Privacy Policy

DealProof is a Canadian-based operation and is accountable for personal information under its control. For privacy questions, access, correction, deletion, consent-withdrawal requests, or complaints, contact dealproofappcanada@hotmail.com. We may need to verify your identity before responding.

Account and authentication: email address, Supabase account identifiers, confirmation state, phone number and phone-verification status, and account timestamps.

Billing and entitlement: Stripe customer and subscription identifiers, subscription status, trial and billing-period dates, plan state, analysis usage, reservation and credit records, and promotional claim history. Stripe processes payment details; DealProof does not intentionally receive or store complete payment-card numbers. Where required for subscription-law notices, billing address country and province may be used to determine the applicable notice obligation.

Listing and analysis: listing title, category, price, mileage or engine hours, make/model/trim, location, source, URL, condition, options, history, notes, description, title/lien information, selected photos, AI-assisted analysis results, and report inputs.

Browser and service information: authentication/session technologies, local saved analyses, and limited request, security, diagnostic, and infrastructure information where generated by the application or service providers.

We process information to operate accounts, authenticate users, verify phones, provide requested AI analysis, enforce usage and entitlement rules, process subscriptions, prevent fraud and promotional abuse, secure and troubleshoot the service, respond to support requests, meet legal or accounting obligations, determine whether a Quebec subscription notice is required, and communicate essential service information.

We identify these purposes before or when information is collected. Necessary account, security, billing, legal-notice, and requested-service processing is separate from optional advertising or marketing. DealProof does not automatically enroll account or subscription users in marketing email.

Phone numbers and verification status are used for verification, fraud and abuse prevention, promotional eligibility enforcement, and account or analysis access control. DealProof may retain a derived anti-abuse identity and promotional claim history for those purposes without exposing the underlying implementation secret. Some records may need to persist to prevent repeated promotional claims.

When you request an analysis, submitted listing text and selected photos may be sent to OpenAI to generate the requested AI-assisted insights. Current application calls use OpenAI's store:false setting. DealProof does not claim that AI inspected an item or verified hidden, mechanical, ownership, title, lien, accident, or seller-reported facts.

Photos are processed transiently for the analysis request and are not intentionally persisted by DealProof in localStorage or its database after analysis, subject to temporary processing, provider handling, backups, security logs, and legal requirements. Avoid uploading unnecessary personal information, documents, faces, addresses, phone numbers, or licence plates.

V1 saved analyses are stored in browser localStorage on the device and browser profile. They are not cloud-synced by DealProof. Clearing browser storage may delete them; reopening one does not call AI or consume a credit.

Information is retained only as long as reasonably necessary for identified purposes, service operation, security, fraud and promotion-abuse prevention, billing and accounting, dispute resolution, legal obligations, and legitimate operational needs. DealProof does not promise a fixed retention period or immediate deletion of every record when an account is deleted.

DealProof uses Supabase for authentication and database services, Stripe for subscription billing, OpenAI for requested AI analysis, Cloudflare for hosting and infrastructure, and a configured SMS provider for phone verification where enabled, which may include Twilio. Google AdSense and Google's consent technology may process information when advertising is enabled. Providers process information for relevant service purposes and may process or store it outside your province or Canada, where it may be subject to other laws. DealProof does not claim that all data remains in Canada.

DealProof uses essential authentication/session technologies and browser local storage for saved analyses. Stripe and other providers may use their own technologies when their services are opened or used. The AdSense verification/loader is present, but manually placed advertising is currently disabled. If advertising is enabled, eligible Free users may see ads and Google may process device, browser, cookie, and advertising information subject to consent and legal requirements. Trial and Pro users are intended to remain ad-free.

DealProof uses reasonable administrative and technical safeguards, server-side access controls, provider security features, and limited collection appropriate to the current service. No safeguard is perfect and DealProof does not guarantee security. Do not submit information that is not necessary.

You may contact dealproofappcanada@hotmail.com to request access to personal information under our control, correction of inaccurate information, deletion where applicable, information about use or disclosure, withdrawal of consent where applicable, or to ask a privacy question or make a complaint. Legal, contractual, security, billing, fraud-prevention, and dispute-resolution needs may limit a request.

DealProof will assess and handle privacy incidents and notify individuals or regulators of qualifying breaches as required by applicable law.

DealProof does not knowingly market its paid contractual service to people who lack legal capacity. Account, password-reset, email-verification, security, billing, and legally required trial-ending notices are transactional service communications. DealProof does not implement marketing-email functionality in this pass. If promotional commercial electronic messages are introduced, DealProof will address consent, sender identification, contact information, records, and unsubscribe requirements under applicable law, including CASL.

We may update this Policy when practices, providers, or legal requirements change. Material changes will be communicated where required. This Policy was last updated September 12, 2026.