DealLoupe — Privacy Policy

Operated by Ameclarity LLC, a Florida limited liability company · Last updated: November 6, 2026

1. In short

DealLoupe reads deal documents you upload — often financial and tax records belonging to a business someone else owns — and produces a report. That makes this policy more important than most.

The short version:

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• We do not use your documents to train AI models, and our AI provider is not permitted to either.
• Your documents are stored in the United States, encrypted, and visible only to you and the people you invite into a deal. The small number of people who run DealLoupe open them only when you report an error in a report and allow us to check it, or to investigate a security incident (Section 4).
• We delete deal documents twelve (12) months after the last activity in that deal; if you delete them yourself or ask us to, they are removed from our systems within thirty (30) days (encrypted backups expire within fourteen (14) days). Export anything you want to keep permanently.

The rest of this policy is the detail behind those four statements.

2. Who we are and what this covers

This policy explains how Ameclarity LLC ("we", "us") collects, uses, shares, and protects information when you use the DealLoupe website and application (the "Service").

It does not cover websites or services operated by anyone else, including any professional a report suggests you consult.

3. What we collect

3.1 Account information. Your name, email address, and a securely hashed password. If you sign in through a third-party identity provider, we receive the basic profile information it sends. We also keep a record of your acceptance of the Terms of Service — the timestamp and the version you accepted.

3.2 Deal information you enter. Answers to the intake questionnaire — for example the asking price, the type of business, the state, headcount, whether premises are leased, whether the business is a franchise — together with the deal name and your own notes.

3.3 Documents you upload. The Service is built to receive documents such as:

• broker listings and Confidential Information Memoranda;
• profit-and-loss statements, balance sheets, and general ledgers;
• federal and state tax returns;
• bank statements and merchant-processor statements;
• customer lists and revenue concentration breakdowns;
• payroll records and contractor schedules;
• leases and related real-estate documents;
• loan documents, UCC filings, and debt schedules; and
• franchise disclosure documents.

These documents routinely contain information about people other than you — the seller, employees, and customers — and confidential information about a business you do not own. Section 9 explains what that means and what we ask of you.

We treat what these documents contain as sensitive information. Tax returns and bank statements can include Social Security numbers and account numbers. Every uploaded document is handled under the protections of Section 10 regardless of its content, from the day it arrives.

3.4 Collaborators you invite. If you invite someone into a deal workspace, we collect the email address you provide and record the invitation, the access level you chose for them, and its status. If they accept, we hold their account information on the same basis as any other user, and we record which participant uploaded each document so that responsibility for material in a workspace stays traceable.

Collaborators may include a business partner, an assistant, an accountant, an attorney, or a lender. Inviting them is free and does not change what we collect about you. The access levels, and the limits on how many people may hold each of them, are set out in Section 4 of the Terms of Service.

3.5 Website interactions. If you use the chat assistant on our website, we process the messages you type and we keep a record of the conversation, so that we can see what visitors actually ask and fix answers that are wrong or unclear. Before that record is stored, any email address or telephone number in the text is replaced with a placeholder, and no IP address is kept alongside it. If you give us your contact details in the chat so that a person can reply to you, those are held separately, as the website inquiry described next. If you submit a contact form, a request for the free guide, or the Buyer Readiness Assessment, we collect what you enter — typically name, email, and what you are looking for — and any notes you add.

3.5a The free Listing Screen. If you use the Listing Screen, we process the broker listing you supply — the text you paste or, for supported platforms, the single page you point us to, retrieved once at your request. Before you create an account, field extraction runs in your browser, and the draft is stored in your browser's local storage, not on our servers. When you sign up and run the screen, the listing text and the extracted answers become a deal in your account and are handled like any other deal: processed by our AI provider under Section 5, retained under Section 8, and deletable under Section 11.

3.5b Email subscriptions. If you sign up for the free guide, you are subscribed to the rest of our red-flag series (flags 11–20) and, after that, to an occasional note when we publish a new buyer's guide. We keep your email address, and your name if you gave it, on our subscriber list. Every one of these emails carries a one-click unsubscribe link, and unsubscribing stops them all. If you create a Listing Screen (3.5a), we send you two follow-up emails about it: about two days later, an explanation of one point from your own screen, and about six days later, a short follow-up that also mentions the paid pre-screen. Each carries a one-click unsubscribe link. Replies to a form you submit on the website (for example, the guide you asked for or your readiness-assessment result) are one-off messages sent because you asked for them.

3.6 Payment information. When you buy from us, our payment processor, Stripe, collects and processes your card details directly. We receive confirmation of payment and limited billing metadata: what you bought, the amount, the payment reference, and any refund. We never receive or store full payment card numbers.

3.7 Technical and usage data. IP address, browser and device type, pages viewed, actions taken in the application, timestamps, and error logs. We do not use cookies for sign-in: sign-in and session data are kept in your browser's local storage. Our website sets a first-party cookie for analytics, described in 3.7a.

3.7a Website analytics. On our website and its landing pages we measure how visitors find us and what they do there, so that we can tell which channels bring buyers and which pages fail them. We use one tool for this, PostHog. It records:

• page views, including the full address of each page (with any parameters in the link);
• clicks, including the text of the element clicked, such as a button or link label (for example, the answer option you click in the Buyer Readiness Assessment) — the chat panel is excluded from this capture;
• form submissions — the fact that a form was sent, not the values you typed;
• opening the chat assistant, and a count of the messages you send in it — never their text;
• progress through the Buyer Readiness Assessment — the number of the question you reached, not your answers;
• video plays, scroll depth and page-load speed; and
• how you arrived: the referring website, campaign tags in the link (UTM parameters) and — because the PostHog library collects them by default — ad-click identifiers in the link (such as gclid, fbclid or msclkid).

PostHog sets a first-party cookie and a local-storage entry holding a random visitor identifier, so that a return visit is recognised as the same visitor. That cookie is shared across dealloupe.com and its subdomains, including our landing pages and the application. As a result, if you sign up from the free Listing Screen (3.5a), your earlier visits to our website and landing pages in that browser become linked to your account by its random account identifier (not your email address). Separately, our website keeps its own record of where your visits came from: a local-storage entry, dl_first_touch, recording the source of your first visit, which stays in your browser until you clear it or turn analytics off; and a session-storage entry, dl_last_touch, recording the source of your current visit, which your browser discards when you close the tab.

We do not send your name, email address, the text of chat messages, or anything typed into a form to PostHog; we do not record your screen; and our PostHog project is set to discard your IP address rather than store it. When you submit a form on the website, we store with your inquiry the channel that brought you (first and most recent visit) and the random visitor identifier, so that we can count which channels produce inquiries. That identifier also lets us connect your inquiry with your browsing history on our site as recorded in PostHog.

In our product application at app.dealloupe.com, PostHog measures only the steps of the free Listing Screen (3.5a): opening it, the screen reading a listing, a listing too short to read, continuing to sign-up, signing up or in from the screen, and opening the screen's result. Those events carry counts and yes/no flags (for example, how many fields the listing yielded and whether it stated a price) and the domain of the listing site, never the listing text, any figure from it, or anything you typed. When you create a screen, we link those steps to your account by its random account identifier, not your email address. Nothing else in the application is measured, and the documents you upload never reach PostHog.

Browser signals. We do not currently respond to Do Not Track or Global Privacy Control signals. Because analytics requests pass through our own domain, a content blocker may not stop them.

We do not use advertising pixels or share data for cross-context behavioral advertising; if we ever add an advertising tag, we will update this section and Section 12 before it goes live. US visitors are not shown a consent banner.

3.7b Third-party content on our website. Videos on our website are YouTube videos shown as a still image: nothing loads from YouTube until you click play. After you click, the video plays from youtube-nocookie.com, and Google receives your IP address and may store data in your browser under Google's own privacy policy. The fonts on our website are loaded from Google Fonts, so Google receives your IP address when a page loads.

4. How we use it

We use the information above to:

• create and secure your account;
• run the analysis: extract facts from your documents, compute the deterministic calculations, and generate your report;
• keep a record of how each conclusion in a report was reached, including the document, page, and quotation behind it, so a report can be explained and reproduced;
• deliver reports and let you and your invited collaborators access them;
• check the accuracy of reports and correct errors in the Service. When you tell us that something in a report is wrong, the owner of the deal may allow the people who run DealLoupe to open that deal's documents, intake answers and the record behind the report for thirty (30) days to check it, and may withdraw that permission at any time. Without that permission nobody at DealLoupe opens your documents, except to investigate a security incident (Section 10). Every document we open is logged — who opened it, when, and for which report — and the log cannot be altered. In what we view, Social Security and other taxpayer identification numbers, bank account and card numbers, and dates of birth are masked; names and amounts are not, because a report cannot be checked without them. When we test a change to our calculations against reports already produced, the comparison is made by our software, and our people look at how the conclusions changed, not at your documents. We do this only to find and fix errors, never to make a decision about you or your deal, and what we see is not shared outside the Service;
• respond to your questions and provide support;
• process payments and keep financial records;
• detect, investigate, and prevent fraud, abuse, and security incidents;
• meet legal obligations and enforce our Terms of Service; and
• send you service messages about your account and, if you have asked for them, our guides and updates. You can unsubscribe from marketing messages at any time; service messages about your account are not optional while you have one.

We do not use your deal documents or intake answers for advertising, and we do not sell them.

5. AI processing and model training

5.1 What is processed by AI. To produce a report, the text of your uploaded documents and your intake answers are sent to our AI provider through its commercial programming interface. The provider returns extracted facts and generated text, which we store as part of your report.

5.2 One provider, two commitments. We use a single AI provider — OpenAI — for everything: document analysis, report generation, and the chat assistant on our website. Our promise has two parts, of two different kinds:

1. Our own conduct, without expiry: we never use your documents, your intake answers, your reports, or your chat messages to train, fine-tune, or improve any AI model. Correcting our own software after reviewing a report under Section 4 — the calculations, the rules, and the written instructions we send to our AI provider — is not training: no document, answer or report is given to any model for it to learn from.
2. Our provider's terms: under OpenAI's terms for its business interface, data submitted through that interface is not used to train its models (last checked August 2026). We check those terms again before any change of vendor, and we will not add a second AI vendor that does not meet the same standard.

OpenAI may retain API inputs and outputs for up to thirty (30) days for abuse monitoring, after which they are deleted unless the law requires otherwise.

5.3 The website chat assistant. The chat assistant on our marketing website exists to answer general questions about DealLoupe. Please do not paste financial statements, tax returns, account numbers, or other sensitive material into it — it is not the place to submit documents, and the assistant is instructed never to ask for them. Upload documents through your deal workspace instead, where they are protected by the access controls described in Section 10. Whatever you do type is kept as a conversation record on the terms in 3.5 and for the period in Section 8.

5.4 Aggregate statistics. We may derive aggregated, de-identified operational statistics — for example, how often a category of document fails to parse — provided they do not identify you, your deal, or any business analyzed.

6. When we share information

We do not sell personal information and we do not share it for cross-context behavioral advertising. We share it only in these situations:

6.1 Service providers. We use the providers below to operate the Service. Each is used under its own service terms, and only for the purpose shown.

Website inquiries are stored in our own records (with Vercel) and sent to our team over Telegram; our replies to them go out by email through Resend. Guide subscribers are kept on a list stored with Supabase. No other intermediary receives inquiries or subscriber details, and we do not use an external CRM.

6.2 People you invite. Anything in a deal workspace is visible to the collaborators you invite into it, at the access level you set and no wider. An accountant sees the financial section; an attorney sees the legal section; a lender sees only the lender package. A partner sees everything in that deal. Withdrawing an invitation ends that access.

6.3 Legal reasons. We may disclose information if we reasonably believe it is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of Ameclarity, our users, or the public.

6.4 Business transfer. If Ameclarity is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction. We will give notice before your information becomes subject to a materially different privacy policy.

7. Where information is stored

The Service is hosted in the United States. Our database and document storage are located in a US West region (Northern California). Our AI and hosting providers may process data in the United States and, depending on the provider, in other countries where they operate infrastructure.

If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection law differs from that of your country.

8. How long we keep information

"Last activity" means the last time anything happened in that deal — a document uploaded, an analysis run, a report opened, by you or by anyone you invited. It is not tied to the ninety-day period during which a deal accepts new documents: a deal that has become read-only is retained on the same twelve-month basis.

A report is retained for longer than it stays editable, and for less time than your license to it lasts. Section 10 of the Terms grants a perpetual license to use a report; that license does not oblige us to store it forever. If you want a permanent copy, export it — an exported file is yours and is not affected by this schedule.

You can delete a document or a deal yourself in the application, and you may ask us to delete a document, a deal, or your whole account at any time. Either way — when you delete it yourself or when we delete it at your request — it is removed from our systems within thirty (30) days, except where we must keep something to meet a legal obligation.

Deleted material may persist in encrypted backups for up to fourteen (14) days before those backups expire; we do not restore deleted material from backup except to recover from a failure.

9. Information about other people in your documents

The documents you upload usually contain information about people who are not our users — a seller, their employees, their customers.

We process that information only to produce your report, and only on your instructions. You are responsible for having the right to give it to us, as set out in the Terms of Service. Before uploading, consider whether a non-disclosure agreement with the seller or broker permits processing by a third-party service provider; if you are unsure, ask them or your attorney.

If you are a person whose information appears in a document someone else uploaded and you want to know what we hold or ask us to delete it, contact ameclarity@gmail.com. We will act on the request where we can identify the material and where doing so does not conflict with a legal obligation, and we may need to refer you to the customer who uploaded it, since they determine why it was provided.

10. Security

We protect information with measures appropriate to its sensitivity, including:

• encryption in transit (TLS) and encryption of stored files at rest;
• passwords stored only as salted hashes, never in readable form;
• database-level access rules that restrict every record to the deal it belongs to, so one customer's data cannot be read from another customer's session;
• a validation step that gates a document from being shared to other workspace participants until it passes checks;
• secrets held in a managed secret store, never in application code; and
• access limited to the small number of people who need it to operate the Service.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any regulator as required by applicable law.

11. Your choices and rights

You may:

• access the information in your account and the documents in your deals at any time through the application;
• correct your account information in your profile;
• delete a document, a deal, or your entire account;
• export your reports;
• opt out of marketing email using the one-click unsubscribe link in any such message; and
• withdraw an invitation you have sent to a collaborator.

To make a request we cannot handle in the application, email ameclarity@gmail.com. We may need to verify your identity. We will not discriminate against you for exercising these rights.

12. California residents

If you are a California resident, the California Consumer Privacy Act gives you the rights to know, delete, correct, and opt out of sale or sharing of your personal information, and to be free from discrimination for exercising them.

We do not sell personal information and we do not share it for cross-context behavioral advertising. The categories we collect, the purposes, and the parties we disclose to are described in Sections 3, 4, and 6. We retain information as described in Section 8. To make a request, email ameclarity@gmail.com; you may use an authorised agent.

13. Children

The Service is for business use by adults. It is not directed to anyone under 18, and we do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.

14. Changes to this policy

We may update this policy. If a change is material, we will notify you by email or in the application before it takes effect, and we will update the date at the top. The current version is always available at the link in our website footer.

15. Contact us

Ameclarity LLC
14025 Clear Water Ln, Fort Myers, FL 33907
All privacy and legal enquiries: ameclarity@gmail.com