Privacy Policy

1. Introduction

CompStakDeal Manager ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer relationship management (CRM) application.

2. Information We Collect

We collect information in the following ways:

2.1 Account Information

When you create an account, we collect your name, email address, and password. Your password is securely hashed and never stored in plain text.

2.2 CRM Business Data

You may enter and store business information in Deal Manager, including:

• Accounts/Companies: Company names, addresses, phone numbers, websites, industry information, and notes
• Contacts: Names, email addresses, phone numbers, job titles, LinkedIn profiles, and associated companies
• Deals: Deal names, values, stages, dates, property information, lease terms, and related notes
• Activities: Meetings, calls, emails, tasks, and other interactions you log with contacts and accounts
• Prospects: Potential business opportunities and related tracking information

Any data that is entered by you belongs to you. We act as a data processor, storing and processing this information on your behalf. However, any data that originated from CompStak is not covered by this privacy policy. For example, when you convert a lead to a prospect, the lead data provided by CompStak such as tenant name, current address, current lease expiration, sqft range, rent range, expiration date range, space type, and any other transaction or property data is not considered data that you own. Additionally, any contact information that Deal Manager provides to you, as well as news articles, are not considered data that you own.

2.3 Google Contacts Data

If you choose to connect your Google account, we access your Google Contacts to help you import business contacts into Deal Manager. We only access contact names, email addresses, phone numbers, and organization information. We do not access your emails, calendar, or other Google services.

2.4 Third-Party Data Integration

Deal Manager integrates with news services to display news articles for your accounts. This data is provided by third parties and displayed within the Deal Manager application to help you identify business opportunities.

2.5 Usage Data

We collect information about how you interact with our application, including pages visited, features used, and actions taken. This helps us improve our services and user experience.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our CRM services
• Store and organize your business contacts, accounts, and deals
• Import your Google Contacts into Deal Manager when you explicitly request this action
• Display relevant commercial real estate data from integrated sources
• Generate reports and insights based on your CRM data
• Communicate with you about your account and our services
• Ensure the security and integrity of our application

4. Data Ownership

You own your data. All business information you enter into Deal Manager—including accounts, contacts, deals, and activities—remains your property. We do not claim any ownership rights over your CRM data. We only use your data to provide and improve our services to you.

5. Google API Services User Data Policy

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request access to the Google Contacts scope (contacts.readonly) necessary for importing your contacts.
• We do not use Google user data for advertising purposes.
• We do not sell Google user data to third parties.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• Your Google Contacts data is only used to display contacts for import and to create contact records in Deal Manager when you explicitly select and confirm the import.

6. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal and business information against unauthorized access, alteration, disclosure, or destruction.

• All data is encrypted in transit using TLS/SSL.
• Data is stored in secure, access-controlled databases.
• Google OAuth tokens are stored securely and encrypted at rest.
• We do not store your Google password or any third-party passwords.
• Access to your CRM data is restricted to your account only—other users cannot see your data.

7. Data Sharing

We do not sell, trade, or otherwise transfer your personal or business information to third parties. We may share information only in the following circumstances:

• With your explicit consent
• With service providers who assist in operating our application (e.g., hosting providers), under strict confidentiality agreements
• To comply with legal obligations or court orders
• To protect our rights, privacy, safety, or property

8. Your Rights

You have the right to:

• Access all the personal and business information we hold about you
• Export your CRM data at any time
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Revoke Google Contacts access at any time through your Google Account settings or within Deal Manager
• Disconnect third-party integrations from Deal Manager at any time

9. Data Retention

We retain your information for as long as your account is active or as needed to provide you services:

• CRM Data: Your accounts, contacts, deals, and activities remain in your account until you delete them or delete your account.
• Imported Contacts: Contacts imported from Google remain in Deal Manager until you delete them. If you disconnect your Google account, previously imported contacts are retained but we can no longer fetch new contacts from Google.
• Account Deletion: If you request account deletion, we will delete all your data within 30 days, except where we are required to retain certain information for legal or compliance purposes.

10. Cookies and Tracking

We use essential cookies to maintain your login session and remember your preferences. We do not use third-party advertising cookies or sell your browsing data to advertisers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and, where appropriate, notifying you via email.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: info@compstak.com