Privacy Policy
Effective September 20, 2026
Who we are
Kushnir Media Group operates Deal GPT, a business CRM available through deal-gpt.app and the Deal GPT mobile app. This policy covers our collection, use, disclosure, and handling of personal information through those services. Contact us at kushnirmediagroup@deal-gpt.app.
Information processed
Account information includes names, email addresses, account identifiers, roles, sign-in information, and connected-service authorizations. Business records may include customer and business names, phone numbers, email and postal addresses, relationships, deal stages, notes, activities, and communications. When supplied for an authorized business workflow, applications and documents may include dates of birth, government or tax identifiers, financial statements, bank information, transaction histories, and other confidential information. Please supply only information you are authorized to provide and that is needed for the workflow.
Device, communications, and operational information
The service processes requests, IP addresses, browser or device information, session cookies, settings, security events, errors, and activity records to operate and protect the service. Connected email, SMS, calling, and team-chat features may process message contents, recipients, attachments, call metadata, and audio needed for a call. Microphone access is requested for supported calling features and can be revoked in device settings.
How information is used
We use information to authenticate users, enforce workspace permissions, maintain CRM records, display dashboards, manage applications and documents, support business communications and follow-up, provide support, troubleshoot problems, and protect the service. Where enabled, document extraction and analysis send relevant document content to processing providers, including OpenAI. Automated output can be inaccurate and requires review before use in a business decision.
Sharing and connected services
Information is accessible to authorized workspace users and administrators according to their permissions. We use service providers for hosting, storage, authentication, processing, and communications, including Cloudflare, Supabase, Google services, OpenAI, Heymarket, and RingCentral where the corresponding features are enabled. Configured team-chat and other integrations may also receive information needed for their functions. Sending messages, submitting applications, or sharing files can disclose their contents to the recipients and business partners selected or configured by authorized users. These recipients and independently connected services have their own privacy practices. We may also disclose information when required by law or to protect rights, safety, and service security.
Workspace responsibility
When a business uses Deal GPT to manage information about its customers, that business determines why the records are collected, the recipients of its communications and submissions, and its applicable retention requirements. Contact the relevant business about its use of your information. You may also contact us for assistance identifying and routing a request. Workspace users must obtain any required permissions before importing records, uploading documents, or contacting recipients.
Retention and deletion
We retain information while it is needed to provide the service and support the applicable workspace, and as necessary for security, audit, dispute resolution, and legal obligations. Retention depends on the record type, workspace requirements, and applicable law; there is no single retention period for all CRM records. You may request account closure or deletion of personal information by contacting support and your workspace administrator. We will verify your identity and authority, assess any required retention, and communicate the outcome. Deleting or disabling an account does not automatically erase business records that the workspace must retain. Copies held in backups or by message recipients and independent connected providers may persist under their own retention processes.
Your choices and privacy requests
Email kushnirmediagroup@deal-gpt.app to request access, correction, export, deletion, restriction, or other privacy assistance, or to withdraw a consent you previously gave. The rights available and applicable exceptions depend on your location and our role in processing the information. Include your account email and the type of request; do not email passwords, government identifiers, or banking documents. You can revoke connected-service permissions through the provider account settings, ask your administrator to disconnect an integration, and control microphone access through device settings. For business marketing messages, use the unsubscribe or opt-out method provided in the message.
Security and international processing
We use access controls, authentication, and HTTPS to help protect information. No service or transmission method can guarantee absolute security. Information may be processed in the United States and other locations where our service providers operate. Contact us with questions about a specific workflow or provider.
Children and demonstration data
Deal GPT is intended for authorized business use and is not directed to children. Contact us if you believe a child has provided personal information. The isolated reviewer demo uses fictional CRM records and omits sensitive identity, address, and banking fields; its restrictions do not describe the data capabilities of a production workspace.
Policy updates
We may update this policy as the service or its data practices change. The effective date identifies the current version. Material changes will be communicated as required by applicable law.