Privacy Policy

1. Summary

This policy explains what Deal Analyzer, LLC, a Florida limited liability company (“we”, “us”), collects when you use the Deal Analyzer website at dealanalyzer.co and the app at dealanalyzer.co/app.html, together the “Service”; why we collect it; who handles it for us; how long we keep it; and what you can ask us to do with it.

2. What we collect

If you use the free calculators

Nothing. There is no account, we never ask for an email address, and there is no card. The figures you type stay in your browser.

If you subscribe

When you buy a paid plan we create a license record on our license server. This is everything it holds, where it lives, and why:

Your deal data

Everything you type into the calculators, every property you save and every report you generate stays in your browser and is never sent to us, with two exceptions that you choose each time: the AI deal report and the AI photo repair estimate, described next. Clearing your browser data deletes it, and we cannot recover it. Keep your own copy of anything you need — a PDF report, for example.

If you use the AI features (Pro plan)

Both features are optional and part of the Pro plan. Nothing is sent for a report or an estimate unless you press the button that asks for one.

The AI deal report. When you ask for a report, the figures on the calculator screen you are looking at are sent to our AI server and from there to Anthropic, the company that provides the AI: every box on that screen (including the ones the app filled in for you and the ones the simple view hides), the choices you made there (including the state and, if you chose one, the town or county), the results, the calculator’s verdict and notes, the name of the screen and the language you use the app in. We do not send your property’s name or address, anything else you typed in words, your saved properties or other screens. To check your plan, your app also sends our AI server the signed license token it already holds. Anthropic never receives your email address, your license key or that token: it receives a code that stands for your account instead. The figures are not stored on our server: they are held in memory only while the report is written, then discarded. The written report is held on our server only until your app collects it, and for no more than 24 hours. After that it is kept only in your browser, until you clear it.

The AI photo repair estimate. The photos you upload are sent to our AI server and from there to Anthropic for analysis, together with the property facts you enter for the estimate (such as the state, square footage, bedrooms, bathrooms, year built and finish level), the room or area you tag each photo with, any short note you add to a photo, and the language you use the app in. Location data stored in a photo file is removed before the photo leaves your browser. We do not send your street address or the owner’s name, so please leave them out of your photo notes. As for a report, your app also sends our AI server the signed license token it already holds, and Anthropic never receives your email address, your license key or that token. The photos, facts and notes are not stored: they are held in memory only while the estimate is written and are discarded immediately after; if you cancel before the analysis starts, they are discarded without being sent. The written estimate is held on our server only until your app collects it, and for no more than 24 hours.

If you connect your own Anthropic account (an “API key”) for photo estimates instead, your photos, those facts and notes, and the key go directly from your browser to Anthropic; we never receive or store any of them, and that use is governed by your own agreement with Anthropic. The key is kept only in your browser.

How many reports and estimates you have used, and what they cost us, is kept on our AI server under your account, to apply your plan’s limits, with a short record of each request (such as your email address, which feature, when, and whether it counted). Each request’s record is deleted 24 hours after the request, and the counts within 40 days after the end of the month in which you last used an AI feature. If you have a subscription, the app checks with our AI server how much of your AI allowance is left when it opens and when you come back to it. That check sends the signed license token your app already holds, and nothing else.

Anthropic says that it does not use data sent through its API to train its models, and that it deletes that data within 30 days, unless it is flagged for a safety review or the law requires it to keep it longer.

If you write to us

If you email [email protected], we keep the email so we can answer you and have a record of what was asked and done.

3. Why we use it

Only to run the Service for you:

• to issue your license key and email it to you, and to re-send it when you ask;
• to confirm you have an active subscription when you sign in;
• to let you set, use and reset a password;
• to bill you through Stripe and to keep your license in step with your subscription;
• to give each customer one free trial;
• to write an AI deal report or an AI repair estimate when you ask for one, and to apply your plan’s limits on them;
• to send you billing, security and legal notices, including notice of material changes to our terms or this policy;
• to answer you when you write to us; and
• to protect the Service against abuse, for example by rate limiting sign-in attempts.

We do not use your information for advertising or profiling, and we do not sell it.

4. Who we share it with

We share personal information with the five service providers below, only as needed to run the Service, and we keep a copy of the emails we send you in the mailbox described after the list. We do not share it with anyone else, except where the law requires it (for example a valid legal order) or where it is necessary to protect the Service and its users.

• Cloudflare — hosts the website and the app, runs our license server and our AI server, stores license records (Cloudflare KV) and AI usage records, and routes incoming email to us.
• Stripe — takes your payment, sends receipts, and runs the subscription and the customer portal you reach from “Manage plan”.
• Resend — delivers the transactional emails we send: license keys, password notices, billing and security notices.
• Anthropic — writes the AI deal report and the AI photo repair estimate, only when you use one of these optional Pro features. See “If you use the AI features (Pro plan)” in section 2 for what is sent and how long it is kept.
• Google (Gmail) — hosts our administrative mailbox, which receives mail sent to [email protected] and holds the copies described next.

Copies of the emails we send you. A copy of every email we send you — your license key, a key re-send, a password notice, a billing or security notice — is kept in our administrative mailbox, hosted on Google (Gmail). The copy is our record of exactly what was sent to whom. It is used for nothing else, and it is kept under that mailbox’s own retention rather than the 90-day schedule in section 6.

If the business is ever sold or merged, your information may pass to the new owner, who will be bound by this policy for as long as they hold it.

5. Cookies, analytics and logs

Cookies and browser storage

We set no cookies. The app uses your browser’s local storage to keep your deal data, your saved properties, your license status, your acknowledgment of the first-run notice and of the AI notices, the AI reports you receive and, if you add one, your own Anthropic key on your device. None of it is sent to us, apart from the license check described above, the AI allowance check and, only when you use them, the AI features, both described in section 2.

Analytics and trackers

None. There are no analytics scripts, no advertising pixels and no third-party trackers on any page of the Service.

Server logs

Cloudflare serves and protects the site. To do that it sees your IP address and request metadata — the page requested, the time, and your browser type — and keeps them briefly under its own retention practices. Our license server and our AI server use your IP address only for short-lived rate limiting of sign-in, key and AI requests; those counters expire within minutes. We do not keep a log of who visited.

Email

The email we send is transactional only: your license key after purchase; a copy when you ask for your key to be re-sent; a notice when a password is set or changed; billing or security notices; and notice of material changes to our terms or this policy. We do not send marketing email. If that ever changes, it will be opt-in only, and every marketing message will carry an unsubscribe link.

6. How long we keep it

• License records — your license key, plan, status, Stripe ids and timestamps, with the email address on the record — are kept while the subscription is active and are deleted 90 days after it ends, together with the subscription and checkout mappings that point at the record. For licenses issued before September 5, 2026, the checkout mapping has no automatic expiry and is deleted on request.
• Password hash — if you set a password, its salted one-way hash is deleted 90 days after your last subscription ends.
• Email index — the index that links your email address to your license keys, which is how we re-send a lost key, is deleted 90 days after your last subscription ends as well.
• You can ask us to delete any of the above sooner under section 7.
• Figures sent for an AI deal report, and photos, facts and notes sent for an AI repair estimate, are not stored: they are held in memory only while the report or estimate is written.
• The written AI report or estimate is kept on our server until your app collects it, and for no more than 24 hours. The record of each AI request is deleted 24 hours after the request.
• AI usage counts — how many AI reports and estimates you have used, and what they cost us — are deleted within 40 days after the end of the month in which you last used an AI feature.
• Free-trial codes — the one-way codes that record that an email address or a card has had a free trial are kept for 3 years from the start of that trial, for trials started on or after October 14, 2026. They are kept after the license record is deleted, and even if you ask us to delete your other data, because they exist only to stop repeat free trials. They cannot be turned back into the email address or the card, and we use them for nothing else.
• Stripe keeps its own payment records under its own policy and its legal obligations. We cannot delete those.
• Rate-limiting counters expire within minutes.
• Copies of the emails we send you (section 4) are kept under that mailbox’s own retention, and are deleted on request.
• Emails you send us are kept for as long as we need them to help you and to keep a record of what was done.
• Deal data in your browser is under your control. It stays until you clear it.

7. Your rights

Wherever you live, you can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Email [email protected]. We will answer within 30 days, free of charge, and there is no penalty for asking. To protect your account we will usually ask that the request come from the email address on the subscription.

Deleting your data ends any active subscription’s license, because we cannot confirm a subscription we have no record of. If you want to keep using the Service to the end of a period you have paid for, cancel first from “Manage plan” and ask us to delete your data afterward.

The free-trial codes in section 6 are kept, as that section says.

You can update your billing details in the Stripe customer portal, which opens from “Manage plan” in the app. To change the email address on your license, email us. If you believe we have mishandled your information, you can complain to your state attorney general or privacy regulator; we would appreciate the chance to put it right first.

8. Security

• Your license is a token signed with a private key that is held as a Cloudflare secret and never leaves our server. Your browser verifies the signature, so a key cannot be forged.
• All traffic between your browser and the Service is encrypted in transit (HTTPS).
• If you set a password, we store only a salted hash made with PBKDF2 at 600,000 iterations. The password itself is never stored, and we cannot read it back.
• Sign-in and key requests are rate limited to slow down guessing.
• Card numbers and bank account numbers are handled entirely by Stripe and never touch our systems.

No system is perfectly secure. If a security breach affects your personal information, we will notify you without undue delay and within any deadline the law sets — in Florida, 30 days.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it.

10. Changes

We may update this policy. When we do, we post the new version, with its effective date, at dealanalyzer.co/privacy.html, and we email subscribers about material changes before they take effect. If you keep using the Service after the effective date, the new policy applies to you.

11. Contact