Dealight privacy

Privacy policy

Effective October 19, 2026. This policy describes how Dealight handles information when you join its waitlist or use its creator and agency workspaces and optional integrations.

Information we collect and why

Dealight stores account and security information needed to sign you in, verify your account, and manage workspace access. It stores the profiles, business records, files, messages, and other content you provide so the workspace features can operate. Security and activity records help protect accounts and explain changes.

Early-access waitlist

If you join the waitlist, we store your email address, selected role, signup date, and a record of your consent to receive access and launch updates. Email addresses are encrypted in our database. Joining does not create a Dealight account or connect any Google services. We use these details to manage early access and send the updates you requested, not for unrelated advertising or sale to third parties.

We retain waitlist details while managing access and launch updates, unless you ask us to remove them. To withdraw consent or request removal, email darius@secondlifecreators.com from the address you used to join. Security controls may temporarily retain hashed network identifiers to limit abusive submissions.

Google Drive

When you connect Drive, Dealight requests access only to files created with Dealight or explicitly selected in Google Picker. You can paste a document link to find that document, then select it in Picker to grant access. This allows Dealight to create notes and recovery copies, and read, download, and update selected documents. Dealight does not request broad read access to your Drive. We retain your connected Google email address to identify the account used by each workspace.

For linked notes, Dealight stores document identifiers and titles, timestamps, the latest editor information Google provides, text excerpts, sampled text and Word-format snapshots, detected changes, and activity recorded when someone opens a note through Dealight. It uses these records for previews, audit history, updates, and recovery. A recovery action creates a new document; it does not overwrite the original. Opens outside Dealight and edits between snapshots may not be recorded.

Linked note information and saved snapshots are available to authorized members of that Dealight workspace. Google controls access to the original document and its embedded preview. Adding a note to Dealight does not change the original document’s Google sharing permissions.

Google Calendar

If you connect Calendar, Dealight creates and manages a dedicated calendar and syncs event information between it and the workspace. This includes event titles, descriptions, dates, times, and sync status. The integration requests access to calendars created by the app.

AI features and service providers

When you request an AI answer or analysis, the relevant workspace records, conversation context, or selected uploaded file are sent to OpenAI to generate the result. Dealight requests that these API responses are not stored by OpenAI using the API’s store setting; OpenAI’s own data-handling terms also apply. The Drive Notes integration itself does not send linked Drive document contents to OpenAI.

Hosting, database, file-storage, and account-message providers process information as needed to operate the service. Dealight does not sell Google user data, use it for advertising, or use it to train general-purpose AI models.

Google API data use

Dealight’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Security, retention, and your choices

Access is controlled by account and workspace permissions. Google refresh tokens and saved note recovery content are encrypted in storage, and the live application uses HTTPS. No service can guarantee absolute security.

Workspace records, audit entries, and recovery snapshots are retained to provide ongoing history and recovery. Disconnecting Drive removes the workspace connection credential and stops future access through that connection; it does not delete existing notes, audit history, snapshots, or the original Google documents. Disconnecting Calendar keeps the existing Google calendar and events. You can also revoke access through your Google Account’s third-party connections settings.

To request access, correction, or deletion of information held by Dealight, contact darius@secondlifecreators.com. Identify the account and workspace involved, but do not send passwords or authentication codes. We may need to verify your authority before acting on a request. Deletion of active records may not immediately remove copies in backups or records required for security or legal obligations.

Changes and contact

Updates to this policy will be posted here with a revised effective date. For questions about privacy or Google permissions, contact darius@secondlifecreators.com.