Trust & Security

• Email + password and Google sign-in are supported.
• Sessions are managed by our authentication provider with JWT-based access tokens.
• Role-based access control inside the platform. External members (e.g. buyers, lenders) see only the Deal Rooms they are explicitly added to.
• Privileged platform actions are gated to designated super-admin roles and audited.

Each subscriber organization is a logically isolated tenant. Application-level row-level-security policies and database-level guard rails reject reads and writes that cross tenant boundaries. Cross-tenant write attempts are blocked at the database layer and logged for review.

Enlarge

Data separation

Separate by design

• Your firm

  Other firms have no access either way

• Agent workspaces

  Each with its own contacts, notes and leads

• Deal Rooms

  Files hidden until shared

Nothing crosses these walls. Belonging to the same firm doesn't open another agent's workspace.

Describes default platform behavior as of October 2026. Firm settings may vary.

View picture

• Customer content is stored in managed Postgres and object storage operated by our hosting provider.
• After a subscription ends, the Organization Owner can request an export of the Customer's data for 30 days (Platform Terms 4.6).
• Customer Data is deleted within 90 days after the subscription ends (Platform Terms 4.7).
• Database backups are taken daily and kept for 7 days. File storage is not included in database backups, so deleted files cannot be restored.
• Signed agreements and signature evidence, billing and tax records, and security, audit and AI governance records are kept for 7 years after the subscription ends.
• Full details are in the Platform Terms and the Platform Privacy Notice.

Deal Pros relies on a small set of subprocessors to deliver the service, including our managed hosting and database provider, an AI gateway, email delivery, and e-signature providers. See the current subprocessor list and the Data Processing Addendum.

Every email, newsletter, campaign and article send passes two independent checks: one in the app and one on the server. Recipients who aren't the sending agent's own contacts, or who unsubscribed, are dropped automatically.

Enlarge

Fort Knox Double Airlock

Two independent locks before anything leaves

• Agent sends

  Emails and newsletters, email campaigns, article sends

• Airlock 1: in the app

  Only the agent's own contacts and mailbox are offered

• Airlock 2: on the server

  Checks every recipient again, independently of the app

• Dropped automatically

  Not the agent's contact, unsubscribed or suppressed

• Sent and logged

  From your firm's own mailbox. Every send is recorded

• If one lock were ever bypassed, the second one still stops it.

  Being in the same firm never unlocks another agent's contacts.

Agents are separate businesses. Their contacts stay theirs, even inside the same firm.

Describes default platform behavior as of October 2026. Firm settings may vary.

View picture

The Service uses essential cookies and browser storage to keep you signed in, remember your preferences and protect against misuse. It does not use advertising cookies or advertising tracking pixels. Public blog pages keep an anonymous view count without cookies. See the Platform Privacy Notice (section 10) and our Website Privacy for the public website cookie disclosure.

To exercise data-access, correction, or deletion requests, contact privacy@dealpros.co. For security questions or to report a concern, contact support@dealpros.co.

We welcome responsible disclosure of security issues. Send a clear description and steps to reproduce to support@dealpros.co. Please give us a reasonable time to investigate and remediate before any public disclosure.