DealsVector uses only the data needed to run buyer-side discovery and research support.

Controller

The controller is Nitan Saman trading as DealsVector, 15 Dolomite Court, Arla Place, HA4 0GD, United Kingdom. Privacy requests can be sent to support@dealsvector.com.

Information you provide

If you submit a free screen or mandate, DealsVector processes the buyer reference or email address you provide, acquisition constraints, exclusions, and notes needed to provide the screen, apply usage limits, and maintain the service. If you contact DealsVector by email, we may process your email address and message content to respond.

Explore, Market Pulse, Free Screen, and Radar may process buyer criteria, saved filters, selected opportunities, email verification records, suppression state, and product usage events where needed to provide those services. Current governed inventory coverage uses supported current listings where access and customer-facing use are permitted. Buyer Lens, Digest, and Snapshot are not public launch products today.

Site operation

The site processes ordinary technical information such as browser requests and server logs to keep the service available, diagnose faults, protect the service, and operate the public pages and API routes. Free screen and outbound marketplace events are recorded server-side in first-party operational tables using hashed identifiers where practical, so the founder can see aggregate starts, completions, zero-result outcomes, and outbound clicks without browser tracking scripts. The Mandate Desk form sets a first-party, HTTP-only CSRF cookie named dv_mandate_csrf so the form can be submitted safely. The repository does not currently implement tracking pixels, tag managers, localStorage, sessionStorage, IndexedDB, or service-worker storage on the public site.

Marketplace and source data

DealsVector reviews permitted public acquisition-marketplace information and preserves source provenance where used in research outputs. Source facts remain attributable to the relevant source providers.

Marketplace handoff links may pass through a DealsVector outbound route to validate the destination, record an aggregate click event, and apply approved referral attribution. Referral identifiers identify DealsVector to a marketplace; they do not identify newsletter subscribers.

Payments

Stripe handles payment-card data for checkout. DealsVector stores order references and payment status, not full payment-card details.

Data sharing

DealsVector does not sell customer data. Information may be processed by infrastructure, payment, or communication providers as needed to operate the service and respond to support requests. The service uses Stripe for payment processing, Fly.io for hosting, and SendGrid for Radar verification, requested alerts and Mandate Desk transactional email when enabled. Radar stores the address needed to deliver requested service alerts separately from newsletter marketing. A Mandate Desk order stores the customer address needed for fulfilment and support.

Newsletter private pilot

The newsletter is currently a private founder-only pilot. Public newsletter signup and broadcast are unavailable. The pilot recipient is configured securely at runtime and the pilot send state does not retain the recipient address. SendGrid processes the address to deliver an explicitly invoked founder test message. Existing legacy newsletter contacts remain with MailerLite; they have not been migrated or enrolled into the pilot. MailerLite retains the actual addresses and its subscription and suppression records. Contact support@dealsvector.com to request help with an existing newsletter subscription or deletion. A minimal do-not-contact record may need to remain to honour an objection to marketing; this is separate from customer and transactional records. Radar, Free Screen, support correspondence and purchases do not enrol anyone into newsletter marketing. Newsletter opt-out does not itself cancel requested Radar service or essential order messages.

Newsletter consent and preferences

The newsletter remains a private founder pilot, with public broadcasts and new public signup disabled. The separate newsletter consent service processes an address in memory and at the email provider. Its local database stores a secret-keyed HMAC identity, provider contact identifier, consent state and timestamps, and hashed short-lived tokens; it does not store plaintext newsletter addresses. Activation requires explicit newsletter consent and a new confirmation. Unsubscribe suppresses the provider contact. Deletion removes the provider contact and unnecessary local consent data, retaining only a pseudonymous suppression record and timestamps to prevent accidental re-marketing. Legacy provider contacts are not imported into this service. Management requests give the same response whether an address exists or not.

Purposes and lawful bases

DealsVector processes mandate, order, payment-status, and delivery information to take steps before entering into a contract, perform the Mandate Desk contract, provide transactional service messages, handle support and cancellation requests, and preserve evidence of the contract and delivered service. It processes technical logs, security records, CSRF tokens, and limited operational records for legitimate interests in running and protecting the service. It may process records needed for accounting, tax, legal, or complaint handling where required by law or for legitimate interests. Marketing email requires a separate voluntary signup or other valid consent. Mandate Desk purchase is routed separately and does not itself create marketing consent.

Retention

DealsVector keeps personal and mandate information only for the purpose it was collected for, such as completing an order, providing support, protecting the service, meeting accounting or tax obligations, or preserving limited evidence of the contract and delivered service. Mandate Desk purchase does not create marketing consent, and identifiable customer mandate information is not used for public or social posts.

Your rights

You can ask for access to your personal data, correction, deletion, restriction, portability where applicable, or object to processing based on legitimate interests. Where consent is relied on, you can withdraw it at any time. You can complain to the UK Information Commissioner's Office at ico.org.uk.

Automated decisions

Mandate Desk uses structured screening and human review to prepare acquisition research. The repository does not implement solely automated decisions with legal or similarly significant effects on customers.

Contact

Privacy questions can be sent to support@dealsvector.com.