Privacy Policy

What Deals does

Deals is a CRM for content creators to manage outreach to brands for sponsorship and UGC deals. It helps creators manage brand contacts, send outreach from a connected Gmail or Microsoft Outlook account, schedule follow-ups, and track replies. This policy explains what information the service uses and why.

Information we handle

We handle your account email and profile information; the brands and contacts you enter; notes, templates, custom fields, follow-up settings, and schedules; and records of messages you send or receive through Deals. These records can include recipient or sender addresses, subject lines, message text or snippets, timestamps, and conversation identifiers. When you connect an inbox, we also store its address and connection details. We may process technical information needed to operate and troubleshoot the service, such as request and error information.

How we use it

We use this information to sign you in, show your outreach history, fill templates, send messages you request, send scheduled follow-ups when you enable auto-send, identify replies from brands you have contacted, and update brand statuses. Inbox checks can run when you open the dashboard or choose to check for replies. We use operational information to maintain and secure the service. We do not use connected inbox data for advertising or sell it.

Google Cloud, Google account and Gmail data

Google Cloud is used to configure the Google account authorization that enables Google sign-in and the Gmail connection; it is not where Deals stores your outreach records. Google sign-in is separate from connecting Gmail. If you connect Gmail, Deals requests exactly three Gmail scopes:

• .../auth/gmail.send — Send email on your behalf. Used to send outreach and follow-up emails directly from your own connected Gmail account, so replies land in your normal inbox rather than a third-party address. Emails are only sent when you explicitly click “Send” or when you have enabled the opt-in auto-follow-up feature that you configure yourself, and every sent email is logged in Deals for your own audit trail.
• .../auth/gmail.readonly — View your email messages and settings. Used solely to read your connected inbox to detect replies from brands you have contacted, so Deals can mark that brand’s status as “Replied” and stop sending further scheduled follow-up emails to avoid over-contacting a brand that has already responded.
• .../auth/gmail.modify — Read, compose, and send emails from your Gmail account. Used only to send email on your behalf (composing and sending outreach and follow-up messages) and, optionally, to label or archive threads you have already replied to, for your own inbox organization.

We do not read, store, or process email unrelated to brand contacts you have explicitly added to your outreach list, and we never delete emails from your mailbox. Relevant sent and matched received message details are saved in your Deals account. You can disconnect Gmail in Settings or revoke access in your Google account at any time.

Google API Services User Data Policy: Deals’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data only to provide the inbox and outreach features you authorize, do not use it to train generalized AI models, and do not share it for advertising.

Microsoft Outlook data

If you connect Outlook, Deals uses the permissions you grant to read recent messages from brands you have contacted and send outreach from your Microsoft mailbox. Relevant sent and matched received details are saved in your Deals account. You can disconnect Outlook in Settings or revoke access through your Microsoft account.

Where information is stored and shared

Account and outreach records are stored in Lovable Cloud. Access to user-owned records is restricted to the account that owns them. Connected inbox authorization is managed through Lovable’s connector service; the app stores an encrypted connection key server-side rather than placing mailbox credentials in your browser. Messages are passed to Google or Microsoft when you send or sync mail. These providers and hosting services process information to deliver the features you use. We do not share mailbox contents with unrelated third parties for marketing.

Security and retention

We use account authentication, access controls that separate users’ records, encrypted connection-key storage, and server-side handling of inbox access. No online service can promise absolute security. Outreach records remain in your account until removed or the account is deleted, subject to applicable operational and legal requirements; disconnecting a mailbox stops future access through that connection but does not automatically delete message records already saved in Deals. Revoking access at Google or Microsoft also prevents further mailbox access. If you need account or data deletion, contact the service operator through your existing support channel.

Your choices

You can edit or remove brand information and templates in the app, disable auto-send in Settings, disconnect either inbox, or revoke provider permissions directly. Do not connect an inbox unless you authorize Deals to process its data as described here.

Children and updates

Deals is intended for professional outreach, not for children. We may update this policy as the service changes; the effective date above will reflect the latest version. Please review it periodically.