Privacy policy

1. Data controller

SARL DEALRUN, 33 Boulevard du Mahatma Gandhi, Apt 7, Résidence Arkea, Sainte-Clotilde, 97490 Saint-Denis, La Réunion, France. Contact: dealgo.ae@gmail.com — +262 693 46 36 28. Managing director: Riaz AMIRALY.

2. Data we collect

• Account data (optional): name, e-mail address, password (stored hashed), preferred language and theme, favourite stores, interests, shopping list, alert preferences and web-push subscription.
• Advertiser data: company name, contact details, linked stores, orders, invoices, payment status. Card details are processed exclusively by Stripe and never reach our servers.
• Usage data: an anonymous visitor identifier stored in your browser, pages and catalogs viewed, product searches, clicks on deals, banners and sponsor mentions, device type (mobile / desktop), approximate location if you allow the “Near you” feature, and technical logs (IP address, browser).
• AI assistant conversations: the messages you send to the assistant and the answers generated, linked to a session identifier.
• Communications: messages you send us by e-mail.

3. Purposes and legal bases

• Providing the Service (browsing catalogs, shopping list, favourites, alerts) — performance of the contract / your consent for notifications.
• Managing advertiser accounts, orders, payments and invoicing — performance of the contract and legal obligations (accounting, tax).
• Measuring audience and campaign performance (views, clicks, unique visitors) shared with advertisers in aggregated, non-identifying form — our legitimate interest in operating and financing a free service.
• Improving the Service, detecting product prices and comparing them — legitimate interest.
• Security, fraud prevention and legal compliance — legitimate interest and legal obligations.

4. Recipients

Data is processed by our team and by the following processors acting on our instructions: our hosting and object-storage provider (Emergent Labs, Inc. — https://emergent.sh); Stripe (payments); AI model providers used for OCR and the assistant (Google Gemini, OpenAI via a secured gateway) which receive catalog images and your assistant messages, never your account details; e-mail and push-notification delivery providers. Advertisers only receive aggregated statistics about their own content. We never sell personal data.

5. Transfers outside the European Union

Some processors are located outside the EU (United States). Transfers are covered by the European Commission's standard contractual clauses or an adequacy decision (EU–US Data Privacy Framework).

6. Retention

• Account data: for the life of the account, then deleted within 30 days of deletion.
• Usage data and statistics: 25 months, then aggregated.
• AI assistant conversations: 12 months.
• Advertiser orders and invoices: 10 years (legal accounting obligation).
• Web-push subscriptions: until you unsubscribe or the browser revokes them.

7. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time (for example by disabling notifications in your alert settings). To exercise these rights write to dealgo.ae@gmail.com or to SARL DEALRUN, 33 Boulevard du Mahatma Gandhi, Apt 7, Résidence Arkea, Sainte-Clotilde, 97490 Saint-Denis, La Réunion, France. We reply within one month. You may also lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).

8. Security

Data is transmitted over HTTPS, passwords are hashed, access to administration tools is restricted and logged. Despite these measures no system is perfectly secure; please notify us immediately of any suspected breach.

9. Minors

The Service is not directed at children under 15. We do not knowingly collect data from them.

10. Changes

We may update this policy; the date of the latest version is shown below. Significant changes will be announced on the Service.