How we handle your information

Who operates DealRuntime

DealRuntime is a transaction operating system for brokered commercial deals, operated under the DealRuntime name. It is in private development and access is granted directly. For any question about this policy, write to dino@deal-runtime.com.

This website

The walkthrough form asks for two things: your work email address and your company. There is one optional field where you can tell us what you would like to pressure test. We ask for nothing else, and nothing else is stored from the form. We use it to arrange the walkthrough and for related business communication about it. We do not sell it, and we do not add you to a marketing newsletter.

When you arrive we record the campaign parameters present in the address you arrived on (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the external referring website if there was one, and which version of the page you saw. There is no cookie, no advertising identifier, no third party analytics service and no third party script of any kind on this site. Your browser sends your IP address with every request; we use it only to rate limit submissions and measurement, and we do not store it alongside your request. Walkthrough requests are stored in Airtable, which we use to review them.

What the service processes

When you use the DealRuntime service, the following may be processed:

• Account information, such as your name, your work email address and the credential material that signs you in.
• Organization and workspace information, including which organization you belong to and what you are permitted to do within it.
• Commercial and deal information you enter or upload, including counterparties, documents, evidence, notes and the record of decisions taken.
• Data from integrations you connect, for as long as the connection is active.
• Email data from a Gmail mailbox you explicitly connect, described in the next section.
• Operational and security records, including request logs and an append only audit trail of actions taken in the service.

Gmail

Connecting a mailbox is something you do deliberately, through Google, and never something DealRuntime does on your behalf. If you do not connect a mailbox, none of this applies to you.

When you connect Gmail, DealRuntime accesses your email using Google authorized read only access. We use it to:

• synchronize new messages into the workspace you connected the mailbox to,
• analyse message content for deal context,
• extract evidence and context that supports a transaction record,
• detect commercial activity relevant to a deal you are working on,
• help you, as the authorized user, manage transaction workflows.

DealRuntime cannot send email, reply, draft into your mailbox, delete, label or otherwise modify anything in it. The permission we request is read only, and there is no send capability in the product. You can disconnect the mailbox at any time from the settings screen, which stops further synchronization and discards the stored authorization.

Google API Services User Data Policy

DealRuntime’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

Processing happens on our servers, not in your browser. Credentials and integration tokens are held server side, encrypted at rest, and are not returned to the browser or displayed anywhere in the product. We apply technical and organisational controls we consider reasonable for the kind of information involved, including least privilege database access and an append only audit trail.

No service can promise perfect security, and we do not. What we can say is what we actually do, which is what this section describes.

Sharing

We do not sell your information, and we do not share it for advertising.

Providers necessary to operate the product may process information on our behalf. That includes our hosting provider, our database provider, and the providers behind features you use, such as an AI model provider when a feature you have asked for needs one. We do not claim that no third party ever touches your data, because that would not be true of any hosted product, including this one.

AI

Some features send relevant context to an AI provider in order to produce the result you asked for, such as a summary, a suggested next action or a draft for you to review.

AI output is a proposal. It has no authority in the system: it cannot approve anything, accept terms, waive a fee, authorise a payment, send a message, or change a record on its own. Decisions that carry commercial consequence are taken by people and recorded as such.

Retention and deletion

We retain information for as long as it is needed to provide the service, to meet obligations that legitimately apply to us, and to maintain the audit and security records the product depends on. Where deletion is appropriate and lawful, write to us and we will act on it.

We do not publish fixed retention periods here, because stating a number we do not yet operate to would be worse than saying plainly what governs the decision.

Your controls

You can disconnect any integration, including Gmail, from the settings screen at any time. You can ask us about the information held about you, ask for a correction, or ask for deletion, by writing to dino@deal-runtime.com. Requests about the walkthrough form can also go to contact@deal-runtime.com.

Changes

If this policy changes in a way that matters, we will change the effective date at the top of this page and, where the change is significant and we can reach you, tell you directly.