Privacy Policy

1.1 Information You Provide

• Account registration data: name, email address, password (hashed via bcrypt)
• Payment information: processed and stored by Stripe — we do not store credit card numbers
• Profile information: professional role, industry, experience level (if provided)
• DealBot conversation data: user inputs during AI simulation training sessions
• Diagnostic responses: answers provided during Cognitive Latency and AI-powered sales diagnostics
• User-generated content: any materials uploaded or created within the Platform

1.2 Information Collected Automatically

• Usage data: pages visited, features used, session duration, click patterns
• Device information: browser type, operating system, device identifiers
• Log data: IP address, access times, referring URLs
• Performance data: DealBot session scores, TAS measurements, learning progress metrics
• Cookie data: session cookies for authentication, analytics cookies (if enabled)

1.3 Information from Third Parties

• Authentication providers: Google OAuth profile data (name, email, profile picture) if using Google Sign-In
• Payment processor: Stripe provides transaction confirmation data and subscription status

We use collected information for:

• Providing, maintaining, and improving the Services
• Processing transactions and managing subscriptions
• Personalizing your educational experience and AI-generated content
• Generating performance analytics and progress tracking
• Communicating with you about your account, services, and updates
• Responding to your requests and providing customer support
• Enforcing our Terms of Service and protecting against misuse
• Conducting research and development to improve AI accuracy and educational outcomes
• Complying with legal obligations

The Platform uses artificial intelligence to process user data in the following ways:

• AI System Processing: User queries and conversation context are transmitted to our AI engine (via API) for generating educational responses. Conversations may be used to improve response quality but are not used to train third-party AI models.
• DealBot Session Data: User inputs during simulation sessions are processed by AI to generate realistic training scenarios and performance feedback. Session data is stored for progress tracking.
• TAS Scoring: The Tactical Acuity Score system uses AI to analyze user performance across multiple dimensions. TAS scores are stored in your account and used to personalize training recommendations.
• Diagnostic Tools: The Cognitive Latency Diagnostic and AI-powered sales diagnostic process user responses to generate assessments.

We do not sell your personal information. We may share your information with:

• Service providers (Stripe for payment processing, Vercel for hosting, Anthropic for AI processing) who are contractually bound to protect your data
• Law enforcement or government agencies when required by law or to protect our rights
• Business successors in the event of a merger, acquisition, or sale of assets (with prior notice to users)
• Your employer or organization if you are using the Platform under an enterprise subscription (T4/T5), but only to the extent authorized by your enterprise agreement

• Account data is retained for as long as your account remains active
• Upon account deletion, personal data is removed within 30 days, except where retention is required by law
• DealBot session data and TAS scores are retained for the duration of your subscription
• Diagnostic data from non-authenticated users is retained for 12 months
• Aggregated, anonymized data may be retained indefinitely for research and improvement purposes

Depending on your jurisdiction, you may have the following rights:

• The right to access your personal data
• The right to correct inaccurate personal data
• The right to delete your personal data
• The right to restrict processing of your personal data
• The right to data portability
• The right to object to processing
• The right to withdraw consent
• The right to lodge a complaint with a supervisory authority

California Residents (CCPA/CPRA): You have the right to know what personal information we collect, use, and disclose. You have the right to request deletion of your personal information. You have the right to opt out of the sale of your personal information (we do not sell personal information). You have the right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us using the information provided in the Contact section.

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including:

• Encrypted data transmission (TLS/HTTPS)
• Password hashing (bcrypt)
• JWT-based session authentication
• Role-based access controls
• Regular security reviews

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

The Services are operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Services, you consent to such transfer, storage, and processing.

The Platform uses essential cookies for authentication and session management. We may also use analytics cookies to understand Platform usage patterns. You can control cookie preferences through your browser settings. Essential cookies cannot be disabled without affecting Platform functionality.

For questions about this Privacy Policy, please contact:

JDL Sales LLC, DBA Dealflow AI
Email: legal@dfaimedia.com