Part 2 of 2 · Legal

Privacy Policy

Effective date: 9 June 2026

This Privacy Policy explains how Innov8 ("we", "us", "our") collects, uses, stores, shares, and protects your personal data when you use DealMind (the "Service"). We comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong SAR ("PDPO") and, for users in the United Kingdom, the UK General Data Protection Regulation and the Data Protection Act 2018 ("UK GDPR").

1. Who We Are

Innov8 of Suite 3B, Tak Cheung Building, 22-24 Wing Lok Street, Sheung Wan, Hong Kong SAR is the data controller for personal data processed through the Service. Contact: innov8.asia@gmail.com.

2. Data We Collect

2.1 Information you provide

Email address and name (at registration)
Professional role, deal-type preferences, negotiation frequency (at onboarding)
Deal descriptions, counterpart information, and context (Prep)
Messages and negotiation threads (Nego Coach)
Uploaded documents — PDF, Word, images (Prep and Nego Coach)
Debrief notes and outcomes (Debrief)
Support enquiries

2.2 Collected automatically

Authentication session data
Usage logs (which modes, when — for plan enforcement)
Device and browser type (for responsive design and PWA)

3. Legal Bases for Processing (UK GDPR)

For UK users we rely on the following legal bases:

Contract — to provide the Service you have signed up for
Legitimate interests — to operate, secure, and improve the Service
Consent — where required, e.g. optional communications (withdrawable at any time)
Legal obligation — to comply with applicable law

Under the PDPO we process your data in accordance with the six Data Protection Principles and only for the purposes set out in this Policy.

4. How We Use Your Data

Provide and improve the Service
Process AI requests via Anthropic's Claude API
Enforce subscription plan limits
Process payments via Stripe
Respond to support enquiries
Send service-related (not marketing) communications unless you consent

We do NOT sell your data. We do NOT use your negotiation content to train AI models. Your deal data is private to your account.

5. Frontier AI Processing — Anthropic

To generate outputs, the content you submit (including uploaded documents) is transmitted to Anthropic, PBC in the United States for processing by its Claude frontier AI models via the Claude API. Anthropic acts as our data processor / sub-processor.

Per Anthropic's commercial API terms, data submitted via the API is not used to train Anthropic's models and is retained only as needed to provide the service and meet legal obligations. Anthropic's privacy policy and commercial terms are available at www.anthropic.com. By using the Service you consent to this processing as necessary to deliver the AI features you request.

If you do not want specific information processed by a third-party AI model, do not submit it to Prep, Nego Coach, or Debrief.

6. Sub-Processors and Data Sharing

We share data only with the following sub-processors, strictly to deliver the Service:

Anthropic, PBC (USA) — AI model processing
Supabase Inc. — database, auth, hosting (data hosted in Singapore)
Stripe — payment processing (card data handled by Stripe, never stored by us)
Resend / email provider — support and transactional email
Lovable / hosting provider — application delivery (beta phase)

We do not share your data with advertisers or data brokers. We may disclose data where required by law or to protect our legal rights.

7. International Data Transfers

Your data may be processed outside Hong Kong and the UK, including in the United States (Anthropic, Stripe) and Singapore (Supabase). For UK users, such transfers are made under appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or equivalent contractual protections. By using the Service you acknowledge these transfers are necessary to provide it.

8. Data Retention

We retain your data while your account is active. On account deletion, data is permanently deleted within 30 days unless longer retention is required by law. You may request earlier deletion at innov8.asia@gmail.com.

9. Your Rights

Under the PDPO (Hong Kong) you may request access to and correction of your personal data, and ask about our policies and practices.

Under the UK GDPR (UK users) you also have rights to: access, rectification, erasure, restriction, data portability, objection to processing, and the right to withdraw consent. You may also object to any automated decision-making.

To exercise any right, contact innov8.asia@gmail.com. We respond within 40 days (PDPO) or one month (UK GDPR). UK users may complain to the Information Commissioner's Office (ico.org.uk). Hong Kong users may complain to the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk).

10. Automated Processing

The Service uses AI to generate negotiation suggestions and scores. These are decision-support tools only and do not produce legal or similarly significant automated decisions about you. You remain responsible for all decisions and actions you take.

11. Security

We implement Row Level Security so your data is accessible only to your authenticated account, encryption in transit, and access controls. Payment data is handled solely by Stripe. No system is perfectly secure; we cannot guarantee absolute security but take reasonable measures to protect your data.

12. Cookies and Local Storage

We use browser localStorage for authentication sessions and to remember onboarding state. We do not use third-party advertising or tracking cookies. As only essential storage is used, no cookie-consent banner is required, though UK users are informed here in accordance with PECR.

13. Children

The Service is not directed at persons under 18 and we do not knowingly collect their data. Contact us if you believe we have done so.

14. Changes and Contact

We may update this Policy and will notify material changes by email or in-app. Controller: Innov8, Suite 3B, Tak Cheung Building, 22-24 Wing Lok Street, Sheung Wan, Hong Kong SAR. Email: innov8.asia@gmail.com. Web: www.dealmind.pro.

Read the Terms of Service →