to:

The only communication between your server and our infrastructure is the license validation call at plugin activation. No deal or contact data is ever transmitted to us.

4. Third-Party Services

Stripe: We use Stripe for payment processing. Stripe's privacy policy is available at stripe.com/privacy.

SendGrid: We use SendGrid to deliver transactional emails (license key delivery, receipts). SendGrid processes your email address to deliver these messages.

Google Cloud: Our license API and this website are hosted on Google Cloud Run. Google's privacy policy is available at policies.google.com/privacy.

5. Data Retention

We retain your purchase record (name, email, license key, subdomain) for as long as your license is active plus 3 years, for tax, audit, and support purposes. Web server logs are retained for 90 days. Support emails are retained for 2 years.

6. Your Rights

You may request access to, correction of, or deletion of your personal information by emailing privacy@dealflowplugin.com. We will respond within 30 days. Deletion of your account will revoke your license key.

If you are in the European Economic Area or United Kingdom, you have additional rights under GDPR/UK GDPR, including the right to data portability and the right to lodge a complaint with your supervisory authority.

7. Security

We use industry-standard security practices: TLS in transit, encrypted storage at rest, and access controls limited to personnel who need the data. However, no system is perfectly secure. If you discover a security issue, please report it to security@dealflowplugin.com.

8. Changes to This Policy

We may update this policy as our practices evolve. We will notify active licensees of material changes via email. The effective date at the top of this page reflects the most recent revision.

9. Contact

Questions about this policy? Email us at privacy@dealflowplugin.com.

Sean Mahoney, Founder
DealFlowPlugin.com