Privacy Policy

1. Contact

Questions about this policy or your information: help@dealflowbridge.com.

2. Information we collect

We collect information that you provide directly, information generated when you use the Service, and information from third parties as described below.

2.1 Information you provide

• Account and profile: such as name, email address, password or authentication credentials, phone number, company or firm name, role (for example, investor or sponsor), and other details you add to your profile or onboarding flows.
• Accreditation and eligibility: information you or verification vendors supply to evidence accredited investor status or similar qualifications where we or sponsors request it (for example, documents or attestations processed by third-party tools).
• Listings and deal materials: content sponsors upload or submit about offerings (descriptions, financial summaries, images, documents).
• Communications: messages you send us (for example, support requests) and, where the Service allows, communications between users.

2.2 Information collected automatically

• Device and usage data: such as IP address, browser type, device identifiers, general location derived from IP, pages viewed, referring URLs, and timestamps.
• Cookies and similar technologies: we and our vendors may use cookies, local storage, pixels, and similar technologies to maintain sessions, remember preferences, measure performance, and improve the Service. You can control cookies through your browser settings; disabling certain cookies may limit functionality (for example, staying signed in).
• Session analytics and replay:on production environments we may use third-party tools (such as Smartlook) that record how users interact with the Service (for example, page flows and on-screen activity) to debug issues and improve usability. These tools may process data in the European Economic Area or other regions according to the vendor's configuration. Avoid entering sensitive information in free-text fields if you are concerned about on-screen capture.

3. How we use information

We use information to:

• Provide, operate, secure, and improve the Service;
• Create and manage accounts, authenticate users, and enforce our Terms of Use;
• Facilitate introductions and information sharing between investors and sponsors when you take actions on the Service (for example, expressing interest in an offering);
• Send transactional and service-related messages (such as account notices, security alerts, and responses to support requests);
• Send optional marketing or product updates where permitted and, where required, only with your consent (you may opt out of non-transactional marketing as described in communications we send);
• Comply with law, respond to legal process, and protect rights, safety, and security;
• Analyze usage trends in aggregated or de-identified form.

4. How we share information

We do not sell your personal information for money. We may share information in the following circumstances:

• Sponsors and counterparties: when you indicate interest in an opportunity, request information, or otherwise use features designed to connect parties, we may share relevant profile and contact details with the applicable sponsor (or their representatives) so they can respond. Sponsors handle your information under their own policies once shared.
• Service providers: vendors that assist us with hosting, databases, authentication, email delivery, document storage, accreditation verification, analytics, session replay, customer support, and security monitoring. They may access information only as needed to perform services for us and are bound by contractual obligations.
• Legal and safety: when we believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of DealflowBridge, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.
• With your direction: when you ask us to share information or consent to sharing.

5. SMS and phone communications

If we offer text-message programs and you opt in, we may send messages related to the Service (for example, verification or notifications) in accordance with applicable law and any program terms presented at signup. Message and data rates may apply. You can opt out of marketing texts as instructed in those messages; transactional messages may continue where necessary to operate your account.

6. International users

We operate primarily from the United States. If you access the Service from outside the United States, you understand that your information may be processed, stored, and transferred to the United States and other countries where privacy laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards for cross-border transfers.

7. Retention

We retain information for as long as your account is active, as needed to provide the Service, and as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of data and the context in which we process it.

8. Your choices

You may review and update certain account information through in-product settings. Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise rights, contact help@dealflowbridge.com. We will respond consistent with applicable law. You may appeal certain decisions as provided by law.

California residents: we do not sell personal information as that term is commonly defined under the California Consumer Privacy Act, as amended. You may have additional rights under California law; contact us using the email above.

9. Security

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit for browser sessions, access controls, and reliance on reputable cloud infrastructure. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

You can reduce risk by using a strong, unique password, enabling multi-factor authentication where available, and guarding against phishing (we will not ask you for your password by email). Log out from shared devices when finished.

10. Breach notification

If we become aware of a breach that compromises personal information subject to notification laws, we will notify affected individuals and regulators as required by applicable law, which may include email or a notice on the Service.

11. Children

The Service is not directed to children under thirteen (13), and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take steps to delete it.

12. Third-party sites

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those sites. We encourage you to read their privacy policies before providing information.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. For material changes, we may provide additional notice (for example, by email or a banner on the Service). Continued use after the effective date constitutes acceptance of the updated policy where permitted by law.