DoneDeal Privacy Policy

When you access or use our Services, we automatically collect certain information about your device, usage, and interactions with the Platform.

We may receive personal information about you from third-party sources, including:

• Authentication Providers: If you choose to log in using a third-party authentication service (such as Google), we receive information from that service, such as your name and email address, as permitted by your settings with that service.
• Business Data Providers: We may obtain information from third-party data providers to verify business information, confirm entity status, or enrich our understanding of users and potential users.
• Transaction Participants: Other users or third parties involved in transactions may provide information about you through the Platform.
• Publicly Available Sources: We may collect information from publicly available sources, such as business registries, professional directories, and social media profiles.
• Advertising Partners: We may receive information from advertising networks and data partners about your interactions with our advertisements on third-party platforms.

• Creating and managing your account
• Facilitating transactions and deal workflows
• Generating, storing, and managing transaction documents
• Processing payments and billing
• Providing customer support and responding to inquiries
• Communicating with you about your account, transactions, and the Services
• Enabling collaboration with counterparties and other transaction participants

• Analyzing usage patterns and trends to improve functionality
• Developing new features, products, and services
• Conducting research and analytics to understand user needs
• Testing and troubleshooting new features and updates
• Generating aggregated, anonymized, or de-identified data for benchmarking and market insights (as described in our Terms of Service)

• Sending transactional communications (e.g., account confirmations, transaction updates, security alerts)
• Providing customer support and responding to your requests
• Sending administrative notices about the Services, including policy updates

• Sending promotional communications about our products, services, and offerings (where permitted by law and subject to your preferences)
• Displaying targeted advertisements on our website and third-party platforms
• Conducting marketing campaigns and measuring their effectiveness
• Analyzing user demographics and interests to improve our marketing efforts
• Retargeting and remarketing to users who have visited our website or interacted with our content
• Building audience profiles and lookalike audiences for advertising purposes

Note: You can opt out of marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us. Opting out of marketing communications will not affect transactional or service-related communications. For information about opting out of targeted advertising, see Section 6.

• Protecting the security and integrity of the Services
• Detecting, preventing, and responding to fraud, unauthorized access, and other harmful activities
• Enforcing our Terms of Service and other policies
• Verifying user identity and preventing unauthorized account access

• Complying with applicable laws, regulations, and legal processes
• Responding to lawful requests from governmental authorities
• Establishing, exercising, or defending legal claims
• Protecting our rights, property, and safety, and the rights, property, and safety of our users and others

We may share your information when you direct us to do so or provide your consent, including when you:

• Invite counterparties, attorneys, brokers, or other participants to collaborate on a transaction
• Share documents or deal information with other users through the Platform
• Connect your account to third-party services or integrations

We share personal information with third-party service providers who perform services on our behalf, including:

• Cloud Hosting and Infrastructure Providers: To store and process data securely
• Payment Processors: To process payments and manage billing
• Authentication Services: To enable secure login and account access
• Analytics Providers: To analyze usage patterns and improve the Services
• Customer Support Tools: To provide customer service and support
• Email and Communication Services: To send transactional and marketing communications
• Data Verification Services: To verify business information and entity status

Our service providers are contractually obligated to use personal information only for the purposes of providing services to us and to maintain appropriate security measures.

When you use the Services to facilitate a transaction, we may share relevant information with other participants in that transaction, including:

• Counterparties (buyers, sellers, and their representatives)
• Attorneys, accountants, and other professional advisors
• Brokers and intermediaries
• Signatories and other parties required to execute documents
• Third parties providing consents, payoff letters, or other transaction-related documents

You control what information is shared with transaction participants through your use of the Platform's sharing and collaboration features.

We may share certain information with advertising partners and marketing service providers to:

• Display targeted advertisements on third-party platforms
• Measure the effectiveness of advertising campaigns
• Conduct retargeting and remarketing activities
• Analyze user demographics and interests
• Build audience segments and lookalike audiences

This may include sharing identifiers (such as hashed email addresses, device identifiers, or IP addresses) with advertising platforms. Under some state privacy laws, this type of sharing may be considered a "sale" or "sharing" of personal information. You can manage your advertising preferences as described in Section 6 and Section 11.

We may disclose personal information if we believe it is necessary to:

• Comply with applicable laws, regulations, or legal processes (such as subpoenas, court orders, or government requests)
• Protect the rights, property, or safety of DoneDeal, our users, or others
• Detect, prevent, or address fraud, security issues, or technical problems
• Enforce our Terms of Service or other agreements

If DoneDeal is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your personal information may be transferred or disclosed as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for any purpose, including research, analytics, benchmarking, and marketing. This information is not subject to the restrictions in this Privacy Policy.

We are committed to protecting the confidentiality of your transaction and document data. Specifically:

• No Unauthorized Sharing: We do not share your confidential transaction or document data with third parties except as necessary to provide the Services, as directed by you, or as required by law.
• No Marketing Use of Confidential Content: We do not use the substantive content of your confidential documents or deal data for marketing, advertising, or promotional purposes. (Note: This does not apply to account-level information such as your name, email, or company, which may be used for marketing as described in Section 3.4.)
• Data Segregation: Your transaction and document data is logically segregated from other users' data within our systems.
• Access Controls: Access to your confidential data is restricted to authorized personnel and systems necessary to provide the Services.

As described in our Terms of Service, we may use aggregated, anonymized, or de-identified data derived from transactions facilitated through the Platform for benchmarking, analytics, and platform improvement purposes. This data cannot reasonably be used to identify you, your organization, or your specific transactions.

Third parties (such as counterparties, attorneys, or signatories) may access transaction and document data only when you share it with them through the Platform's collaboration and sharing features. You control what information is shared and with whom.

We implement technical and organizational security measures designed to protect your confidential data, as described in Section 8.

We may allow third-party advertising and analytics providers to collect information about your use of the Services through cookies, pixels, and similar technologies. These third parties may use this information to:

• Analyze usage patterns and trends
• Deliver targeted advertisements on our behalf
• Measure the effectiveness of advertising campaigns
• Build user profiles for advertising purposes
• Create audience segments and lookalike audiences

Third-party providers that may collect information through our Services include advertising networks, social media platforms, and analytics providers.

You can manage your cookie preferences in the following ways:

• Browser Settings: Most web browsers allow you to control cookies through your browser settings, including blocking or deleting cookies. Please note that blocking certain cookies may impact the functionality of the Services.
• Opt-Out Tools: You may opt out of interest-based advertising through industry opt-out programs such as the Digital Advertising Alliance (DAA) at www.aboutads.info/choices or the Network Advertising Initiative (NAI) at www.networkadvertising.org/choices.
• Mobile Device Settings: You can control advertising on mobile devices through your device settings, including limiting ad tracking or resetting your advertising identifier.

Our Services do not currently respond to "Do Not Track" browser signals. However, you can manage tracking through the cookie choices described above and the privacy rights described in Section 11.

In the preceding 12 months, we have collected the following categories of personal information:

We collect personal information from the sources described in Section 2, including directly from you, automatically through your use of the Services, and from third parties.

We collect and use personal information for the business and commercial purposes described in Section 3.

We may disclose personal information to the categories of third parties described in Section 4, including service providers, transaction participants, and advertising partners.

We may "share" personal information (as defined under California law) with advertising partners for cross-context behavioral advertising purposes. This includes sharing identifiers and internet activity information with advertising networks and social media platforms to deliver targeted advertisements.

You have the right to opt out of this sharing. To opt out, you may contact us at privacy@itsadonedeal.ai.

We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

We may collect certain categories of sensitive personal information, such as account login credentials. We use sensitive personal information only for purposes permitted under California law, including to provide the Services you request, and do not use or disclose it for purposes requiring an opt-out right.

California residents have the following rights under the CCPA/CPRA:

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected, the sources of collection, the purposes for collection, and the categories of third parties with whom we share personal information.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing: You can opt out of the sale or sharing of your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: You can limit our use of sensitive personal information to purposes permitted under the CCPA/CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, please contact us at privacy@itsadonedeal.ai or call us at (305) 209-7855. You may also designate an authorized agent to make a request on your behalf.

We will verify your identity before processing your request. Depending on the nature of your request, we may ask you to provide information that matches information we have on file.

We retain personal information as described in Section 9.

We do not currently offer financial incentives for the collection, sale, or deletion of personal information. If we offer any such programs in the future, we will provide notice and obtain your opt-in consent as required by law.