Privacy Policy
Last Updated: November 23, 2025
Summary (Plain-English)
We collect the minimum data needed to run SmartDealMind—account info, preferences, and (if you choose) your BFMR credentials to monitor and auto-reserve deals you select. Sensitive items are encrypted. We don't sell personal data. You can request access/deletion at any time.
1. Introduction
This Privacy Policy describes how SmartDealMind LLC ("we", "us", "our") collects, uses, and protects personal information when you use our deal tracking and monitoring service.
Data Controller:
SmartDealMind LLC
4519 Woodruff Rd, Unit 4 #6356
Columbus, GA 31904
Email: privacy@smartdealmind.com
2. Information We Collect
Account Information
- Full name
- Email address
- Password (encrypted)
- Profile information
- Billing address (for paid plans)
Payment Information
- Processed and stored by Stripe (PCI DSS compliant)
- We store only: billing address, last 4 card digits
- We never store complete credit card numbers
Usage Data
- Pages visited and features used
- Click patterns and navigation
- Time spent on pages
- Error logs
- Browser type and version
- Operating system
- Device type
- IP address (city/country level)
- Language preferences
Deal Tracking Data
- BFMR credentials (encrypted)
- Monitor rules and preferences
- Deal preferences and alerts
- Reservation history
- Notification logs
3. How We Use Information
Service Delivery:
- Provide and maintain Services
- Process transactions
- Authenticate identity
- Monitor deals and send alerts
- Provide customer support
Improvement:
- Detect errors and bugs
- Optimize performance
- Develop new features
- Conduct analytics
Security:
- Detect fraud and abuse
- Prevent security threats
- Enforce Terms
- Investigate violations
Communications:
Transactional (cannot opt out):
- Account verification
- Password resets
- Deal alerts and notifications
- Billing confirmations
- Service disruptions
- Security alerts
Marketing (can opt out):
- Product updates
- Tips and best practices
- Promotional offers
Opt-out: Click unsubscribe or email privacy@smartdealmind.com
5. Data Security
Technical Measures:
- TLS 1.3 encryption (data in transit)
- AES-256 encryption (data at rest)
- Encrypted backups
- Multi-factor authentication available
- Role-based access control
- DDoS protection (Cloudflare)
- Regular security audits
Your Responsibilities:
- Use strong, unique passwords
- Enable MFA when available
- Don't share credentials
- Report suspicious activity immediately
Report security issues: security@smartdealmind.com
No system is 100% secure. We implement industry-standard safeguards but cannot guarantee absolute security.
6. Data Retention
Active Accounts: Data retained while account active
Deleted Accounts:
- Deal history hidden after 60 days
- Account data permanently deleted after 90 days
- Personal identifiers removed immediately
- Backups purged within 30 days
Exceptions:
- Legal holds
- Compliance requirements (7 years for financial records)
- Fraud prevention (hashed identifiers only)
Request deletion: privacy@smartdealmind.com or via account settings
7. Your Privacy Rights
All Users
- Access: Request copies of your data
- Correction: Update inaccurate information
- Deletion: Request data deletion
- Portability: Download data in JSON/CSV formats
- Objection: Object to marketing
EU/EEA Users (GDPR)
Additional Rights:
- Restriction of processing
- Object to automated decisions
- Lodge complaints with supervisory authority
Legal Basis: Contract performance, legitimate interests, consent, legal obligations
California Residents (CCPA)
Your Rights:
- Know what data is collected
- Know if data is sold (we don't sell)
- Delete your data
- Correct inaccurate data
- Non-discrimination for exercising rights
We do NOT sell personal information.
How to Exercise Rights
Email: privacy@smartdealmind.com
Include:
- Full name and registered email
- Specific request
- Proof of identity (if needed)
Response Time: Acknowledgment within 48 hours, fulfillment within 30 days
9. International Data Transfers
Primary Storage: United States (Cloudflare global network)
EU Transfers: Standard Contractual Clauses (SCCs), adequate safeguards per GDPR
10. Children's Privacy
The Service is not intended for individuals under 18.
We do not knowingly collect data from children under 18.
If you believe a minor has provided data, contact us to remove it.
11. Changes to Privacy Policy
We may update this Policy:
- Posted with updated date
- Email for material changes
- 30-day notice when possible
Continued use = acceptance
12. Contact Us
Privacy Requests: privacy@smartdealmind.com
Security Issues: security@smartdealmind.com
General Support: support@smartdealmind.com
Mailing Address:
SmartDealMind LLC
Privacy Team
4519 Woodruff Rd, Unit 4 #6356
Columbus, GA 31904
United States
Response Time:
- Routine: 5 business days
- Rights requests: 30 days
- Urgent security: 24 hours