This Privacy Policy describes how Denntalus Tech Solutions and Services Limited("Company", "we", "us", or "our"), a company registered in Jamaica, collects, uses, and protects your information when you use Deal Doctor OS (the "Service").

We are committed to protecting your privacy and handling your data transparently and securely.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, company name, job title
• Billing Information: Payment method details (processed by third-party payment providers)
• Profile Information: Optional information you add to your profile
• Communications: Messages you send us through support channels

1.2 Information from CRM Integration

When you connect your CRM system (Pipedrive, Salesforce, HubSpot, etc.), we collect:

• Deal and opportunity data (names, values, stages, dates)
• Contact and account information
• Activity history (calls, emails, meetings)
• Custom fields and metadata
• User and team information

1.3 Automatically Collected Information

• Usage Data: Features used, pages visited, time spent, interactions
• Device Information: Browser type, operating system, IP address
• Cookies: Session identifiers and preference data (see Cookie Policy below)
• Log Data: Error reports, access times, referring URLs

2. How We Use Your Information

We use your information to:

• Provide the Service: Process deals, generate insights, provide coaching recommendations
• Improve the Service: Analyze usage patterns, develop new features
• Communicate: Send service updates, respond to inquiries, provide support
• Billing: Process payments and send invoices
• Security: Detect and prevent fraud, abuse, and security issues
• Compliance: Meet legal obligations and enforce our Terms of Service
• Analytics: Create aggregated, anonymized statistics (not tied to individuals)

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Contract Performance: Processing necessary to provide the Service
• Consent: Where you have explicitly agreed (e.g., marketing emails)
• Legitimate Interests: Improving our Service, fraud prevention
• Legal Obligations: Compliance with applicable laws

4. Data Sharing and Disclosure

4.1 We DO NOT Sell Your Data

We never sell your personal information or CRM data to third parties.

4.2 We Share Data With:

• Service Providers: Hosting (Vercel), database (Supabase), authentication (Clerk), payment processing (Stripe)
• CRM Providers: Data is synced with your connected CRM per your authorization
• Analytics Tools: Aggregated usage statistics (anonymized)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Your Team: Data is shared with other users in your organization

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication and access controls
• Regular security audits and updates
• Limited employee access to personal data
• Monitoring for suspicious activity

6. Data Retention

• Active Accounts: We retain your data while your account is active
• After Termination: We delete data 30 days after account closure unless:
  • Required by law to retain longer
  • Needed to resolve disputes or enforce our Terms
  • You request earlier deletion (see Your Rights below)
• Backup Data: Backups are retained for 90 days for disaster recovery
• Aggregated Data: Anonymized analytics may be retained indefinitely

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update incorrect or incomplete information
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for marketing communications

8. International Data Transfers

We are based in Jamaica, and our service providers may be located globally. Your data may be transferred to and processed in countries outside your own.

When transferring data from the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Cookie Policy

We use cookies and similar technologies to:

• Essential Cookies: Required for login and core functionality
• Analytics Cookies: Understand how you use the Service
• Preference Cookies: Remember your settings and choices

You can control cookies through your browser settings. Note that disabling cookies may affect Service functionality.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Know what personal information we collect, use, and share
• Delete personal information (with some exceptions)
• Opt-out of the "sale" of personal information (we don't sell data)
• Non-discrimination for exercising CCPA rights

12. Do Not Track

Some browsers have a "Do Not Track" feature. We currently do not respond to Do Not Track signals, as there is no industry standard for how to handle them.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last Updated" date at the top will be revised.

14. Contact Us