Privacy Policy

DealPilot (the "Service") is provided by our team to help enterprise users manage customer lists and send outbound business development emails through their own Gmail / Microsoft account. This Policy explains how we collect, use, and protect your data.

1. Data We Collect

• Account information: name, email, and password (stored encrypted) provided at registration.
• Customer list data you upload or import (company name, contact person, email, etc.).
• If you choose to link a Google or Microsoft account for sending emails, we obtain data within the scope you authorize via OAuth, including sending emails, reading email delivery/reply status (used to detect bounces and replies), and your basic account identification information (name, email).

2. Google User Data Policy

The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use data obtained through the Gmail API only to send email on your behalf and to determine sending results (success / bounce / read reply) — functions you have explicitly requested. We do not use this data for advertising purposes, and we do not resell or provide it to third parties for other purposes.

3. How We Use Data

• To provide and operate the Service's core features (list management, email sending and tracking).
• To detect and filter invalid or bounced contact information, improving sending quality.
• For system operations, troubleshooting, and security protection.

4. Data Storage and Security

Your data is stored in an access-controlled server environment and is isolated by tenant (account) — no account can access another account's data. OAuth authorization credentials are stored encrypted and are used solely to perform sending actions you initiate on your behalf.

5. Data Sharing

We do not sell your personal data. We share data with necessary service providers only when required by law or necessary to operate the Service (such as cloud hosting or email delivery infrastructure), and we require them to comply with equivalent confidentiality obligations.

6. Your Rights

• You may revoke the Service's access authorization at any time in your Google Account's Security and third-party access settings.
• You may contact us to request access to, correction of, or deletion of your account and data.

7. Changes to This Policy

If there are material changes to this Policy, we will post the updated version and its effective date on this page.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].