DealTree Privacy Policy

Effective date: October 23, 2026. Last updated: October 23, 2026.

This policy explains what information DealTree collects, how we use it, who we share it with, and the choices you have. It covers:

the DealTree web app at app.dealtree.ai (the "Service");
the DealTree Network Sync Chrome extension (the "Extension"), which has its own section below;
emails we send in connection with the Service, such as invitations and password resets.

Who we are

DealTree is operated by DealTree, Inc. ("DealTree", "we", "us"), 2127 Morris Ave, Birmingham, AL 35203. You can reach us at support@dealtree.ai.

Who uses DealTree, and our two roles

DealTree is a business tool for private equity firms and their deal teams. Each customer firm has its own private workspace. Two different kinds of personal information pass through it, and our role differs for each:

Information about our users (the people who sign in, and contributors a firm invites). For this, DealTree decides how the information is used.
Information our customers put into their workspace (their contacts, imported connections, target companies and the people at them). We process this on our customer firm's behalf and under its instructions. The firm decides what goes into its workspace and what it does with it. If you are a person listed in a firm's workspace and want to know what that firm holds about you, please contact the firm. You can also write to us and we will help pass on your request.

DealTree is not intended for children and is not directed to anyone under 18.

What we collect and how we use it

Your account and your firm

Account details: your name, email address, password, role in your firm (admin, member or viewer), and an optional profile photo. We store your password only as a one-way scrambled (hashed) value; we cannot read it.
Your firm's workspace: the firm's name, its settings, and the invitation links its admins create for teammates. Invitation links expire after 30 days.
Sign-in records: when you sign in we create session records (an identifier, when it expires, and when it was ended) so we can keep you signed in and let you or us end a session.
Preferences: for example, which email program you want introduction drafts to open in.

We use this to create and run your account, keep it secure, send you the emails the Service needs (such as password resets), and support you.

Contacts, companies and research in your workspace

Your firm's workspace holds the information your firm adds to it and the research the Service produces for it:

Contacts your firm's users add by hand, by uploading a spreadsheet (CSV), or by uploading the connections file LinkedIn lets you download. From a LinkedIn download we read only the connections file inside it, and keep each connection's first and last name, email address (if LinkedIn included one), company, position, the date you connected, and profile link. We record which user or contributor supplied each contact. We keep a record of each import (file name and counts); we do not keep the uploaded file itself.
Connections shared through the Extension (see the Extension section below).
Target companies and the people who run them: company names, websites, locations, descriptions, size and financial estimates, ownership, news, and the names, roles and business contact details of company leaders.
Documents you upload, such as an investment thesis, and the notes, lists, deals and chat conversations you create.

We use this information only to provide the Service to your firm: to show your firm who in its network can reach which companies, research target companies, draft introductions, and answer your questions in chat.

Keeping profiles current

DealTree looks up current professional details for the people and companies in a workspace (such as role, work history and contact details) to keep their profiles current. For a person, this can include current title and company, work and education history, location, headline, profile photo, public social profile links, and contact details such as email addresses (work and personal) and phone numbers. For a company, it can include ownership, leadership, size and recent news. To find the right record, DealTree uses a person's profile link, or their name and company, and a company's name, website and location.

DealTree does this when a user asks, and automatically after connections arrive from a contributor. The results are stored in the firm's workspace.

We also read public company websites directly to research companies.

AI features

DealTree uses an AI model provider to run its chat assistant and research. When you use these features, we send the provider your messages, the relevant information from your firm's workspace (such as contacts, companies and research), and the text of documents you upload, together with your name and your firm's name so the assistant can address you. The AI may search and read public web pages to answer research questions. Our AI provider does not use your data to train its models. It deletes what we send within 30 days, except where it must keep it longer to investigate misuse or to comply with law.

AI output can be wrong. DealTree shows its sources where it has them, and your team decides what to act on.

A firm can invite someone, such as a colleague, investor or adviser, to share their LinkedIn connections with that firm. For a contributor we keep their name and email address, how the firm describes their relationship, any note the inviter wrote, when they were invited, opened the invitation and shared, and how many connections they shared. The firm's workspace looks up current professional details for the connections a contributor shares, as described under "Keeping profiles current". Contributors sign in with a one-time email link that expires after 24 hours, not a password. If a contributor opens the invitation but has not shared, we send at most two reminders.

The invitation email includes a Manage sharing link. It lets the contributor see the status of their sharing and stop future updates at any time. Stopping does not remove connections already shared: those stay in the firm's workspace until the firm removes them. The firm can also remove a contributor, which ends their access and, if the firm chooses, removes the connections they shared. A contributor who wants their shared connections removed can ask the firm, or write to us and we will help.

Emails

We send transactional emails: account invitations, contributor invitations and reminders (which show the inviter's name with "via DealTree"), password-reset links, and one-time sign-in links. We may also email account holders news about DealTree, such as product updates and offers. Every such email has an unsubscribe link, and unsubscribing does not stop the emails the Service needs, such as password resets. We never send marketing email to the people listed in a firm's workspace.

DealTree never sends emails to your contacts for you. When you draft an introduction, it opens in your own email program for you to review and send. DealTree does not connect to or read your mailbox or calendar.

How you use the Service

Our servers keep standard logs (such as IP address, browser type, and the pages and actions requested) to run, secure and fix the Service, and keep them only for a limited time. We may also record which features are used, in our own database, to improve the product. We do not use third-party analytics, advertising or session-recording tools.

Cookies and similar technology

We use only the cookies the Service needs to work: cookies that keep you signed in (one lasts 15 minutes and is renewed automatically, the sign-in renewal cookie lasts 7 days, and a contributor's lasts 24 hours) and a marker that tells the app you are signed in. Your browser's local storage keeps display preferences, such as panel widths and filters, on your own device. We use no advertising or tracking cookies.

Support and staff access

Authorized DealTree staff can access a firm's workspace to set it up, support it and fix problems. We keep business records about our customers (such as the firm, its contacts at DealTree and the status of our relationship) in our own customer records system.

We do not sell personal information, and we do not share it for advertising. We do not use information from the Service for advertising.

We share information only:

Within your firm. Information in a firm's workspace is visible to that firm's users. A contributor's shared connections go to the workspace of the firm that invited them. Workspaces are kept separate: one firm cannot see another firm's data.
With service providers. We share information with service providers that process it on our behalf to operate DealTree, such as hosting, email delivery, AI model services and data services that help keep contact details current.
For legal reasons, when we must comply with law, a court order or a lawful request from authorities, or to protect the rights, safety and security of DealTree, our users or others.
In a business transfer, if DealTree is involved in a merger, acquisition, financing or sale of assets, information may pass to the new owner, who must honor this policy for it.
With your direction or consent.

Where we store information

Our servers and database are hosted in the European Union (the Netherlands). DealTree is a US company: our staff, some internal tools and several of our service providers are in the United States, so your information is also accessed and processed there. Where the law requires safeguards for these transfers, we use them, such as the European Commission's Standard Contractual Clauses.

How long we keep information

Account information: for as long as your account is active. When a firm admin removes a user, that user's account is deleted.
Workspace information (contacts, companies, research, documents, chats): for as long as the firm is a customer, or until the firm deletes it. A firm's users can delete contacts at any time.
When a firm leaves DealTree, we deactivate its workspace and permanently delete its data 30 days later, unless the firm asks us to delete it sooner. We keep a limited record of past activity, usage and costs for as long as we need it for accounting, security and legal purposes.
Backups: deleted information can remain in our hosting provider's backups for a short time before it is overwritten.
Logs: sign-in records for staff administration are kept for 12 months.

Your choices and rights

Your account: you can update your name and photo, and remove your photo, in the Service. To delete your account, ask your firm's admin or write to us.
Contributors: use the Manage sharing link in your invitation to stop updates, and ask the firm (or us) to remove what you shared.
People listed in a workspace: a firm decides what it keeps about its contacts. Contact the firm directly; you can also write to us and we will pass your request on and help where we can.

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, to object to or limit how it is used, and to not be treated differently for exercising these rights. California residents have these rights under the California Consumer Privacy Act; people in the European Economic Area and the United Kingdom have them under the GDPR. To make a request, email support@dealtree.ai. We will verify your identity before acting and reply within the time the law requires. Where we hold the information on a customer firm's behalf, we will refer your request to that firm and support it in responding.

Security

We protect information with measures such as encrypted connections (HTTPS), passwords stored only as one-way hashes, sign-in links and access keys stored only in scrambled (hashed) form, short-lived sessions, and separation of each firm's workspace from every other. No system is perfectly secure; if we learn of a breach that affects your information, we will notify you as the law requires.

Changes to this policy

If we change this policy, we will post the new version here and update the date at the top. If a change is significant, we will also tell account holders by email or in the Service before it takes effect.

Contact us

Questions or requests: support@dealtree.ai

DealTree, Inc., 2127 Morris Ave, Birmingham, AL 35203

DealTree Network Sync (Chrome extension)

DealTree Network Sync is a Chrome extension made by DealTree, Inc. ("DealTree"). It has one job: to bring your own LinkedIn connections into your firm's DealTree workspace and keep them current. This section explains what it reads, what it sends, what it never does, and how to stop it.

What the extension reads

Your LinkedIn connection list. For each of your first-degree connections: name, headline, profile link, LinkedIn member ID, and the date you connected.
Which LinkedIn account is logged in. Its name, profile link and member ID, so you can confirm it is you before anything is shared, and so later checks read the same account. Its headline and profile photo are shown to you on that confirm step only.
LinkedIn's session cookie, on your computer only, so the extension can ask LinkedIn for your connection list as you. It reads no other site's cookies.

It reads these only after you confirm, in DealTree, which LinkedIn account it is and that you want to share.

What it sends, and to whom

Your connections, and the name, profile link and member ID of the logged-in account, go to your firm's DealTree workspace. If someone invited you to share with their firm, they go to that firm's workspace, not to any other firm.
After import, DealTree looks up current professional details for these connections (such as role, work history and contact details) to keep their profiles current. DealTree uses service providers that process data on its behalf to run the service, including data services that help keep contact details current.
The session cookie never leaves your computer. The confirm step's headline and photo are not sent to DealTree's server or stored.
With daily updates on, the extension checks once a day for new connections and sends only those.

Once your connections reach DealTree, the rest of this policy also applies to them, including "Keeping profiles current" and "Who we share information with".

What it never does

It never posts, messages, sends invitations, or changes anything on LinkedIn.
It never visits other people's profiles or reads your messages.
It never sees or stores your LinkedIn password.
It does not sell your data or use it for advertising. It shares it only with your firm's DealTree workspace and the service providers DealTree uses to run it.
It loads no code from the internet; everything it runs ships inside the extension.

What is kept, and where

On your computer: a key that lets the extension add connections for you in one firm, and where your import has got to. Nothing else.
At DealTree: the connections you shared, in your firm's workspace, and the status of your sharing (when it last ran, and whether it is on). DealTree stores only a scrambled (hashed) copy of the extension's key.

How to stop

You can stop at any time, and stopping takes effect immediately. The extension shares nothing more after you stop.

In the extension: turn off daily updates, or disconnect.
In DealTree: turn off "Keep my network up to date" or disconnect.
If someone invited you to share: use the Manage sharing link in your invitation email, or ask the person who invited you.
Or remove the extension from Chrome.

Connections you already shared stay in the firm's workspace. To have them removed, ask the firm (for an invitation, the person who invited you), or contact us using the details under "Contact us" above.

Chrome Web Store data policy

The use of information received from LinkedIn and transferred to DealTree adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.