Privacy Policy

1. What data we collect

Account data

• Email address, first name (at registration)
• Google account data (if you signed in with Google — handled by Clerk)
• Authentication is handled entirely by Clerk — Dealmo does not store user passwords

Usage data

• Chat history with the AI agent — stored server-side (Supabase), so your chat is available again after you sign back in
• Search queries passed to Firecrawl to fetch listings from the searched Marketplaces: OLX, Otomoto, Allegro, Vinted, Otodom, and Inter Cars
• Saved searches and price alerts, if you create them — stored in Supabase
• Your chosen interface language and settings
• Search count — used to enforce per-account limits over a 7 days period. Chat requires signing in, so limits are tied to the account, not the IP address
• Analytics events (e.g. opening the chat, sending a query, clicks) collected by PostHog — see §3

Payment data

The paid Plan Pro is active. Payments are handled entirely by Paddle.com Market Limited as our Merchant of Record — card details go directly to Paddle, and Dealmo has no access to them and does not store them. On Dealmo's side, only the subscription status (plan, validity period, subscription ID) tied to your account is saved.

2. How we use your data

• Providing the Service — searching listings on OLX, Otomoto, Allegro, Vinted, Otodom, Inter Cars, IKEA Second Hand, Oponeo, and Reserved, and generating AI agent responses
• Subscription management — processing payments and maintaining access to Plan Pro (Paddle)
• Communication — transactional emails (registration confirmation, password reset) sent via Clerk and Resend
• Security and limits — abuse detection, account protection (Clerk), and enforcing query limits (Upstash)
• Product improvement — analyzing usage patterns in PostHog. Events from signed-in users are tied to an account identifier (Clerk user ID) to understand usage paths; we do not sell this data
• Search reminders (marketing) — only with your separate consent given when creating the account (art. 6(1)(a) GDPR). We use your email address, the text of your last search and the date of your last activity. Withdraw any time in Settings → Notifications or via the link in every such email; the consent record is kept until withdrawal or account deletion.

3. Sharing data with third parties

Dealmo uses the following sub-processors. We do not sell personal data.

• Vercel — application server hosting; stores HTTP request logs
• Clerk — authentication and account management; stores email address, first name, and login data (Google)
• Anthropic (via Vercel AI Gateway) — processes AI queries; receives chat message content (with no additional personal data)
• Firecrawl — fetches listings from the searched Marketplaces (OLX, Otomoto, Allegro, Vinted, Otodom, Inter Cars); receives the search phrase
• Parallel (via Vercel AI Gateway) — web search engine used to check whether a given product model actually exists; receives only that product name, with no chat content
• Supabase — application database; stores chat history, saved searches, and subscription status, tied to an account identifier
• Paddle.com Market Limited — payment processing as our Merchant of Record; receives data needed to process payments and issue invoices, including email address
• Upstash Redis — caches search results and query limit counters (per user / IP)
• PostHog — product analytics; receives usage events and the account identifier of signed-in users. Data is processed in the EU region (eu.posthog.com)
• Resend — sends transactional emails; receives the recipient's email address and first name

4. Your rights (GDPR)

• Right of access to your data — email kontakt@dealmo.pl
• Right to rectification — Account Settings (Clerk)
• Right to delete your account — Settings → Delete account (or email kontakt@dealmo.pl)
• Right to data portability — export on request
• Right to lodge a complaint with the Polish data protection authority, UODO (uodo.gov.pl)

5. Data retention period

Account data (email, first name) is stored by Clerk until the account is deleted. Chat history and saved searches are deleted automatically when the account is deleted — we remove them from the Supabase database once we receive an account-deletion event from Clerk. Billing data is the exception (subscription status and Paddle identifiers), which we retain for the period required by accounting law — the legal basis is GDPR Article 17(3)(b) (legal obligation). For any other requests about your data, email kontakt@dealmo.pl. Search results and limit counters are cached by Upstash Redis for a short time. Analytics events are retained by PostHog under its own retention policy. Authentication data is retained by Clerk under its own retention policy.

6. Contact

For privacy matters: kontakt@dealmo.pl

This is a translation of the Polish original. In the event of any discrepancy, the Polish version governs.