1. Introduction
Welcome to DealVue. Your privacy and the strict security of your proprietary data are our top priorities. This Privacy Policy explains how DealVue Inc., including its predecessors, subsidiaries, and associated platforms operating under the names AVANTVUE LLC and DataVue (collectively, "DealVue," "we," "us," or "our"), collects, uses, discloses, and protects information when you visit our website, use the Intelligent Deal Room platform, the AI Strategy Engine, or any related applications (collectively, the "Services").
This policy distinguishes between:
- Personal Information: Information that identifies, relates to, describes, or can be reasonably linked, directly or indirectly, to a specific individual or household (e.g., name, email, account credentials).
- Anonymized & Aggregated Data: Data derived from Application usage that has been mathematically de-identified and processed to prevent the identification of any individual or specific company, used primarily for our internal AI training, service improvement, and analytics.
By accessing or using any of our Services, you consent to the data practices described in this policy.
2. Information We Collect
We may collect and process the following types of information:
(a) Personal Information You Provide
- Contact and Identification Data: Name, email address, phone number, job title, company name, and account credentials submitted during registration.
- Payment Information: Billing details processed securely by our third-party payment processors (we do not store full credit card numbers).
- User Content: The confidential documents you upload, including pitch decks, financial models, cap tables, and legal agreements.
(b) Personal Information Collected Automatically
- Technical Data: IP address, browser type, device information, and log files collected when you interact with our Services.
- Usage & Analytics Data: Metrics regarding how you use the platform, such as pages viewed and features accessed.
- Investor Engagement Tracking: When you share documents via our Data Room, we collect analytics on how recipients interact with your files (e.g., time spent on specific pages, download history). We provide built-in transparency tools and disclaimers to help you clearly notify your investors and viewers that their engagement is being tracked.
(c) Anonymized & Aggregated Data
- In-House AI Training Data: We may process User Content to refine our proprietary, in-house machine learning models and improve the accuracy of industry benchmarks. This data is stripped of all personal identifiers and proprietary details before being used for internal training.
3. How We Use Your Information & Legal Basis
We process your information under the legal bases of contractual necessity, legitimate business interests, and your consent, for the following purposes:
(a) Operational & Strategic Processing
- Service Provision: To host your Data Room, authenticate access, and process transactions.
- AI Analysis & Deal Readiness: To process your User Content through our AI Strategy Engine to generate your "Deal Readiness Score" and provide strategic recommendations.
- Security & Enforcement: To detect fraud, prevent unauthorized access, and enforce our Acceptable Use Policy and Terms of Service. This includes the right to investigate anomalous system activity or suspected violations.
(b) AI Model Training & Benchmarking
- In-House Model Training: We train our own proprietary machine learning models in-house to generate our scores and improve industry benchmarks.
- Opt-Out Control: We provide users on our Paid Subscription tiers the right to opt out of having their anonymized User Content used for future AI model training. This can be managed directly within your account settings.
4. Sharing and Disclosure
We do not sell or "share" your Personal Information (as defined by the CCPA/CPRA). We disclose information only in the following strict circumstances:
- Service Providers & AI Processing: We utilize trusted enterprise vendors to facilitate our Services. For example, we use Google strictly for Optical Character Recognition (OCR) to read your documents. We operate under strict enterprise Zero Data Retention agreements where your data remains securely within DealVue’s isolated environment. Your confidential data and User Content are never shared with Google or any other third party to train their external or public AI models.
- Legal Compliance: If required by law, subpoena, or court order, or to protect the rights, property, and safety of DealVue and our users.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to strict confidentiality agreements.
5. Data Security
We implement enterprise-grade security measures designed to protect your highly sensitive information, including:
- Encryption & Application-Level Security: We use 256-bit AES encryption for data at rest and TLS 1.2+ for data in transit. For high-sensitivity fields and authentication tokens, we implement an additional layer of Application-Level Encryption (ALE) using AES-256-GCM. This ensures that even in the unlikely event of a database compromise, your most sensitive data remains unreadable ciphertext.
- Access Control: Granular permissions and multi-factor authentication options.
- Audits & Compliance: We employ rigorous security protocols, including annual third-party penetration testing and continuous infrastructure monitoring, as part of our commitment to achieving and maintaining SOC 2 compliance.
6. Your Privacy Rights
(CCPA/CPRA, GDPR, and Global)Depending on your jurisdiction (such as California, the EEA, or the UK), you have specific rights regarding your personal data:
- Right to Know & Access: Request details about the personal data we hold about you and how it is processed.
- Right to Correction: Request correction of inaccurate or incomplete data.
- Right to Deletion (Erasure): Request the deletion of your account and associated Personal Information, subject to certain legal exceptions.
- Right to Data Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format.
- Right to Opt-Out: Opt-out of marketing communications and, for Paid Users, opt-out of the anonymization of User Content for internal AI training.
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
To exercise these rights, please contact us at privacy@dealvue.com. We will verify your request in accordance with applicable law.
7. Data Retention
We retain Personal Information and User Content for as long as your account is active or as strictly necessary to provide our Services and fulfill legal obligations. We may retain mathematically anonymized and aggregated data indefinitely for research and algorithmic improvement purposes, subject to your opt-out preferences if you are a paid user.
8. International Transfers
Your information is transferred to and processed in the United States. If you are accessing our Services from the EEA, UK, or other regions with laws governing data collection and use, please note that we rely on legally provided mechanisms (such as Standard Contractual Clauses) to lawfully transfer data across borders.
9. Children's Privacy
Our Services are intended strictly for business use and are not directed to individuals under the age of 16. We do not knowingly collect personal information from minors.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our technology, AI practices, or legal obligations. If we make material changes to how we handle your Personal Information or User Content, we will notify you directly via the email address associated with your account before the changes take effect, in addition to updating the "Last Updated" date on this page.
11. Contact Us
If you have questions about this Privacy Policy, our data practices, or wish to exercise your legal rights, please contact our Data Privacy Officer:
Email: privacy@mydatavue.com
Address: DealVue Inc., 11279 Cornell Park Drive, Cincinnati, OH 45242