DealsVector uses only the data needed to run buyer-side discovery and research support.

Controller

The controller is Nitan Saman trading as DealsVector, 15 Dolomite Court, Arla Place, HA4 0GD, United Kingdom. Privacy requests can be sent to support@dealsvector.com.

Information you provide

If you submit a free screen or mandate, DealsVector processes the buyer reference or email address you provide, acquisition constraints, exclusions, and notes needed to provide the screen, apply usage limits, and maintain the service. If you contact DealsVector by email, we may process your email address and message content to respond.

Radar, Buyer Lens, Digest, or Snapshot surfaces may process buyer criteria, saved filters, selected opportunities, and product usage events where needed to provide those services if they are later clearly offered on the site. They are not public launch products today.

Site operation

The site processes ordinary technical information such as browser requests and server logs to keep the service available, diagnose faults, protect the service, and operate the public pages and API routes. Free screen and outbound marketplace events are recorded server-side in first-party operational tables using hashed identifiers where practical, so the founder can see aggregate starts, completions, zero-result outcomes, and outbound clicks without browser tracking scripts. The Mandate Desk form sets a first-party, HTTP-only CSRF cookie named dv_mandate_csrf so the form can be submitted safely. The repository does not currently implement tracking pixels, tag managers, localStorage, sessionStorage, IndexedDB, or service-worker storage on the public site.

Marketplace and source data

DealsVector reviews permitted public acquisition-marketplace information and preserves source provenance where used in research outputs. Source facts remain attributable to the relevant source providers.

Marketplace handoff links may pass through a DealsVector outbound route to validate the destination, record an aggregate click event, and apply only approved referral attribution where configured. Without approved configuration, links route to the normal canonical source URL.

Payments

Stripe handles payment-card data for checkout. DealsVector stores order references and payment status, not full payment-card details.

Data sharing

DealsVector does not sell customer data. Information may be processed by infrastructure, payment, or communication providers as needed to operate the service and respond to support requests. The implemented service uses Stripe for payment processing, Fly.io configuration for hosting/runtime infrastructure, and SendGrid for Mandate Desk transactional email only when that email feature is enabled. A MailerLite integration exists for voluntary subscriber capture through the separate /subscribe route and for legacy non-Mandate paid-subscriber handling; a Mandate Desk purchase is routed separately and does not itself create marketing consent.

Purposes and lawful bases

DealsVector processes mandate, order, payment-status, and delivery information to take steps before entering into a contract, perform the Mandate Desk contract, provide transactional service messages, handle support and cancellation requests, and preserve evidence of the contract and delivered service. It processes technical logs, security records, CSRF tokens, and limited operational records for legitimate interests in running and protecting the service. It may process records needed for accounting, tax, legal, or complaint handling where required by law or for legitimate interests. Marketing email requires a separate voluntary signup or other valid consent; buying Mandate Desk does not create marketing consent.

Retention

DealsVector keeps personal and mandate information only for the purpose it was collected for, such as completing an order, providing support, protecting the service, meeting accounting or tax obligations, or preserving limited evidence of the contract and delivered service. Mandate Desk purchase does not create marketing consent, and identifiable customer mandate information is not used for public or social posts.

Your rights

You can ask for access to your personal data, correction, deletion, restriction, portability where applicable, or object to processing based on legitimate interests. Where consent is relied on, you can withdraw it at any time. You can complain to the UK Information Commissioner's Office at ico.org.uk.

Automated decisions

Mandate Desk uses structured screening and human review to prepare acquisition research. The repository does not implement solely automated decisions with legal or similarly significant effects on customers.

Contact

Privacy questions can be sent to support@dealsvector.com.