Privacy Policy

1. Summary

This policy explains what Deal Analyzer, LLC, a Florida limited liability company (“we”, “us”), collects when you use the Deal Analyzer website at dealanalyzer.co and the app at dealanalyzer.co/app.html (also served at app.southoceanrealty.com), together the “Service”; why we collect it; who handles it for us; how long we keep it; and what you can ask us to do with it.

2. What we collect

If you use the free calculators

Nothing. There is no account, we never ask for an email address, and there is no card. The figures you type stay in your browser.

If you subscribe

When you buy a paid plan we create a license record on our license server. This is everything it holds, where it lives, and why:

Your deal data

Everything you type into the calculators, every property you save and every report you generate stays in your browser. It is never sent to us. Clearing your browser data deletes it, and we cannot recover it. Keep your own copy of anything you need — a PDF report, for example.

If you write to us

If you email [email protected], we keep the email so we can answer you and have a record of what was asked and done.

3. Why we use it

Only to run the Service for you:

• to issue your license key and email it to you, and to re-send it when you ask;
• to confirm you have an active subscription when you sign in;
• to let you set, use and reset a password;
• to bill you through Stripe and to keep your license in step with your subscription;
• to send you billing, security and legal notices, including notice of material changes to our terms or this policy;
• to answer you when you write to us; and
• to protect the Service against abuse, for example by rate limiting sign-in attempts.

We do not use your information for advertising or profiling, and we do not sell it.

4. Who we share it with

We share personal information with the four service providers below, only as needed to run the Service, and we keep a copy of the emails we send you in the mailbox described after the list. We do not share it with anyone else, except where the law requires it (for example a valid legal order) or where it is necessary to protect the Service and its users.

• Cloudflare — hosts the website and the app, runs our license server, stores license records (Cloudflare KV), and routes incoming email to us.
• Stripe — takes your payment, sends receipts, and runs the subscription and the customer portal you reach from “Manage plan”.
• Resend — delivers the transactional emails we send: license keys, password notices, billing and security notices.
• Microsoft 365 — hosts the mailbox that receives mail sent to [email protected], and the mailbox that holds the copies described next.

Copies of the emails we send you. A copy of every email we send you — your license key, a key re-send, a password notice, a billing or security notice — is kept in our administrative mailbox, hosted on Microsoft 365. The copy is our record of exactly what was sent to whom. It is used for nothing else, and it is kept under that mailbox’s own retention rather than the 90-day schedule in section 6.

If the business is ever sold or merged, your information may pass to the new owner, who will be bound by this policy for as long as they hold it.

5. Cookies, analytics and logs

Cookies and browser storage

We set no cookies. The app uses your browser’s local storage to keep your deal data, your saved properties, your license status and your acknowledgment of the first-run notice on your device. None of it is sent to us, apart from the license check described above.

Analytics and trackers

None. There are no analytics scripts, no advertising pixels and no third-party trackers on any page of the Service.

Server logs

Cloudflare serves and protects the site. To do that it sees your IP address and request metadata — the page requested, the time, and your browser type — and keeps them briefly under its own retention practices. Our license server uses your IP address only for short-lived rate limiting of sign-in and key requests; those counters expire within minutes. We do not keep a log of who visited.

Email

The email we send is transactional only: your license key after purchase; a copy when you ask for your key to be re-sent; a notice when a password is set or changed; billing or security notices; and notice of material changes to our terms or this policy. We do not send marketing email. If that ever changes, it will be opt-in only, and every marketing message will carry an unsubscribe link.

6. How long we keep it

• License records — your license key, plan, status, Stripe ids and timestamps, with the email address on the record — are kept while the subscription is active and are deleted 90 days after it ends, together with the subscription and checkout mappings that point at the record. For licenses issued before September 5, 2026, the checkout mapping has no automatic expiry and is deleted on request.
• Password hash — if you set a password, its salted one-way hash is deleted 90 days after your last subscription ends.
• Email index — the index that links your email address to your license keys, which is how we re-send a lost key, is deleted 90 days after your last subscription ends as well.
• You can ask us to delete any of the above sooner under section 7.
• Stripe keeps its own payment records under its own policy and its legal obligations. We cannot delete those.
• Rate-limiting counters expire within minutes.
• Copies of the emails we send you (section 4) are kept under that mailbox’s own retention, and are deleted on request.
• Emails you send us are kept for as long as we need them to help you and to keep a record of what was done.
• Deal data in your browser is under your control. It stays until you clear it.

7. Your rights

Wherever you live, you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email [email protected]. We will answer within 30 days, free of charge, and there is no penalty for asking. To protect your account we will usually ask that the request come from the email address on the subscription.

Deleting your data ends any active subscription’s license, because we cannot confirm a subscription we have no record of. If you want to keep using the Service to the end of a period you have paid for, cancel first from “Manage plan” and ask us to delete your data afterward.

You can update your billing details in the Stripe customer portal, which opens from “Manage plan” in the app. To change the email address on your license, email us. If you believe we have mishandled your information, you can complain to your state attorney general or privacy regulator; we would appreciate the chance to put it right first.

8. Security

• Your license is a token signed with a private key that is held as a Cloudflare secret and never leaves our server. Your browser verifies the signature, so a key cannot be forged.
• All traffic between your browser and the Service is encrypted in transit (HTTPS).
• If you set a password, we store only a salted hash made with PBKDF2 at 600,000 iterations. The password itself is never stored, and we cannot read it back.
• Sign-in and key requests are rate limited to slow down guessing.
• Card and bank details are handled entirely by Stripe and never touch our systems.

No system is perfectly secure. If a security breach affects your personal information, we will notify you without undue delay and within any deadline the law sets — in Florida, 30 days.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it.

10. Changes

We may update this policy. When we do, we post the new version, with its effective date, at dealanalyzer.co/privacy.html, and we email subscribers about material changes before they take effect. If you keep using the Service after the effective date, the new policy applies to you.

11. Contact