Privacy Policy

Last updated: February 2026

At Dealtact (operated by Cyzag Ltd), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and website.

Information We Collect

We collect information that you provide directly to us when you:

  • Create an account (name, email address, company name, password)
  • Use our CRM features (deal data, contact information, company data, notes, and activities)
  • Connect third-party integrations (Microsoft 365 or Google account data for email and calendar sync)
  • Interact with our AI features (conversation history, prompts, and generated content)
  • Contact us via our website or email
  • Subscribe to our communications

We also automatically collect certain technical information, including your IP address, browser type, operating system, and usage patterns when you access our platform.

How We Use Your Data

We use the information we collect to:

  • Provide, maintain, and improve our CRM platform
  • Power AI-driven features including deal coaching, insights, and content generation
  • Process your transactions and manage your subscription
  • Send you technical notices, updates, and administrative messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyse trends, usage, and activities to improve user experience
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities

Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data at rest and in transit (TLS 1.2+)
  • Azure cloud infrastructure with enterprise-grade security controls
  • Row-level data isolation between tenants
  • Role-based access controls
  • Regular security assessments and monitoring
  • Secure authentication with JWT tokens

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018, you have the following rights:

  • Right of access — You can request a copy of your personal data
  • Right to rectification — You can request correction of inaccurate data
  • Right to erasure — You can request deletion of your personal data
  • Right to restrict processing — You can request limitation of data processing
  • Right to data portability — You can request your data in a machine-readable format
  • Right to object — You can object to processing of your personal data
  • Right to withdraw consent — You can withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@dealtact.ai. We will respond to your request within 30 days.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. When you close your account, we will delete or anonymise your personal data within 90 days, unless we are required to retain it for legal or regulatory purposes. Backups containing personal data are retained for up to 30 days after deletion.

Cookies & Analytics

We use essential cookies to ensure the proper functioning of our platform, including authentication and session management.

With your consent, we use Google Analytics 4 to understand how visitors interact with our website. Google Analytics sets cookies (including _ga and _ga_*) to collect anonymised usage data such as pages visited, session duration, and referral source. This data is processed by Google in accordance with their Privacy Policy.

Analytics cookies are only loaded after you give consent via our cookie banner. You can withdraw consent at any time by clearing your browser cookies and revisiting the site. Our platform does not use third-party advertising cookies.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@dealtact.ai
  • Company: Cyzag Ltd (Company No. 07908614)
  • Registered address: Devonshire House, 582 Honeypot Lane, Stanmore, Middlesex, HA7 1JS, United Kingdom

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.