DealFlowPlugin.com ("we," "our," or "us"), operated by Sean Mahoney, respects your privacy. This policy explains what information we collect when you visit dealflowplugin.com or purchase Deal Flow, how we use it, and your rights regarding that information.

1. Information We Collect

When you purchase Deal Flow: We collect the information you provide during checkout via Stripe: name, email address, and billing address. Stripe processes your payment card information directly — we never receive or store raw card data.

When you activate your license: The Deal Flow plugin installed on your server contacts our license API at purchase activation. The API receives your Mautic® instance subdomain and your license key to verify the license. We log this activation event (subdomain, timestamp, license key hash) for license validation and support purposes.

When you visit this website: We collect standard web server logs (IP address, browser type, pages visited, referrer) for security purposes. With your consent, we also use Google Analytics 4 to understand how visitors use this site, and Google Ads cookies to measure which of our own ads brought you here — see "Cookies & Analytics" below for what that involves and how to control it.

When you contact us: If you email us for support, we retain that correspondence to provide support and improve the product.

2. Cookies & Analytics

We use Google Analytics 4 (GA4) to understand how visitors use this site — which pages get traffic, how visitors found us, and whether the purchase flow completes. GA4 collects usage data (pages viewed, time on site, referring site), approximate location (derived from IP address, not precise geolocation), and device/browser information. We do not use this data to identify you personally, and it is never combined with your Mautic® contact or deal data — Deal Flow's license activation call and this website's analytics are entirely separate systems.

Consent: On your first visit, a banner at the bottom of the page asks whether you'd like to allow analytics and advertising cookies. No analytics or advertising cookies or storage are set until you click "Accept" — all four Google consent signals (analytics storage, ad storage, ad user data, ad personalization) start denied and are granted together only when you accept. If you click "Decline," or simply close the tab without choosing, both stay off. Your choice is saved in your browser's local storage and respected on every later visit — we don't ask again once you've decided.

Changing your choice: To change your consent choice, clear your browser's site data for dealflowplugin.com (in most browsers: site settings → cookies and site data → clear data for this site) and reload the page. The consent banner will appear again.

Advertising: We advertise Deal Flow on Google Search to bring visitors to this site. We do not display third-party ads on this site, and we do not sell ad space. With your consent, Google Ads cookies let us see which of our own ads led to a visit or a purchase, so we can stop paying for ads that don't work. If you click "Decline," or close the tab without choosing, these cookies are never set and no advertising signals are sent.

3. How We Use Your Information

We do not sell, rent, or trade your personal information to third parties. We do not use your purchase information (name, email, license key, subdomain) for advertising — it is never uploaded to Google Ads or any ad platform. Website analytics and advertising cookies, described in "Cookies & Analytics" above, are a separate system and only operate with your consent.

4. What We Do Not Collect

Deal Flow is a self-hosted plugin that runs on your server. We have no access to:

The only communication between your server and our infrastructure is the license validation call at plugin activation. No deal or contact data is ever transmitted to us.

5. Third-Party Services

Stripe: We use Stripe for payment processing. Stripe's privacy policy is available at stripe.com/privacy.

SendGrid: We use SendGrid to deliver transactional emails (license key delivery, receipts). SendGrid processes your email address to deliver these messages.

Google Cloud: Our license API and this website are hosted on Google Cloud Run. Google's privacy policy is available at policies.google.com/privacy.

Google Analytics: With your consent (see "Cookies & Analytics" above), we use Google Analytics 4 to measure site usage. Google acts as a data processor on our behalf for this data. Google's privacy policy is available at policies.google.com/privacy.

Google Ads: With your consent, we use Google Ads to measure which of our own search ads led to a visit or purchase. This links your visit to the ad you clicked, and lets Google use that data to improve the ads we show. Google's privacy policy is available at policies.google.com/privacy; you can control ad personalization across all Google services at myadcenter.google.com.

6. Data Retention

We retain your purchase record (name, email, license key, subdomain) for as long as your license is active plus 3 years, for tax, audit, and support purposes. Web server logs are retained for 90 days. Support emails are retained for 2 years. Google Analytics data is retained by Google for up to 14 months from collection, after which it is automatically deleted, per GA4's default retention setting.

7. Your Rights

You may request access to, correction of, or deletion of your personal information by emailing privacy@dealflowplugin.com. We will respond within 30 days. Deletion of your account will revoke your license key.

If you are in the European Economic Area or United Kingdom, you have additional rights under GDPR/UK GDPR, including the right to data portability and the right to lodge a complaint with your supervisory authority.

8. Security

We use industry-standard security practices: TLS in transit, encrypted storage at rest, and access controls limited to personnel who need the data. However, no system is perfectly secure. If you discover a security issue, please report it to security@dealflowplugin.com.

9. Changes to This Policy

We may update this policy as our practices evolve. We will notify active licensees of material changes via email. The effective date at the top of this page reflects the most recent revision.

10. Contact

Questions about this policy? Email us at privacy@dealflowplugin.com.

Sean Mahoney, Founder
DealFlowPlugin.com