Privacy Policy
Last updated: 1 October 2026
1. Introduction
PE Deals ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services.
2. Data Controller
PE Deals is the data controller responsible for your personal data. For data protection enquiries, please contact us via our contact page.
3. Information We Collect
Account information: When you register, we collect your email address, hashed password, and account preferences.
Billing information: Payment processing is handled by Stripe. We do not store full credit card numbers. We receive your subscription status, plan type, and billing identifiers from Stripe.
Usage data: We collect analytics data including pages visited, features used, and session duration through PostHog, Google Analytics 4, and Microsoft Clarity. This helps us improve the platform.
Deal submissions: If you submit a deal, we collect the information you provide in the submission form.
Communications: If you contact us, we retain the content of your message and your contact details.
4. How We Use Your Data
- To provide, maintain, and improve the Service
- To manage your account and subscription
- To send transactional emails (account confirmation, password resets, deal alerts you have configured)
- To analyse usage patterns and improve the user experience
- To enforce our Terms of Service and prevent misuse
- To comply with legal obligations
5. Legal Basis for Processing (GDPR)
We process your data on the following bases:
- Contract: Processing necessary to provide the Service you have signed up for
- Legitimate interest: Analytics, fraud prevention, and service improvement
- Consent: Marketing emails and optional cookies (you may withdraw consent at any time)
- Legal obligation: Tax records, regulatory compliance
6. Data Sharing
We do not sell your personal data. We share data with the following categories of service providers, under appropriate data processing agreements:
- Supabase: Authentication and database hosting
- Stripe: Payment processing
- Cloudflare: Hosting and CDN
- Resend: Transactional email delivery
- PostHog, Google Analytics, Microsoft Clarity: Usage analytics
- Google (Gemini), Groq, OpenRouter: Processing for our AI features (the research assistant, deal analyses and similarity search). Questions and descriptions you submit to those features are sent to these providers to generate an answer.
Connecting PE Deals to AI assistants (Claude connector)
You can connect your PE Deals account to an AI assistant such as Claude, which can then look up PE Deals data while you chat. This is optional, uses your existing account, and is read-only: a connected assistant cannot change anything in PE Deals or see your billing details.
- What we receive: only the requests the assistant makes to our tools — search filters such as a sector, dates or deal type; a deal or investor identifier; or, for similarity search, a short description of the deals you want. We do not receive your conversation with the assistant.
- What we send back: PE Deals data within your plan's limits. The assistant's provider (for Claude, Anthropic) handles that data under its own terms and privacy policy.
- What we store: a record of the connection (your account, the assistant's name and where it receives access, and when you connected), and access credentials held only as one-way hashes, on Cloudflare. We also keep a count of requests and results per account per day to apply your plan's daily limits; these counts are deleted after 90 days. We do not store the contents of the requests.
- Similarity search (Pro and Enterprise) sends the description to Google (Gemini) to compare it with deals.
- Operational logs: our hosting provider, Cloudflare, records request times, status codes and errors for a short period, to keep the service running.
- Disconnecting: remove PE Deals in your assistant's connector settings. A connection that is not used for 90 days expires on its own, and if you delete your PE Deals account, every connection stops working immediately.
7. Cookies
We use cookies for authentication (session cookies), preferences, and analytics. Essential cookies are required for the Service to function. Analytics cookies can be declined. See our cookie preferences for more detail.
8. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g. billing records retained for 7 years for tax purposes).
9. Your Rights (GDPR)
Under the UK GDPR, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restriction: Request that we limit processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Object: Object to processing based on legitimate interest
To exercise any of these rights, contact us via our contact page. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organisational measures to protect your data, including encrypted connections (TLS), hashed passwords, HMAC-signed session tokens, and access controls on our infrastructure.
11. International Transfers
Some of our service providers operate outside the UK. Where data is transferred internationally, we ensure adequate safeguards are in place (e.g. Standard Contractual Clauses, adequacy decisions).
12. Children
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or on-site notice. Continued use of the Service after changes constitutes acceptance.
14. Contact and Complaints
For privacy-related questions, contact us via our contact page.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.