Legal
Privacy Policy
Last updated: 21 April 2026 · Effective immediately.
This policy explains what personal data we collect when you visit dealcompanion.ai, join our waitlist, book a call, or (once available) use the DealCompanion product — and what we do with it. We try to keep this short and plain. Where we use legal terms, we explain them.
1. Who we are
DealCompanion is a product of Pragmatic Identity sp. z o.o. ("we", "us", "our"), a company registered in Poland at ul. Piłkarska 10, 55-114 Malin (KRS 0000922559, NIP 9151819429, REGON 520003533). We are the data controller for the personal data described in this policy — that means we decide what data is collected and how it's used.
You can contact us at privacy@dealcompanion.ai about anything in this policy, including requests to exercise your rights (see section 8).
2. What we collect and why
When you visit dealcompanion.ai
Our hosting provider and analytics tool automatically record:
- Your IP address (used only to derive country-level location and to detect abuse; not stored with your waitlist entry)
- Browser type and version, device type, referring URL
- Pages visited, time spent, and basic interaction events
Legal basis: our legitimate interest in understanding how visitors use the site and in keeping it secure. We do not use this data to identify you individually.
When you join the waitlist
Our waitlist form (hosted by Tally — see section 4) collects:
- Your work email address
- Your first name
- Your role (selected from a list)
- An optional free-text response to the question "What made you sign up today?"
Legal basis: your consent, given when you submit the form. You can withdraw this consent and have your data deleted at any time by emailing us.
When you book a call via cal.com
Our scheduling tool (Cal.com — see section 4) collects:
- Your name and email
- Your selected meeting time and timezone
- Anything you optionally type into the booking notes field
- Calendar metadata so we can both attend the meeting
Legal basis: steps taken at your request prior to entering a contract, and your consent for any optional fields.
When you email us or reply to us
We keep a record of your correspondence so we can respond, continue the conversation, and remember context.
Legal basis: our legitimate interest in responding to you and maintaining our relationship.
When you use the DealCompanion product (future)
The product is not yet publicly available. Once it is, we will collect data necessary to operate it, which may include:
- Account information (name, email, company)
- Content you upload or input (call transcripts, decks, notes, deal context)
- Conversations between your prospects and the AI assistant you create
- Usage and telemetry data
Before we launch the product, we will update this policy to describe the processing in detail, including specific retention periods, subprocessors, and any additional legal bases. We will notify waitlist subscribers by email before these changes take effect.
3. What we do with it
We use your personal data to:
- Reply personally to your waitlist submission or message
- Let you know when DealCompanion becomes available
- Run and improve the website and the product
- Debug issues and prevent abuse or security incidents
- Comply with legal obligations (e.g. tax, accounting)
We do not sell your personal data. We do not share it with advertisers. We do not use it to build profiles for third parties. We use AI models to operate the product, but your data is not used by us to train publicly available models (see section 4 for how our AI processors handle your data).
4. Who we share it with
We use a small number of trusted service providers ("subprocessors") to operate the website and waitlist. They process data on our instructions and under written agreements that meet EU data protection requirements.
| Service | What it does | Where it's based |
|---|---|---|
| Tally | Hosts the waitlist form and stores submissions | EU (Belgium) |
| Cal.com | Schedules calls and syncs with calendar | US (EU SCCs apply) |
| Vercel | Hosts and serves the website | US (EU SCCs apply) |
| Cloudflare | DNS, CDN, and edge security in front of the website | Global edge (EU SCCs apply) |
| Vercel Analytics | Cookieless, aggregated traffic analytics | US (EU SCCs apply) |
| Resend | Sends email to you from our domain | US (EU SCCs apply) |
We'll add the AI model providers (e.g. Anthropic, OpenAI) to this list when the product launches. Those providers will not use your data to train their public models; we enter into data processing agreements that prohibit this.
We may also share data when required by law (subpoena, court order), or to protect our rights, safety, and the rights and safety of others. We will narrow such disclosures to what is strictly necessary.
5. International transfers
Some of our subprocessors are based outside the European Economic Area (EEA). Where this is the case, we rely on Standard Contractual Clauses approved by the European Commission and, where applicable, the EU–US Data Privacy Framework, to ensure your data receives an equivalent level of protection.
6. How long we keep it
- Waitlist data: Until you ask us to delete it, or until 12 months after we publicly launch DealCompanion and have contacted you — whichever comes first.
- Call bookings and email correspondence: Up to 24 months from the last interaction, unless needed longer to resolve an ongoing matter.
- Website analytics: Aggregated data kept for up to 12 months; individual-level events kept no longer than 90 days.
- Product data (once available): As described in a future version of this policy and in your customer agreement.
- Data we must retain by law (e.g. invoicing records): retained for the minimum statutory period.
7. Security
We protect your personal data with industry-standard technical and organizational measures, including encryption in transit (HTTPS/TLS), access controls, logging, and regular review of our subprocessors' security practices. No system is perfectly secure, but we take the safety of your data seriously.
If we ever discover a personal data breach that's likely to affect your rights, we will notify you and the competent supervisory authority (UODO) in line with GDPR Articles 33 and 34.
8. Your rights
Under the GDPR and Polish data protection law, you have the right to:
- Access the personal data we hold about you
- Correct it if it's wrong
- Delete it (the "right to be forgotten")
- Restrict or object to how we process it
- Receive a copy in a portable format (data portability)
- Withdraw consent at any time (without affecting the lawfulness of prior processing)
- Not be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you
To exercise any of these rights, email privacy@dealcompanion.ai. We respond within 30 days.
If you believe we're processing your data unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:
9. Cookies and similar technologies
dealcompanion.ai uses a minimal set of cookies and storage:
- Strictly necessary cookies required to serve the website and process your form submissions. These cannot be disabled.
- Analytics — we use a privacy-respecting, cookieless analytics provider where possible. If we change this and start using cookies for analytics, we will update this policy and present a consent banner before setting any non-essential cookies.
You can control cookies at the browser level. See the documentation for Chrome, Safari, or Firefox.
10. Children's data
DealCompanion is a B2B product intended for professional use. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe we've received data from a minor, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. When we make material changes — such as adding a new subprocessor, changing the legal basis for processing, or expanding data collection (particularly when the product launches) — we will:
- Update the "Last updated" date at the top
- Publish the new version here
- Email waitlist subscribers and active users at least 14 days before the change takes effect, unless an earlier update is required to fix an inaccuracy or comply with law
12. Contact
Questions, concerns, or requests relating to your personal data: