Privacy Policy

This policy explains what we collect when you use Deal Verdict, why we collect it, and how long we keep it. The data controller is Stemag S.r.l., Via Legnano 16, 29121 Piacenza, Italy. For anything about your data, write to mr.magomedov93@gmail.com.

What we collect

• Account data: your email address, and a password hash held by our authentication provider. We never see your password.
• Deal data: the figures and notes you enter about a deal — asking price, claimed revenue, machines, locations, contract status — plus the results we calculate from them.
• Payment data: the payment reference, amount, currency, status and date returned by our payment provider, and the date and time you ticked the box asking for immediate delivery of the report. Card numbers are never sent to or stored by us.
• Technical data: standard server logs needed to run and secure the service.

Why we use it

• To create your account and let you sign in (performance of our contract with you).
• To calculate, store and re-display your deal reports (performance of our contract).
• To take payment and keep records for accounting and tax (contract and legal duty).
• To keep the service secure and to prevent abuse (legitimate interests).

Who processes your data for us

These are the third parties involved in running Deal Verdict, and what each one gets.

• Stripe — payments. Receives your email address, the amount and currency, your card details (entered directly on Stripe's checkout, never on our servers), and an internal reference for your account and the deal you are unlocking. For customers in the European Economic Area and the United Kingdom, the contracting entity is Stripe Payments Europe, Limited (Dublin, Ireland); it uses Stripe, Inc. (United States) as a processor for parts of the service.
• Supabase — database and sign-in. Stores your email address, your password hash, your deals and their calculated results, and your purchase records. It is the system that signs you in. Our database is hosted in the European Union, in the AWS Ireland region (eu-west-1).
• Lovable — hosting and serving of the app. Handles the requests your browser makes, so it processes your IP address, the pages you request and standard server log data. The app runs on Lovable's edge hosting infrastructure, which serves requests from the location nearest to you and may therefore process request data outside the European Economic Area, including in the United States.

We do not sell your data, we do not use analytics or advertising tools, and we do not use your deal figures to market to you. If we add a tool later — analytics, email, support — we will list it here first.

How long we keep it

Deal data is kept while your account exists so you can reopen saved reports, and is deleted with your account or when you delete an individual deal. Payment, invoice and consent records are kept for ten years, the retention period required of Italian companies for accounting records (Article 2220 of the Italian Civil Code and Italian tax rules).

Your rights

You can request access to your data, correction, deletion, a copy in portable form, or restriction of processing, and you can object to processing based on legitimate interests. You can delete individual deals in the app at any time. To exercise any right, contact mr.magomedov93@gmail.com. You may also complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority where you live.

International transfers

Your account and deal data are stored in the European Union. Where a provider listed above processes data outside the European Economic Area — typically in the United States for parts of payment processing and for edge hosting — those transfers are covered by the European Commission's standard contractual clauses included in that provider's data-processing agreement with us.

Cookies

We use only the cookies and local storage needed to keep you signed in and to complete a payment. We do not use advertising cookies.