Privacy Policy

This Privacy Policy explains how DealsSpy.com ("DealsSpy", "we", "us") collects, uses, shares and protects personal information when you use our community deals and coupons platform (the "Service"). Because our community spans India, the United States and the United Kingdom, this policy describes rights under each region's laws. The operating legal entity, registered address and data-protection contacts are placeholders below and must be confirmed before launch.

1. Who we are

The data controller is [Legal Entity Name], [registered address]. For privacy questions, contact [privacy@dealsspy.com]. Users in India can also reach our Grievance Officer (see section 11).

2. What data we collect

• Account data — the email address, username and password hash you create at sign-up; optional profile fields (display name, avatar, country); and, if you sign in with Google, the basic profile Google shares with us.
• Content you submit — deals, coupons, forum posts, comments, votes, reports and messages, together with any images you upload.
• Usage data — pages viewed, deals clicked, searches, votes and other interactions, plus approximate device/browser details and (via cookies) a session id.
• Technical data — IP address, timestamps and log data we need for security, fraud prevention and to operate the Service.
• Cookies & similar technologies — see our Cookie Policy for the full list and controls.

We do not knowingly collect data from anyone under 18. See our Terms for eligibility.

3. Why we use your data, and our lawful bases

Under UK/EU GDPR we rely on the following lawful bases:

• Contract — to create and run your account and deliver the Service you request.
• Legitimate interests — to keep the Service secure, prevent fraud and manipulation (e.g. manufactured votes), moderate content, and improve features. We balance these against your rights.
• Consent — for optional analytics/marketing cookies and any marketing emails. You can withdraw consent at any time.
• Legal obligation — to comply with applicable law, including responding to lawful requests and grievances.

4. Affiliate links and how we earn

DealsSpy earns affiliate commissions when you click certain links and make a purchase. Outbound deal links pass through our redirector so we can attribute a click to the relevant affiliate network. This helps fund the Service and does not change the price you pay. See our Affiliate Disclosure for details.

5. Who we share data with

We do not sell your personal information for money. We share limited data with:

• Affiliate networks and merchants — when you click an outbound deal link, the network may receive click and referral data needed to attribute a purchase.
• Analytics providers — only if you accept optional analytics cookies; they help us understand aggregate usage.
• Infrastructure and service providers — hosting, email delivery, error monitoring and anti-abuse services acting as our processors under contract.
• Authorities — where required by law or to protect the Service and our users.

Note: under US privacy laws, sharing data with advertising/analytics partners via cookies can count as a "sale" or "sharing". You can opt out — see section 8.

6. International transfers

Because we serve India, the US and the UK, your data may be processed in countries other than your own. Where we transfer data internationally we use appropriate safeguards (such as Standard Contractual Clauses / the UK IDTA and equivalent mechanisms). Details to be confirmed with counsel.

7. Your rights — GDPR (UK/EU)

If you are in the UK or EU, you have the right to:

• access a copy of your data;
• correct inaccurate data;
• erase your data ("right to be forgotten");
• restrict or object to certain processing (including profiling);
• data portability;
• withdraw consent at any time; and
• lodge a complaint with your supervisory authority (in the UK, the Information Commissioner's Office).

8. Your rights — CCPA / CPRA (United States)

If you are a California resident (and, where similar state laws apply, elsewhere in the US), you may:

• know what personal information we collect, use and disclose;
• request access to and deletion of your personal information;
• correct inaccurate personal information;
• limit the use of sensitive personal information; and
• opt out of the "sale" or "sharing" of your personal information.

Do Not Sell or Share My Personal Information. You can opt out of cookie-based sharing with advertising/analytics partners at any time via our cookie controls (Reject non-essential in the cookie banner or the Cookie Policy).

Global Privacy Control (GPC). We aim to honour the browser-level GPC signal as a valid opt-out of sale/sharing for the browser that sends it. We will not discriminate against you for exercising any of these rights.

9. Your rights — India DPDP Act

If you are in India, under the Digital Personal Data Protection Act you may:

• access and obtain a summary of the personal data we process about you;
• request correction, completion, updating or erasure of your personal data;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• raise a grievance with our Grievance Officer (section 11) before approaching the Data Protection Board of India.

Where we rely on your consent, you may withdraw it as easily as you gave it.

10. Exporting or deleting your data

You will be able to download a copy of your data and request account deletion from your account settings at /account/export-data and /account/delete. (These self-service tools are coming soon.) Until they launch, email [privacy@dealsspy.com] or use the grievance form and we will action your request.

11. India Grievance Officer

In accordance with Indian law (including the IT Rules 2021 and the DPDP Act), our Grievance Officer is:

• Name: [Grievance Officer Name]
• Email: [grievance@dealsspy.com]
• Address: [registered address]

We acknowledge grievances within 24 hours and aim to resolve them within 15 days. You can file one via the grievance & takedown form.

12. Data retention

We keep personal data only as long as needed for the purposes above — for the life of your account, and afterwards only where required for legal, security or fraud-prevention reasons. Aggregated or de-identified data that no longer identifies you may be kept for analytics.

13. Security

We use technical and organisational measures (hashed passwords, access controls, encryption in transit) to protect your data. No system is perfectly secure, but we work to protect it and will notify affected users and regulators of breaches where the law requires.

14. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new "last updated" date, and where required we will notify you.

15. Contact us

Privacy questions: [privacy@dealsspy.com]. India grievances: see section 11. You can also use our contact page.