Private-beta policy
Privacy
What DealSkeptic collects during the invite-only beta, why it is used, and how to request removal.
Information we handle
We receive your account email and authentication-provider user ID when you sign in. A property review includes the address you submit, any listing claims you enter, selected public-record facts, derived findings, source and retrieval details, and report feedback you choose to provide.
Fields we exclude
Source-derived reports are designed to exclude natural-person owner, buyer, seller, grantor, grantee, applicant, taxpayer, and contractor names; phone numbers and email addresses; mailing or contact addresses; and other person-list identifiers. The subject property’s site address is retained because it is required for a property-specific review.
How we use and share information
We use this information to produce and save a property-specific report, operate the beta, investigate reliability, review feedback, and send product onboarding or service emails. Our email provider receives your account email, authentication-provider user ID, beta lifecycle stage, report count, and report activity dates. We do not send property addresses, listing claims, report contents, or public-record results to the email provider. We do not sell source datasets or provide raw-source exports. Reports using private-beta sources can be shared only with signed-in, approved beta members. Eligibility is checked whenever a shared report loads, and a source-policy change can disable an existing link.
Current retention
| Information | Current handling | Retention |
|---|---|---|
| Transient raw source responses | Processed in memory for the individual request; no DealSkeptic application cache is enabled. | 0-second application cache TTL; discarded when request processing ends. |
| Normalized selected fields | Only allowlisted property fields needed for the report are retained in a saved report. | For the private-beta period or until a verified deletion request; no fixed automatic expiry is enabled yet. |
| Derived spatial matches and findings | Stored in the report with source and retrieval context; old reports are not silently refreshed. | For the private-beta period or until a verified deletion request. |
| Submitted address and listing claims | Stored with a saved report so the user can understand what was reviewed. | For the private-beta period or until a verified deletion request. |
| Feedback | Rating, optional reason, and optional comment are stored with a pseudonymous browser identifier. | For the private-beta period or until a verified deletion request. |
| Operational telemetry | Limited to timing, outcome, jurisdiction, counts, source status, and hashed browser identifier when available. | For the private-beta period; there is no fixed automatic expiry yet. Provider service/security logs follow provider settings. |
| Account and beta membership | An external authentication provider handles sign-in; DealSkeptic stores beta email, user ID, and access status. | Until beta access is removed, the private beta ends, or a verified deletion request is completed. |
Because this is an early beta, fixed automatic expiry is not yet enabled for saved reports, feedback, telemetry, or beta membership. This page states that limitation instead of promising an automated deletion schedule that does not exist.
Service providers and safeguards
We use specialized providers for application hosting, authentication, database storage, email delivery, and secure source connectivity. Onboarding emails include an unsubscribe option, and delivery or unsubscribe events are retained for operations and suppression. We use access controls, source field allowlists, report sanitization, authenticated sharing rules, and minimal telemetry. No internet service can guarantee absolute security.
Deletion, correction, and questions
Email support@dealskeptic.com from the address associated with your account. After verification, DealSkeptic can revoke report links and remove saved reports, related feedback, beta-membership records, and the associated authentication account. Provider backups and security logs may age out on provider-controlled schedules. Use the same address to report an incorrect fact or privacy concern.