Dealfinderr

Privacy Policy

Last updated: 12 August 2026

1. Who controls your information

[LEGAL ENTITY NAME PENDING REGISTRATION], which operates Dealfinderr, is the controller of the personal information described in this policy. Its company number is [COMPANY NUMBER PENDING], and its registered office is [REGISTERED OFFICE PENDING].

For privacy questions or to exercise a data-protection right, email hello@dealfinderr.com.

2. Information we collect

Account and contact information

This can include your name, email address, mobile number, Google account identifier, referral source, account dates and last-login time.

Subscription and transaction information

We receive plan, membership, trial, renewal, cancellation and payment status from Whop, together with identifiers needed to match a purchase to your Dealfinderr account. Whop handles your full payment-card details; we do not store them.

Property and service content

This includes property URLs and listing details, search requests, locations and postcodes, strategy choices, figures and assumptions, property-search conversations, generated analysis, saved searches, saved deals, groups and calculator edits.

Technical, security and support information

This can include your IP address, browser and device information, security-verification results, cookie identifiers, request and error logs, rate-limit records, and messages you send when asking for support. The application stores one-way hashes, rather than the original IP address or mobile number, in its rate-limit keys. Security and network providers may still process the original IP address when handling a request.

Public and third-party property information

We obtain listing and market information from public websites and data services. It can include an estate or letting agent’s business contact details and information contained in listing text or images.

3. How we obtain it

  • directly from you when you register, search, analyse, save or contact us;
  • from Google if you choose Google sign-in;
  • from Whop when you start, change or end a subscription;
  • from property portals, public websites, maps, geocoding and research providers when the Service resolves or researches a property or area;
  • automatically from your browser, our infrastructure and security providers when you use the Service.

4. Why we use it and our lawful bases

To perform our contract

We use information to create and authenticate your account, provide the features you request, save your work, manage your plan, process support requests and communicate about the Service.

You must provide a valid sign-in identifier, such as an email address or mobile number, to create and access an account. You must also provide the property, search or calculator information needed for a feature you ask us to perform. If you buy a paid plan, the account, plan and transaction information required by Whop must be provided to complete and manage the purchase. Without the relevant information, we cannot create or authenticate your account, perform that feature or complete the subscription.

For our legitimate interests

We use information where necessary to secure and troubleshoot the Service, prevent fraud and trial abuse, enforce usage limits, understand and improve reliability, avoid unnecessary repeat research, administer our business, and establish or defend legal claims. We balance these interests against your rights and expectations.

To meet legal obligations

We use and retain information where needed for tax, accounting, company, law-enforcement and data-protection obligations.

With your consent

We load the optional YouTube video only after you choose to play it. You can withdraw that choice by leaving or reloading the page. Where we rely on consent for another purpose, you can withdraw it at any time without affecting earlier lawful use.

5. AI-assisted analysis

When you ask for property search, research or analysis, we send the relevant request, property information, figures and instructions to our AI provider, xAI. The provider may use web-search tools to obtain public information. We do not intentionally add your account contact details to an AI request, but free-text that you submit is included, so do not enter personal or confidential information that is not needed for the analysis.

Dealfinderr uses automation to generate research and estimates for you to review. It does not make a decision about you that produces legal or similarly significant effects without human involvement.

6. Who receives information

We disclose only what is reasonably needed to:

  • Google, for Google sign-in and, where used, geocoding;
  • Twilio, to send and verify mobile sign-in codes;
  • Cloudflare, for network security and Turnstile bot verification;
  • Whop, for hosted checkout, payment and subscription management;
  • xAI, for AI-assisted search, research and analysis;
  • Mapbox and other mapping, geocoding, postcode, property and public-data providers, to provide the feature you request;
  • hosting, database, monitoring and professional service providers that help us operate and protect the business; and
  • regulators, courts, law enforcement, advisers or a buyer of our business where disclosure is lawful and reasonably necessary.

We do not sell your personal information.

7. International transfers

Some providers process information outside the United Kingdom, including in the United States. Before making a restricted transfer, we identify the transfer mechanism that applies to the provider and destination. Depending on the circumstances, this may be UK adequacy regulations or an appropriate safeguard such as the UK International Data Transfer Agreement or UK Addendum, together with the assessment required for that safeguard. Contact us if you want more information about the mechanism relevant to a particular provider.

8. Cookies and similar technologies

We use strictly necessary technologies to keep you signed in, protect the Service, complete Google sign-in, remember a requested return page and prevent automated abuse. The main Dealfinderr sign-in cookie can last up to one year. The temporary Google sign-in state cookie lasts up to ten minutes. Cloudflare Turnstile may use security technologies when you ask to sign in by mobile.

We do not load advertising or audience-measurement cookies on the Dealfinderr site. The optional YouTube player is blocked until you click to load it and uses YouTube’s privacy-enhanced domain. YouTube may then receive your IP address and device information and may store or access information on your device under its own policy.

9. How long we keep information

We keep personal information only while it is reasonably needed for the purposes in this policy. We decide the period by considering whether your account or subscription is active, whether saved content or cached research is still needed to provide the Service, legal and accounting requirements, security and trial-abuse risks, and the time in which a claim could be made.

  • Account, subscription and saved-content records are normally kept while the account is active. After closure, necessary contract, payment and legal records may be kept for up to six years.
  • We may retain a minimal account identifier for as long as reasonably needed to enforce the one-trial rule and prevent fraud.
  • Application rate-limit records expire after their configured security window, currently no more than 24 hours for mobile sign-in limits.
  • Property-level caches are retained while useful for providing an efficient service, resolving disputes and avoiding unnecessary repeat research, then deleted or anonymised when no longer needed.

10. Security

We use access controls, secure cookies, encryption in transit, bot checks, rate limits, provider signature checks and restricted server credentials. No online system is completely secure, so you must also protect your sign-in method and tell us if you suspect misuse.

11. Your data-protection rights

Depending on the circumstances, you can ask for access, correction, erasure, restriction or portability of your personal information. You can also object to processing based on legitimate interests. These rights are not absolute, and we may need to verify your identity before responding.

Your right to object: you can object at any time to use of your information for direct marketing. You can also object to use based on our legitimate interests, and we will stop unless we have a compelling lawful reason to continue or need the information for legal claims.

Email hello@dealfinderr.com to exercise a right. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the chance to address your concern first.

12. Children

Dealfinderr is a business service for people aged 18 or over. We do not knowingly collect information from children.

13. Changes to this policy

We may update this policy when our data use, providers or the law changes. We will post the current version here and change the date above. If a change is material, we will provide a prominent notice or contact account holders where reasonably practical.