Your conversations deserve care.

This notice covers the DealOrch website, product updates list and workspace. DealOrch is developed by Vasile Catana through S.R.L. CATANA ENGINEERING. For privacy questions or requests, email support@dealorch.com.

The public demonstration uses sample data and sends nothing. Google sign-in opens your workspace. Mailbox access requires separate authorization. Google Drive has a separate connection and imports only files you select. AI drafting uses Microsoft Azure. Email sending uses your connected Gmail account after your exact approval. Google verification is pending and provider access limits apply. Web subscriptions are processed through Paddle after you choose checkout.

Product update registration

If you join the list, we store your email, any optional use-case information, consent time, notice version, registration time and limited campaign tags. We use them for the access announcements and product updates you request. Consent is optional and is not consent to a paid subscription.

Your browser creates a private removal key; we store its one-way hash. Use the key to leave the list. Duplicate signups do not replace the key or extend retention. No confirmation email is automatically sent by the current registration service.

Accounts, messages and documents

Signing in stores your email, profile, Google account identifier where applicable, and hashed session credentials. The workspace stores tasks, exact proposals, decisions, outcome records, synced messages, documents, routines and preferences you add. Provider tokens are encrypted using the installation’s server key.

When you connect Gmail, the background refresh imports up to 30 inbox messages from the last 30 days, including sender, subject, text and conversation identifiers. Browsing the inbox can import additional conversations without that age limit. Opening a conversation can import up to 100 messages, including older and sent messages in that thread. These support review and replies you choose to prepare. Connecting Gmail does not grant Calendar access. We do not sell mailbox data or use it for advertising or general AI model training.

Disconnecting removes saved reusable mailbox credentials and stops future syncs. Previously imported messages and task records remain until removed or the account is deleted. You may also revoke access in your Google Account’s third-party connections.

AI drafting

When you request an AI draft, review, settings preview or assistant reply, relevant instructions, selected messages, business-file excerpts and saved preferences are sent to the configured AI service. Microsoft Azure hosts the model. The assistant conversation is sent with your request and is held in app-session memory. Drafts and review findings that you save remain in the workspace. The app disables response storage in its API requests; provider security and abuse-monitoring retention may still apply. See Microsoft’s Azure AI data-handling notice. The same Azure processing applies when you use AI drafting or review in a sample workspace; its email actions are simulated. Prewritten sample drafts use no AI provider. A model cannot approve an action.

Support and payments

If you email support, we receive your email address, message and any attachments you choose to send. Support email uses Microsoft 365. We use that information to answer your request and handle account, security or billing issues. Avoid including unnecessary customer data or secrets.

For web subscriptions, Paddle processes checkout, payment, tax and subscription information under its own privacy notice. DealOrch retains the identifiers and status needed to manage your subscription, rather than full payment-card details.

Cookies and measurement

The app uses essential session, sign-in-state and CSRF cookies. Mobile credentials use device secure storage. The website counts page views, button clicks, demo interactions and registrations in daily aggregates without advertising pixels or cross-site identifiers. IP addresses are processed for abuse prevention; rate-limit records use a keyed hash rather than the raw address.

Storage, access and service providers

Application records are stored in the deployment’s PostgreSQL database. New recovery backups are encrypted on the server and in a separate repository on an authorized operator’s Mac. Older, access-restricted server archives expire during the transition to encrypted backups. Authorized operators may access records for operation and support. Google provides sign-in and authorized mailbox APIs; Microsoft 365 handles support email; Microsoft Azure processes selected AI context. Expo push, if enabled, receives a generic update and task identifier rather than message content. Providers may process data in countries other than yours under their applicable arrangements.

We process requested account and support functions to provide the service, use consent for optional product and access updates and connected-account permissions, and use limited operational data to maintain security and reliability. Where data-protection law applies, you may contact us about the applicable basis and transfer arrangements. The service is intended for adults using business accounts, not children.

Retention and deletion

Product update registrations expire after 180 days. Daily maintenance removes expired registrations and rate-limit buckets, and aggregate counts older than 30 days. Backup retention is seven days and is applied after each successful backup or independent copy. If the operator’s Mac is offline, pruning its repository can be delayed. Deleted records may remain in recovery archives until expiry. Restored data stays isolated until deletion and retention checks are completed.

A separate recovery journal retains the record type, a random account or registration identifier and the deletion time to help remove deleted records during restoration. It contains no email addresses, message content or provider credentials. Encrypted independent copies preserve this history across database snapshots. Older deletions and deletions after the latest independent copy still require recovery checks.

Workspace records generally remain until removed or the account is deleted. Unresolved external outcomes may need review before recovery records can be deleted. Deleting local data does not recall delivered messages or delete the provider’s own copies. Support correspondence is retained as needed to address the request and any applicable recordkeeping obligations; it is separate from app-account deletion.

Your choices and requests

You can leave the list, disconnect a mailbox, revoke Google access, pause the workspace, edit or remove saved preferences, and use supported export/deletion controls in Settings. Email support@dealorch.com for access, correction, erasure, restriction or objection requests where applicable. We may verify your identity. Applicable rights to complain to a data-protection authority are not limited by this notice.

We will update this page when our data handling changes. The existing email-update consent record identifies notice version 2026-10-29; this update describes the current AI provider, selected business-file context and gated payment service. See contact details and terms of service.