Privacy Policy

Introduction

Skor Technologies Inc. ("we," "us," "our") operates DealVeto. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service. We are committed to protecting your privacy and handling your data responsibly.

1. Information We Collect

• Name, work email, company, and professional role (at registration)
• Deal data you enter: property addresses, financial assumptions, program inputs, and analysis outputs
• Account credentials (password stored as a cryptographic hash — never in plain text)

• Usage data: pages visited, features used, session duration
• Device and browser information for security purposes
• IP address (used for rate limiting and fraud prevention; not sold or shared)

2. How We Use Your Information

• To provide and improve the Service
• To personalize your experience and pre-fill relevant defaults
• To send product updates and pilot program communications
• To improve cost models using customer-authorized project history or aggregated, de-identified data where permitted by the applicable agreement
• To comply with legal obligations and protect the security of the Service

3. Data Sharing

We do not sell your personal information. The following providers, integrations, and public-data sources receive data only when needed to operate the service or a feature you request:

• Netlify, Inc. — application hosting and server runtime; web requests and submitted feature payloads pass through the runtime as needed to serve the request
• Supabase Inc. — authentication and application database; any customer-specific residency requirement must be confirmed in the signed pilot record
• Anthropic PBC — requested AI-assisted extraction and compatible response features; the applicable document/intake content or bounded feature context is transmitted
• OpenAI, L.L.C., or an approved compatible gateway — requested Veto assistant responses; the message, up to ten prior turns, specialist purpose, and bounded deal/economic context are transmitted for that answer
• Cal.com — optional public-site scheduling; the scheduler loads only after the visitor chooses it and booking information is submitted directly to Cal.com

• Google Maps Platform and MapTiler — typed addresses, selected coordinates, map viewport, and normal browser request metadata may be transmitted when their map/search features are invoked. Google features are also governed by the Google Maps terms and Google Privacy Policy. MapTiler features are governed by the MapTiler Cloud terms
• Regrid — a selected latitude/longitude and bounded parcel lookup parameters are sent through an authenticated server route when parcel lookup is requested
• U.S. Census Bureau, FEMA, USGS, and TxGIO — requested addresses, selected coordinates, accepted parcel boundaries, or bounded sample points are sent to official public services for geocoding, flood/panel, terrain, or Texas parcel screening
• City of Dallas public zoning GIS — selected coordinates are sent only for an applicable requested zoning lookup. Any enabled DCAD appraisal lookup uses a separately approved imported snapshot in the application database, not a live county request

4. AI and Customer Content

• Customer deal content is not used to train a shared cross-customer DealVeto model by default
• The preferred organization-knowledge pattern retrieves from approved sources at answer time so citations, access, and deletion can be governed
• Any future customer-specific fine-tuning requires explicit opt-in, a defined dataset, versioning, evaluation, and a reversible off-ramp
• AI output is assistive; the deterministic screening engine and user-approved cost basis remain the calculation authority

5. Data Retention

• Active account data: retained while your account is active
• Deletion requests: manually reviewed to verify identity, scope, authority, applicable legal/security holds, and a recoverable execution plan before irreversible action
• Completion timing: recorded for the applicable pilot/request; this policy does not promise immediate or automated permanent deletion
• DealVeto authority/audit events: may be retained for up to 2 years for security and compliance; provider runtime logs follow the provider and contracted control configuration
• You may submit a deletion request by contacting legal@dealveto.com

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your deal data in JSON format
• Withdraw consent at any time

To exercise these rights: legal@dealveto.com

7. Data Security

We apply technical and operational safeguards appropriate to the pilot service:

• Encryption in transit and managed-provider encryption at rest
• Authenticated access and database access controls
• Invite-only pilot access with workspace configuration review
• Security and data-flow reviews as features change

8. Cookies and Tracking

We use essential cookies for authentication and session management. DealVeto may send content-limited operational events to a same-origin endpoint and server logs to measure whether core workflows complete. The current application does not load third-party product analytics or advertising cookies.

The public demo offers an optional Cal.com scheduler. It is not loaded until you choose to enable it; booking information is then submitted directly to Cal.com under its own privacy terms.

9. International Users

DealVeto is operated from the United States. If you access the Service from the EU, UK, Canada, or other jurisdictions, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer.

For EU users: we rely on legitimate interests and consent as our legal bases for processing. You have rights under GDPR including the right to erasure.

10. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We will notify you of material changes via email before they take effect. Continued use constitutes acceptance of the updated policy.

12. Contact

Privacy questions or requests:
legal@dealveto.com · Skor Technologies Inc. · Austin, Texas