Legal

Privacy policy

This privacy policy applies to DealPulse, including the DealPulse Excel Add-in and related web application services.Effective June 5, 2026 · Last updated June 5, 2026

1.Scope of this policy

This Privacy Policy explains how Canyon Hills Consulting, LLC, operating the DealPulse service ("DealPulse," "we," "us," or "our"), collects, uses, shares, stores, and protects personal data when you use the DealPulse web application, the DealPulse Excel Add-in, our websites, and related support channels (together, the "Service").

DealPulse is a business-to-business service built for commercial real estate professionals. It is intended for use by businesses and their authorized personnel, not by consumers for personal, family, or household purposes.

2.Personal data we collect

We collect the following categories of personal data:

  • Account and profile data — such as your name, business email address, password (stored only in hashed form), company or account name, role, time zone, and avatar.
  • Usage, device, and log data — such as your IP address, browser and device information, the features you use, request timestamps, and analytics events generated as you interact with the Service.
  • Business content you provide — the documents and records you upload to or create within the Service, including offering memoranda, financial statements such as trailing financials and rent rolls, deal records, notes, and customer relationship records.
  • Contact data about third parties — business contact information about real estate professionals, obtained from publicly available sources and from information our customers enter (see "Personal data about non-users" below).
  • Communications — information you provide when you contact support, request a demo, or otherwise communicate with us.

3.How we collect personal data

We collect personal data:

  • Directly from you, when you register, configure your account, upload content, or contact us;
  • Automatically, as you use the Service, through server logs and product analytics; and
  • From publicly available sources, for the third-party business contact information described in this policy.

4.Personal data about non-users

DealPulse includes deal-sourcing and customer-relationship features that use business contact information about real estate professionals — for example, the names, business titles, business phone numbers, business email addresses, office locations, and license information of brokers. We obtain this information from publicly available sources, such as brokerage and listing websites, and from information our customers enter.

This information is used to help our customers identify and manage their professional relationships. If you are a real estate professional and would like to access or request removal of your business contact information, contact privacy@dealpulsecre.ai.

5.How we use personal data

We use personal data to:

  • Provide, operate, maintain, and secure the Service;
  • Authenticate users and protect account security;
  • Run the workflows you initiate, including document processing and analysis;
  • Provide customer support and respond to your requests;
  • Monitor, analyze, and improve the reliability, performance, and features of the Service;
  • Communicate with you about the Service, including service and security notices; and
  • Comply with legal obligations and enforce our agreements.

We do not use your personal data for a purpose materially different from those described in this policy without providing notice or obtaining consent where required by law.

6.AI processing and your data

Some features of the Service use artificial intelligence to generate summaries, analysis, and structured outputs from content you choose to process. These features are optional and run only when you initiate them.

As a matter of current practice, we do not use your confidential business content — such as the documents and financial records you upload — to train artificial intelligence models. We take steps to keep this content confidential with the AI providers we use, which currently include working with providers under zero-data-retention handling and processing within the United States where applicable.

AI-generated outputs are provided for your internal business use and review. They are not financial, legal, investment, tax, or accounting advice, and they may contain errors. You are responsible for independently verifying any output before relying on it. See our terms of service.

7.De-identified and aggregated data

We may create and use de-identified and aggregated data — data that does not identify, and that we do not attempt to re-associate with, you, your account, any individual, or any specific property owner. We may use such de-identified and aggregated data for any lawful business purpose, including to operate, analyze, secure, and improve the Service and to develop market datasets, benchmarks, models, and analytics.

We retain rights in de-identified and aggregated data, and our rights to use it continue after your account is closed.

8.Cookies, local storage, and analytics

The DealPulse web application uses browser local storage — not browser cookies — to manage your authenticated session. The DealPulse Excel Add-in manages authentication within the add-in, also without browser cookies.

We use a product analytics provider to understand how the Service is used. This provider sets a device or session identifier and records in-app events so we can measure and improve features. We do not use third-party advertising networks or marketing tracking pixels on the application.

9.How we share data; service providers

We share personal data only as described in this policy.

Service providers (subprocessors). We use third-party service providers to help us deliver and operate the Service. We describe them by category rather than by name on this page:

  • Cloud hosting and application infrastructure
  • Cloud file and object storage
  • Managed database hosting and backups
  • Transactional email delivery
  • AI inference providers for optional, user-initiated workflows
  • Product analytics
  • Mapping and geospatial data services
  • Error monitoring and operational logging

A current list of our subprocessors is available to customers on request. We require service providers to protect personal data and to use it only to provide services to us.

Legal and protective disclosures. We may disclose data when required by law or legal process, to protect the rights, property, or safety of DealPulse, our customers, or others, or to investigate or prevent fraud or security issues.

Business transfers. We may disclose or transfer data in connection with a merger, acquisition, financing, reorganization, or sale of all or part of the business.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

10.Tenant isolation

The business content you upload to DealPulse is stored within your own account and is not shared with other customers or accounts. DealPulse is tenant-isolated by default, and single-tenant deployments are available for institutional customers on request. For more detail, see our security overview.

11.Data storage, location, and international transfers

DealPulse is operated using managed cloud infrastructure located in the United States. If you access the Service from outside the United States, you understand that your data will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

12.Data retention

We retain account and business records for as long as your account is active and as needed to provide the Service, satisfy our contractual and legal obligations, resolve disputes, and maintain security records. When records are deleted, they may persist for a limited period in backups and recovery windows before being purged.

Log, analytics, and support records may be retained for shorter or longer periods depending on the operational or legal reason for retention. De-identified and aggregated data may be retained as described above.

13.Security

DealPulse uses encryption in transit, access controls, audit logging, and managed-infrastructure protections to reduce the risk of unauthorized access to personal data. No method of transmission or storage is completely secure, but we work to protect your data using reasonable administrative, technical, and organizational measures. For more information, see our security overview.

14.Your rights and choices

You can update certain profile information — such as your name, email address, time zone, and avatar — directly within DealPulse.

Depending on where you live, you may have rights to request access to, correction of, or deletion of your personal data, to receive a copy of it, and to object to or restrict certain processing. To exercise these rights, contact privacy@dealpulsecre.ai. We may need to verify your identity before acting on a request, and some requests are subject to legal exceptions or depend on the operational role of the data within the Service.

U.S. state privacy rights. Residents of California and other U.S. states with comprehensive privacy laws may have the right to know what personal data we collect, to request deletion or correction, to opt out of the sale or sharing of personal data, and to not be discriminated against for exercising these rights. As noted above, we do not sell your personal data or share it for cross-context behavioral advertising. To make a request, contact privacy@dealpulsecre.ai.

For most business content processed within DealPulse, we act as a service provider or processor on behalf of our customers. If you are an individual whose data was provided by one of our customers, please direct your request to that customer, and we will support them in responding.

15.Excel Add-in data handling

The DealPulse Excel Add-in lets authorized users search active deals, pull underwriting data into Microsoft Excel, and push selected model outputs back to DealPulse through the same authenticated account used in the web application.

The add-in requires permission to read from and write to the active workbook in order to exchange underwriting data between DealPulse and your spreadsheet. Authentication sessions are managed within the add-in without browser cookies.

16.Children's privacy

DealPulse is a business service intended for professional users. It is not directed to children, and we do not knowingly collect personal data from anyone under 16. The Service is not designed to process health data or other special categories of sensitive personal data as a core workflow.

17.Changes and contact

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page with a revised effective date.

For privacy questions or requests, contact privacy@dealpulsecre.ai. For general help, visit our support page. DealPulse is operated by Canyon Hills Consulting, LLC.

v1.13.2·Tenant-isolated·US-resident inference·Microsoft AppSource certified·Pre-audit SOC 2 CC mapped