Privacy Policy

Effective date: [EFFECTIVE DATE]

Last updated: November 2026

Your inbox, your calendar, your to-dos. That's a lot of trust. Here's exactly what we do with it.

This policy explains how Oath Innovation Inc., a corporation organized in [STATE OF ORGANIZATION] and based in Miami, Florida ("Oath Innovation," "we," "us"), handles personal information through dealt.today, app.dealt.today, and the Dealt app (together, "Dealt"). Dealt is a product of Oath Innovation.

The short version

• We never sell your data. We don't run ads, and we don't use your data to train generalized AI models.
• Right now, before launch, we collect only your email address and the interest you choose on our signup form.
• When the app launches, Dealt reads the apps you connect to find what you owe people. It only writes back when you swipe or approve.
• Nothing is sent to another person without your OK.
• You can disconnect an app, or delete your account and your data, at any time.

Who this policy covers

This policy applies to visitors to dealt.today, people who join our early-access list, and people who use the Dealt app once it launches. Dealt is pre-launch today. Sections that describe the app tell you what will happen when the app is available. We will update this policy before the app launches if anything described here changes.

What we collect today (the website)

Early-access signups

When you join the early-access list, we collect your email address and the option you choose: early access, a Founding Pro spot, or Teams. We use this only to email you about Dealt early access and to understand which option you're interested in. Every email includes a way to unsubscribe.

Server logs

Our website host keeps standard server logs, such as your IP address, browser user agent, the page requested, and the time of the request. These logs are used to run and secure the site, and they are kept for a short period of [LOG RETENTION PERIOD].

What the website does not do

The website does not set cookies. It does not use analytics, advertising pixels, or third-party scripts. Our fonts are hosted on our own servers, so loading a page does not send your information to a font provider. Because we don't track you across websites, there is no cross-site tracking for a "Do Not Track" or Global Privacy Control signal to turn off.

What the app will collect when it launches

Account information

Your name, email address, and sign-in details. If you buy a paid plan, our payment processor collects your payment details. We do not store your full card number.

Connected apps

When you connect an app, such as Gmail, Google Calendar, ClickUp, Asana, Trello, or Granola, you authorize Dealt to access it. We store the access tokens for your connected apps in encrypted form. We use them only to do what's described in this policy.

Item content

To find what you owe people and build your cards, Dealt processes metadata and content from your connected apps. This can include message subjects and text, senders and recipients, event details, task titles, descriptions, due dates, and meeting notes. When you ask Dealt to draft a reply, an event, or a task update, it processes the content needed to write that draft.

Your decision log

Dealt keeps a record of your swipes, such as which item you acted on, which action you chose, and when. The decision log stores no message text.

Notes

Notes you add to a card are stored with your account.

Your Yes

Over time, Dealt learns your preferences, such as what you usually mark Done, what you hand off, and to whom. We call this "Your Yes." It shapes your deck. You can see it and edit it at any time in the app.

Hand-off recipients

When you hand off an item to a person, we process that person's name and contact details so we can deliver the hand-off you approved.

How we use information

We use personal information to:

• Provide Dealt: build your Dealt Daily deck, bring items back with Second Look, write your swipes back to your connected apps, and prepare drafts you ask for.
• Carry out actions you approve, such as sending a reply, creating an event, or assigning a task.
• Run your account, process payments, and provide support.
• Email you about early access, your account, and important changes to Dealt or this policy.
• Keep Dealt secure, prevent abuse, and fix problems.
• Comply with the law.

We do not use your information for advertising. We do not sell it. We do not use it to train generalized AI models.

Your approval comes first

Dealt does not send anything to another person without your approval. When an AI agent drafts a reply, an event, or a task update, it waits for your OK before anything goes out. If you choose to turn on instant assignments, Dealt will assign items to people as soon as you swipe, and you can use Undo to reverse them. You can turn instant assignments off at any time.

Google user data

Dealt's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access and why

• Gmail: Dealt reads your mail to find messages that need a reply or an action from you. Dealt creates drafts, and updates or sends messages, only when you swipe or approve. [CONFIRM GMAIL SCOPES REQUESTED]
• Google Calendar: Dealt reads your calendar to find events and commitments that need a decision. Dealt creates or updates events only when you swipe or approve. [CONFIRM CALENDAR SCOPES REQUESTED]

Our commitments for Google user data

• We use Google user data only to provide and improve the features you see and use in Dealt.
• We do not use Google user data for advertising, including personalized, retargeted, or interest-based ads.
• We do not sell Google user data.
• We do not use Google user data to develop, improve, or train generalized AI or machine learning models.
• We transfer Google user data to others only as needed to provide or improve the features you use, for security, to comply with law, or as part of a merger, acquisition, or sale of assets, and only after getting your explicit consent in that last case.
• Humans do not read your Google user data, except when you affirmatively agree to it for specific messages, when it is needed for security (such as investigating abuse), when it is needed to comply with law, or for our internal operations when the data has been aggregated and anonymized.

You can remove Dealt's access to your Google account at any time from your Dealt settings or from your Google Account permissions page.

AI and your data

Dealt uses AI models to find what you owe people and to write drafts. To do that, we send the content needed for a specific task to our AI model providers, [AI PROVIDERS]. We use providers whose terms do not allow them to train their models on the data we send. [CONFIRM PROVIDER TERMS AND RETENTION]

Bring your own AI

You can connect your own AI assistant, such as Claude, ChatGPT, or Grok, to Dealt through a personal MCP link. When you do, Dealt shares the information your assistant asks for with that assistant, under your account with that provider. Their terms and privacy policy apply to what happens there. You can revoke your personal MCP link at any time.

Who we share information with

We never sell your personal information. We share it only in these cases:

Service providers

We use service providers that process information on our behalf, under contracts that limit how they can use it:

• Resend, which stores our early-access list and sends our emails.
• Vercel, which hosts our website and app.
• Supabase, which hosts our database (at app launch).
• [CONNECTOR PROVIDER], which manages the connections to your apps (at app launch).
• [AI PROVIDERS], which power drafts and card building (at app launch).
• Stripe, which processes payments (at app launch).

Your connected apps

When you swipe or approve, Dealt writes back to the connected app the item came from. That app's own terms and privacy policy apply to the data it holds.

People you choose

When you hand off an item to a person, we share the content you approved with that person.

Legal and safety

We may share information if we believe in good faith it is required by law or legal process, or needed to protect the rights, safety, or property of our users, the public, or Dealt.

A change in ownership

Dealt may be transferred to a successor, including a separate company formed to run Dealt, or as part of a merger, acquisition, or sale of assets. If that happens, your information may transfer to the successor. The successor will be bound by this policy, or we will tell you before your information becomes subject to a different policy. For Google user data, we will ask for your explicit consent before any such transfer.

Cookies

The marketing website at dealt.today sets no cookies. When the app launches, app.dealt.today will use only the cookies or similar storage needed to sign you in and keep your session secure. [CONFIRM APP COOKIES AT LAUNCH] We do not use advertising cookies. If we ever add analytics, we will update this policy first.

How long we keep information

• Early-access list: until the app launches and you create an account, or until you unsubscribe or ask us to delete it, whichever comes first. [CONFIRM]
• Server logs: [LOG RETENTION PERIOD].
• App data: for as long as your account is active.
• Disconnected apps: when you disconnect an app, we delete its access token right away and delete content we stored from that app within [DISCONNECT DELETION WINDOW].
• Deleted accounts: when you delete your account, we delete your data within [ACCOUNT DELETION WINDOW], except for limited records we must keep by law, such as payment records. Backups are overwritten within [BACKUP RETENTION PERIOD].

Your choices and rights

You can:

• Unsubscribe from our emails using the link in any email.
• Disconnect any connected app at any time.
• See and edit Your Yes in the app.
• Ask us for a copy of your personal information, or ask us to correct it.
• Delete your account and your data at any time.

To make a request, email hello@dealt.today. We may need to confirm your identity before acting on a request. We will respond within [RESPONSE TIME]. Depending on where you live, you may have additional rights under local law. We will honor them, and we will not treat you differently for using them.

Security

We use reasonable technical and organizational measures to protect your information. Access tokens for connected apps are stored encrypted. Connections to our website and app use encryption in transit. We limit who on our team can access personal information. No system is perfectly secure, so we cannot guarantee the security of your information. If a breach affects your personal information, we will notify you as required by law.

Age requirements

Dealt is not directed to children under 13, and we do not knowingly collect personal information from them. Early-access users must be 18 or older. If you believe a child has given us personal information, contact us at hello@dealt.today and we will delete it.

Where information is processed

Dealt is operated from the United States. Our service providers may process information in the United States and in other countries. [CONFIRM PROVIDER REGIONS] If you use Dealt from outside the United States, your information will be transferred to and processed in the United States.

Changes to this policy

We may update this policy. When we do, we will change the "Last updated" date at the top. If we make a material change, we will tell you before it takes effect, by email or in the app. We will not make material changes to how we use data we already hold without telling you first.

Contact us

Questions or requests about your privacy:

• Email: hello@dealt.today
• Mail: Oath Innovation Inc., [MAILING ADDRESS], Miami, Florida