Privacy Policy

Last updated: October 6, 2026

This policy explains what information DealSim ("DealSim", "we", "us") collects when you use the website at dealsim.us and the DealSim app (the "Service"), how we use it, who we share it with, and your choices.

What we collect

• Account details: your email address, optional first name, and a securely hashed version of your password. We never store your password itself.
• Your work and progress: your answers, models, drafts, deal saves, lesson progress, review queue, AI coach settings and coach conversations, so you can pick up where you left off on any device.
• Billing: your plan, subscription status and AI Boost balance. Payments are handled by Stripe; we never receive or store your full card number.
• Security and usage data: the IP address and browser type of signed-in devices, sign-in times, and counts of AI requests. We use these to keep accounts secure, enforce plan limits and prevent abuse.

We don't use advertising trackers or analytics tools, and we don't sell or rent your personal information.

How we use it

• To provide the Service, save your work and show your progress.
• To send account emails such as email confirmation, password resets and important service or billing notices. We don't send marketing emails unless you opt in.
• To process payments, refunds and subscription changes.
• To protect the Service, for example by limiting sign-in attempts and the number of devices per account.

Service providers

We share information only with the providers we need to run the Service, and only what each one needs:

• Anthropic (AI): when you use AI features, the content you submit for that request (for example your answer to a question, your draft email or your coach question) is sent to Anthropic's API to generate a response. Your email address and payment details are not sent. Under Anthropic's commercial terms, API content is not used to train its models.
• Stripe (payments): handles checkout, card details, receipts and, where it acts as the seller of record, sales tax. Stripe processes this information under its own privacy policy.
• Resend (email): delivers account emails such as confirmations and password resets.
• Hetzner (hosting): our servers and database are hosted in Hetzner's data center in Nuremberg, Germany.
• Cloudflare (network and security): our website traffic passes through Cloudflare, which protects the site and speeds it up.

International transfers

Our servers are in Germany, and some of our providers process data in the United States and other countries. By using the Service, you understand that your information may be stored and processed outside your country, with safeguards provided by our providers' data-protection terms.

Cookies and local storage

We use one essential cookie to keep you signed in. Your browser also stores your light/dark theme choice locally. We don't use analytics or advertising cookies, so there's nothing to opt out of.

Retention

We keep your account data while your account is open. When you delete your account, your profile, saves and progress are deleted from our live database immediately and disappear from our backups within 30 days. We keep limited billing records where the law requires it.

Your choices and rights

• Download your data at any time from your account page.
• Delete your account at any time from your account page.
• Update your name and password from your account page.
• Depending on where you live (for example in California or the European Union), you may have additional rights, such as to access, correct, delete or object to processing of your data. Email [email protected] and we'll respond within 30 days.

Security

We use HTTPS everywhere, hash passwords with Argon2, store only hashes of sign-in tokens, limit sign-in attempts and keep our servers updated. No system is perfectly secure; if we learn of a breach affecting your data, we'll notify you as required by law.

Children

The Service is for adults 18 and older. It isn't directed to children, and we don't knowingly collect information from anyone under 18. If you believe a child has given us information, contact us and we'll delete it.

Changes and contact

We'll post updates here and notify you by email or in the Service about material changes. Questions or requests? Email [email protected].