Privacy Policy

1. Overview

DealSlipPro is a product of Dealslip Pro (Pty) Ltd, a company registered in the Republic of South Africa ("we", "us", "our"). DealSlipPro stores your deal records, contacts, and account details securely in the cloud so you can access them from any device you sign in to. We collect and process only the minimum information required to provide the service, including authentication, data sync, subscription services, and referral tracking. This policy explains exactly what we collect, where it goes, and how long we keep it. For any privacy enquiries, contact us at support@dealslippro.com or +27 73 763 6511.

2. Data Stored on Our Servers

The following data is stored on our servers and synced across your devices: all deal records you create (including deal type, amounts, rates, payment status, counterparty details, and deal reference codes); saved contacts; saved account details (bank accounts, digital asset wallet addresses, mobile money numbers); and app preferences. This data is encrypted in transit (TLS) and at rest, and is accessible only to you — or, in a Business or Team account, to authorised members of your organisation according to their role — DealSlipPro staff cannot read the content of your deal records. Before you sign in, and if your connection is temporarily unavailable, a limited fallback copy may be held in your browser's local storage; otherwise data is read directly from the cloud.

3. Data Collected During Registration and Sign-In

When you create an account, we collect and store on our servers: your email address, your display name, the date and time of registration, and your referral source (if any). On each sign-in, we also record your public IP address. IP addresses are stored solely for security purposes — to detect and prevent account misuse such as the creation of multiple accounts by the same individual. IP data is not used for advertising, profiling, or any purpose other than platform security and fraud prevention.

4. Subscription and Billing Data

Subscription billing is handled by Dodo Payments, which acts as our Merchant of Record. We store subscription status, subscription tier, trial expiry date, and payment history dates on our servers in order to determine whether you have an active subscription. We do not store payment card details or bank credentials — these are held exclusively by Dodo Payments.

5. Infrastructure and Data Location

All data stored on our servers — deal records, contacts, account details, authentication records, subscription status, and referral tracking — is hosted on Google Cloud Services (Firestore, africa-south1 region). Google Cloud maintains ISO 27001, SOC 2 Type II, and other internationally recognised certifications for security and data protection. All data transmitted between your device and our servers is encrypted in transit using TLS 1.2 or higher.

6. Who Can Access Your Data

Your deal records, contacts, and account details are stored on our servers and are accessible only to you via your authenticated account. In a Business or Team account, your records are also visible to authorised members of your organisation — owners, admins, and viewers — according to their assigned role, as described in the Terms. DealSlipPro staff cannot read the content of your deal records — access is enforced at the database level by security rules. Account-level data (email, subscription status, referral records) may be accessed by DealSlipPro staff solely for support and legal compliance purposes. No data is sold to third parties.

7. Referral Programme Data

If you participate in the referral programme, we record your referral code, the accounts registered using that code, and commission amounts earned and paid. This information is stored on our servers and used solely to calculate and pay referral commissions. Referral relationships are retained for the lifetime of the referred account for commission tracking purposes.

8. Sharing of Your Data

We do not sell your personal data. We share data only with: (a) Dodo Payments, our Merchant of Record, who processes subscription payments; (b) Google Cloud Services, who provide server infrastructure; and (c) competent law enforcement authorities, only where required by valid and lawful legal process directed to DealSlipPro specifically.

9. Data Retention

Deal records, contacts, and account details are stored on our servers and may be deleted at any time from within the app. Server-side data (your account, subscription, referral records) is retained for as long as your account is active. When you delete your account, all server-side data is permanently deleted within 30 days, and any local fallback copy in your browser is cleared on sign-out.

10. Your Rights

Depending on your jurisdiction (including POPIA, GDPR, UK GDPR, and similar legislation), you may have the right to access, correct, delete, restrict processing of, or receive a portable copy of your personal data. You can delete your deal records, contacts, and account details directly within the app at any time. For account-level data, or to submit a formal data request, contact us at legal@dealslippro.com.

11. Cookies and Local Storage

DealSlipPro does not use advertising, marketing, or behavioural-tracking cookies. We use only the cookies and browser storage necessary to run the service, in three categories. Strictly necessary: your authentication session and tokens (issued by Firebase Authentication) are held in browser localStorage / IndexedDB so you stay signed in, with a short-lived session record governing idle timeout. Functional: your theme preference, any referral code you arrived with, and a limited local fallback copy of your data before sign-in or during brief connection loss; once signed in, your data is read from and written to the cloud. Security: to protect the service from automated abuse we use Google reCAPTCHA through Firebase App Check, which may set cookies controlled by Google.

The application also loads interface fonts from Google Fonts (your IP address is transmitted to Google to deliver them), uses Sentry for error diagnostics (see the next section), uses ipify to look up your IP address at sign-in for fraud prevention, and loads our payment provider on the checkout page. We do not set advertising cookies and we do not sell your data. Because we run no analytics or marketing tracking, the site shows a one-time notice of this storage rather than a consent gate.

12. Analytics and Diagnostics

We do not use advertising analytics, behavioural tracking, or sell data to data brokers. To keep the service reliable, we use Sentry to capture technical error and crash reports when something goes wrong. These diagnostic reports are scrubbed of personal and financial details before they are sent — email addresses, account identifiers, and request data are removed — and are used solely to diagnose and fix faults. They do not include the content of your deal records.

13. Children's Privacy

DealSlipPro is intended for users 18 years of age and older. We do not knowingly collect data from minors. If we become aware that an account belongs to a minor, we will close it and delete the associated server-side data promptly.

14. Changes to This Policy

We will notify you of material changes via email or in-app notice before they take effect. Continued use of DealSlipPro after notification constitutes acceptance of the revised policy. For privacy questions contact support@dealslippro.com; for formal data requests contact legal@dealslippro.com.

15. Governing Law, Dispute Resolution & Jurisdiction

This Privacy Policy, and any dispute arising from it or from your use of DealSlipPro, is governed by the laws of the Republic of South Africa, without regard to conflict-of-law rules. Disputes will first be addressed by good-faith negotiation and, failing resolution within 30 days, finally resolved by confidential arbitration seated in Cape Town, South Africa under the Rules of the Arbitration Foundation of Southern Africa (AFSA) by a single arbitrator, in English. You submit to the exclusive jurisdiction of the High Court of South Africa, Western Cape Division, Cape Town for any matter not subject to arbitration. This does not limit data-protection rights you may have under POPIA, GDPR, or similar legislation, nor any consumer rights that cannot lawfully be excluded under the mandatory laws of your country of residence.