Privacy Policy

Last Updated: August 6, 2026

DealRoom Technologies, Inc. (DealRoom, we, us, or our) provides cloud-based software and related services that help organizations manage mergers and acquisitions, diligence, pipeline, integration, project management, virtual data rooms, and related workflows. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, use our products and services, communicate with us, attend our events, or otherwise interact with us.

This Privacy Policy applies to:

• DealRoom websites that link to this Privacy Policy;
• DealRoom Cloud Services, applications, and related products and services;
• DealRoom virtual data rooms, workspaces, project management tools, AI Features, and related software-as-a-service offerings;
• customer support, sales, marketing, events, and other business communications; and
• any other products or services that link to this Privacy Policy.

Together, we refer to these as the Services. This Privacy Policy does not apply to third-party websites, applications, integrations, or services that DealRoom does not own or control.

For purposes of this Privacy Policy, Services includes DealRoom’s websites, Cloud Services, applications, and related products and services that link to or reference this Privacy Policy. Capitalized terms not defined in this Privacy Policy have the meanings given to them in the applicable agreement between DealRoom and the customer, including DealRoom’s Terms of Service, Software as a Service Agreement, Data Processing Agreement, or AI Feature Terms of Use, as applicable.

1. DealRoom’s Role

DealRoom processes personal information in different roles depending on the context.

Customer Data

When a DealRoom customer or its Authorized Users submit, post, upload, transmit, store, or otherwise make available information, data, files, documents, or other content through the Cloud Services, DealRoom generally processes that information on behalf of the customer and in accordance with the applicable agreement between DealRoom and that customer. We refer to this information as Customer Data.

Customers determine what Customer Data is submitted to the Cloud Services. DealRoom does not determine the contents of Customer Data and does not review, validate, or analyze Customer Data except as necessary to provide, maintain, secure, troubleshoot, or support the Services, comply with law, protect the Services, or as otherwise permitted by the applicable customer agreement.

Customers are responsible for determining what Customer Data is submitted to the Cloud Services and for obtaining all required rights, notices, consents, authorizations, and legal bases for that Customer Data. DealRoom does not independently verify that a customer has obtained such rights, notices, consents, authorizations, or legal bases.

If you are an Authorized User accessing the Services through your employer, organization, transaction counterparty, advisor, or another DealRoom customer, that customer may control the applicable workspace, project, virtual data room, user permissions, and Customer Data. Please contact that customer directly with questions about its privacy practices or to exercise privacy rights relating to Customer Data controlled by that customer.

DealRoom Controlled Business Data

DealRoom acts as an independent business or controller for personal information we collect and use for our own business purposes, such as website analytics, marketing, sales, account administration, billing, security, product usage analytics, and customer support.

2. Personal Information We Collect

The personal information we collect depends on how you interact with us and which Services you use.

Account and Profile Information

We may collect personal information when you create, register, administer, or use an account, including:

• name;
• business email address;
• business phone number;
• company or organization;
• job title or role;
• username, user ID, password, and authentication information;
• account settings and preferences;
• profile information; and
• information provided through single sign-on or other authentication providers.

Customer Data

Customers and Authorized Users may submit, upload, transmit, store, or otherwise make available Customer Data through the Cloud Services. Customer Data may include documents, files, messages, comments, metadata, diligence materials, transaction records, workflows, tasks, Q&A, and other information selected by the customer or its Authorized Users.

DealRoom does not require customers to upload Sensitive Personal Information, protected health information, financial account information, government identification numbers, or other highly sensitive information to use the Services. Customers remain responsible for determining whether such information may be uploaded and for ensuring they have any required rights, notices, consents, authorizations, and agreements in place.

Communications and Support Information

When you communicate with us, request support, submit a form, attend a webinar or event, request a demo, participate in a survey, or otherwise interact with us, we may collect:

• contact information;
• company and role information;
• communications content;
• support requests;
• feedback;
• survey responses;
• event registration information; and
• any other information you choose to provide.

Payment and Billing Information

If you purchase Services, we may collect billing and transaction information, such as:

• billing contact information;
• invoice information;
• payment status;
• tax information; and
• related account and transaction records.

If payment card information is required, it may be collected and processed by our payment processor, and DealRoom may receive limited transaction details.

Usage, Device, Technical, and Activity Information

We may automatically collect information about your use of the Services and our websites, including:

• IP address;
• device identifiers;
• browser type;
• operating system;
• internet service provider;
• referring and exit pages;
• pages, files, or features viewed;
• dates and times of access;
• links clicked;
• search terms;
• log data;
• access and authentication events;
• feature usage;
• error reports;
• performance data; and
• other information about interactions with the Services.

For the Cloud Services, we may also collect and maintain audit logs and activity records, including information about access to workspaces, rooms, projects, documents, files, folders, tasks, comments, Q&A, permissions, exports, downloads, uploads, views, searches, and other user actions, together with associated dates, times, IP addresses, device information, browser information, and session information.

Location Information

We may infer approximate location from information such as IP address. For example, we may use approximate location to help secure the Services, understand geographic usage, apply regional settings, or personalize website content. We do not collect precise geolocation information unless we expressly disclose that collection and, where required, obtain consent.

Information from Third Parties

We may receive personal information from third parties, including:

• customers and Authorized Users;
• your organization;
• identity providers and single sign-on providers;
• Third-Party Products;
• service providers;
• business partners;
• event co-sponsors;
• publicly available sources;
• marketing and sales intelligence providers; and
• third-party platforms where you interact with DealRoom.

3. Third-Party Products and Google Workspace

Certain Services may allow customers or Authorized Users to connect, enable, or use Third-Party Products, such as Google Workspace, Gmail, Google Drive, calendar tools, identity providers, or other integrations.

If a customer or Authorized User enables a Third-Party Product for use with the Services, DealRoom may access, collect, use, process, and store information from that Third-Party Product as necessary to provide the requested functionality. Depending on the Third-Party Product enabled, this may include account identifiers, file metadata, files, email metadata, email content, calendar information, or other information authorized by the customer or Authorized User.

DealRoom uses information obtained from Third-Party Products only to provide, maintain, secure, troubleshoot, and support the requested functionality and related Services, or as otherwise authorized by the customer or Authorized User.

Google API Data

If you connect a Google account or authorize DealRoom to access Google Workspace APIs, DealRoom’s use and transfer of information received from Google APIs will comply with applicable Google API Services User Data Policy requirements.

DealRoom does not use data obtained from Google Workspace APIs to develop, improve, or train generalized artificial intelligence or machine learning models.

4. How We Use Personal Information

We may use personal information for the following purposes.

To Provide and Operate the Services

We use personal information to:

• provide, host, operate, and maintain the Services;
• create and administer accounts;
• authenticate users;
• enable customer-selected features, configurations, workflows, and Third-Party Products;
• process Customer Data as instructed by customers;
• provide customer support and technical assistance;
• troubleshoot issues;
• process transactions and invoices;
• communicate about the Services; and
• fulfill our contractual obligations.

To Secure and Protect the Services

We use personal information to:

• monitor, prevent, detect, investigate, and respond to security incidents;
• protect against fraud, abuse, unauthorized access, and misuse;
• verify user identity and permissions;
• maintain logs and audit records;
• enforce agreements and policies; and
• protect the rights, safety, and property of DealRoom, our customers, Authorized Users, and others.

To Improve and Develop the Services

We use personal information to:

• understand how the Services are used;
• improve performance, usability, and reliability;
• develop new features and functionality;
• analyze trends and usage patterns;
• conduct internal research and business analysis;
• support quality control, training, internal reporting, forecasting, and business modeling; and
• generate Aggregated Statistics or de-identified information.

For Sales, Marketing, and Events

We use personal information to:

• respond to inquiries and demo requests;
• send marketing communications;
• provide information about DealRoom products, services, events, webinars, and resources;
• personalize website and marketing content;
• measure the effectiveness of marketing campaigns;
• administer events, surveys, and promotions; and
• identify potential business opportunities.

For Legal and Compliance Purposes

We use personal information to:

• comply with applicable law;
• respond to lawful requests, subpoenas, court orders, and legal process;
• enforce our agreements;
• resolve disputes;
• maintain business records;
• conduct audits;
• support corporate transactions; and
• establish, exercise, or defend legal claims.

Artificial Intelligence Features

DealRoom may make available artificial intelligence, machine learning, large language model, generative AI, automated summarization, automated classification, automated extraction, recommendation, or similar AI-enabled functionality as part of or in connection with the Services. Use of those features is governed by DealRoom’s AI Feature Terms of Use and the applicable customer agreement.

DealRoom’s AI Feature Terms of Use describe how DealRoom uses AI Inputs, AI Outputs, Customer Data, Authorized User files, telemetry, logs, performance data, feedback, and Aggregated Statistics in connection with AI Features.

You may opt out of marketing emails at any time by using the unsubscribe link in the email or by contacting us at privacy@dealroom.net. Even if you opt out of marketing emails, we may still send transactional, administrative, security, or legal notices.

5. How We Use Customer Data

DealRoom accesses and uses Customer Data only as necessary to:

• provide, maintain, secure, and support the Services;
• enable customer-selected features, configurations, workflows, and Third-Party Products;
• respond to customer or Authorized User instructions;
• troubleshoot and resolve support requests;
• investigate security, fraud, abuse, or technical issues;
• comply with applicable law or legal process;
• protect the rights, safety, and property of DealRoom, our customers, Authorized Users, and others; and
• as otherwise permitted by the applicable customer agreement.

DealRoom may process metadata and usage information associated with Customer Data, such as file size, file type, number of records, access logs, activity logs, workflow activity, API usage, and similar technical or operational information, to provide, secure, support, analyze, and improve the Services.

DealRoom may create Aggregated Statistics or de-identified information from information processed through the Services. We may use Aggregated Statistics and de-identified information for business, analytical, benchmarking, security, product improvement, and other lawful purposes. We do not attempt to re-identify de-identified information except as permitted by law.

6. Cookies, Analytics, Advertising, and Tracking Technologies

We and our service providers may use cookies, pixels, tags, SDKs, local storage, session replay tools, and similar technologies to operate our websites and Services, remember preferences, understand usage, improve performance, secure the Services, and support marketing and advertising.

These technologies may collect information such as IP address, device identifiers, browser information, pages viewed, links clicked, interactions with our websites, approximate location, and other usage information.

We may use the following categories of cookies and tracking technologies:

• Strictly necessary technologies that are required to operate our websites and Services.
• Functional technologies that remember preferences and support enhanced functionality.
• Analytics technologies that help us understand how visitors and users interact with our websites and Services.
• Advertising and marketing technologies that help us measure campaigns, personalize content, and deliver or measure advertising.

Your Cookie Choices

You can manage cookies through your browser settings and, where available, through our cookie preference tool.

Depending on where you live and how we use advertising technologies, you may also have the right to opt out of the sale or sharing of personal information, or the processing of personal information for targeted advertising. See “Your Privacy Rights” and “U.S. State Privacy Notice” below.

Global Privacy Control and Opt-Out Preference Signals

Where required by applicable law, DealRoom will honor browser-based opt-out preference signals, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device sending the signal.

7. How We Disclose Personal Information

We may disclose personal information as described below.

Customers and Authorized Users

If you use the Services through a DealRoom customer, we may disclose information about your account, usage, activity, permissions, and Customer Data to that customer and its authorized administrators, representatives, and Authorized Users. If you are invited to access a DealRoom workspace, virtual data room, project, or related environment, you may have been invited by a DealRoom customer, customer affiliate, advisor, counterparty, or other authorized participant. The customer or inviting party may control the workspace, user permissions, and Customer Data within that environment.

Service Providers and Subprocessors

We may disclose personal information to vendors, service providers, contractors, and subprocessors that help us operate our business and provide the Services, including providers of:

• cloud hosting and infrastructure;
• data storage;
• security and monitoring;
• customer support;
• analytics;
• payment processing;
• email and communications;
• CRM and marketing tools;
• identity and authentication;
• call recording and transcription;
• customer surveys;
• data enrichment;
• professional services;
• internal financial reporting and business operations; and
• other business operations.

These parties are authorized to process personal information as necessary to provide services to DealRoom and are subject to appropriate contractual obligations.

https://dealroom.net/legal/subprocessor-list

Third-Party Products

If a customer or Authorized User enables a Third-Party Product, we may disclose personal information or Customer Data to that Third-Party Product as necessary to enable the requested functionality. Third-Party Products are subject to the third party’s own terms and privacy policies, and DealRoom is not responsible for the operation of Third-Party Products except as expressly provided in the applicable customer agreement.

Business Partners and Event Sponsors

We may disclose personal information to business partners, event co-sponsors, or webinar partners where you register for, attend, or express interest in a jointly offered event or resource. We will do so in accordance with applicable law and any disclosures provided at the time of collection.

Advertising and Analytics Partners

We may disclose website and marketing-related information to analytics, advertising, and marketing partners. Depending on applicable law and the technologies used, this disclosure may be considered a “sale,” “sharing,” or processing for “targeted advertising.” See “U.S. State Privacy Notice” below for more information about opt-out rights.

Legal, Security, and Compliance

We may disclose personal information if we believe disclosure is necessary or appropriate to:

• comply with applicable law, legal process, or governmental requests;
• enforce our agreements and policies;
• protect against fraud, abuse, security threats, or unlawful activity;
• protect the rights, safety, and property of DealRoom, our customers, Authorized Users, and others;
• investigate and respond to security incidents; or
• establish, exercise, or defend legal claims.

Corporate Transactions

We may disclose or transfer personal information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of assets, or other corporate transaction.

Aggregated or De-Identified Information

We may disclose Aggregated Statistics or de-identified information for lawful business purposes.

8. Sensitive Personal Information and PHI

DealRoom’s Services are intended for business use. DealRoom does not require customers or users to provide Sensitive Personal Information, such as social security numbers, government identification numbers, precise geolocation, financial account credentials, health information, biometric information, or information revealing sensitive characteristics.

Customers are responsible for determining whether Sensitive Personal Information may be uploaded to the Services and for ensuring they have the required rights, notices, consents, authorizations, and agreements in place.

DealRoom does not require or request protected health information, as defined under HIPAA, to provide the Services. DealRoom will only undertake obligations as a Business Associate under HIPAA if and to the extent required by applicable law and agreed in a written Business Associate Addendum or other applicable agreement.

9. International Transfers

DealRoom is based in the United States, and we and our service providers may process personal information in the United States and other countries. These countries may have data protection laws that differ from the laws where you are located.

Where required for transfers of personal information from the European Economic Area, United Kingdom, Switzerland, or other jurisdictions with cross-border transfer restrictions, we rely on appropriate safeguards, such as standard contractual clauses, the UK International Data Transfer Addendum, adequacy decisions, data processing agreements, or other lawful transfer mechanisms.

10. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

The length of time we retain personal information depends on factors such as:

• the type and sensitivity of the information;
• the purpose for which it was collected;
• the duration of our relationship with the customer or user;
• customer instructions and contractual requirements;
• legal, tax, accounting, and reporting obligations;
• security, fraud prevention, and audit needs;
• backup and disaster recovery requirements; and
• the need to resolve disputes or enforce agreements.

Customer Data is retained in accordance with the applicable customer agreement, customer instructions, product settings, and DealRoom’s backup, security, and legal retention requirements. We may retain Aggregated Statistics or de-identified information for lawful business purposes.

11. Security

DealRoom uses administrative, technical, and physical safeguards designed to protect personal information and Customer Data against unauthorized access, disclosure, alteration, and destruction. These safeguards may include access controls, encryption, logging, monitoring, vulnerability management, personnel controls, and security policies and procedures.

No method of transmission or storage is completely secure. If you believe your information may have been compromised, please contact us at privacy@dealroom.net.

12. Your Privacy Rights

Depending on where you live and how you interact with us, you may have certain rights regarding your personal information. These rights may include the right to:

• request access to personal information we process about you;
• request correction of inaccurate personal information;
• request deletion of personal information;
• request a copy of personal information in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent;
• opt out of marketing communications;
• opt out of sale, sharing, targeted advertising, or certain profiling, where applicable;
• limit the use or disclosure of Sensitive Personal Information, where applicable;
• appeal a decision we make regarding a privacy rights request, where applicable; and
• not be discriminated against for exercising privacy rights.

To exercise your rights, please contact us at:

Email: privacy@dealroom.net

We may need to verify your identity before fulfilling your request. If you submit a request on behalf of another person, we may request information demonstrating your authority to act on that person’s behalf.

If your request relates to Customer Data controlled by a DealRoom customer, we may direct you to that customer or notify the customer of your request.

13. U.S. State Privacy Notice

This section supplements the rest of this Privacy Policy and applies to residents of U.S. states with comprehensive privacy laws, including California and other states where applicable.

Categories of Personal Information We Collect

Depending on your interaction with DealRoom, we may collect the following categories of personal information:

Sources of Personal Information

We collect personal information from you, DealRoom customers and users, your organization, Third-Party Products, service providers, business partners, publicly available sources, marketing and sales platforms, and automated technologies such as cookies and logs.

Purposes for Collection, Use, and Disclosure

We collect, use, and disclose personal information for the purposes described in this Privacy Policy, including providing the Services, account administration, customer support, security, analytics, marketing, legal compliance, and business operations.

Categories of Personal Information Disclosed for Business Purposes

We may disclose the categories of personal information listed above to the categories of recipients described in “How We Disclose Personal Information,” including service providers, subprocessors, customers, Third-Party Products, analytics providers, marketing providers, professional advisors, legal authorities, and transaction counterparties.

Sale, Sharing, and Targeted Advertising

DealRoom does not sell personal information for money.

However, some privacy laws define “sale,” “sharing,” or “targeted advertising” broadly. Depending on the cookies, pixels, analytics tools, and advertising technologies used on our websites, we may disclose identifiers, internet or electronic network activity, approximate location, commercial information, and inferences to advertising, analytics, or marketing partners in a way that may be considered a sale, sharing, or targeted advertising under applicable law.

You may opt out by using our cookie preference tool, our “Your Privacy Choices” page, or a legally recognized browser-based opt-out preference signal, such as Global Privacy Control, where required by law.

Sensitive Personal Information

DealRoom does not use or disclose Sensitive Personal Information for purposes that would require a right to limit under California law, unless we provide a specific notice and opportunity to limit such use.

Minors

DealRoom’s Services are not directed to children or minors. We do not knowingly sell or share personal information of individuals under 16 years old.

California Shine the Light

California residents may request information regarding DealRoom’s disclosure of certain personal information to third parties for their direct marketing purposes, if applicable, by contacting privacy@dealroom.net.

14. EEA, UK, and Swiss Privacy Notice

If you are located in the European Economic Area, United Kingdom, or Switzerland, this section provides additional information.

Controller

For personal information that DealRoom processes as a controller, the controller is:

DealRoom Technologies, Inc.

68 Harrison Ave, Ste 605, PMB 511049, Boston, Massachusetts 02111

Email: privacy@dealroom.net

For Customer Data, the relevant DealRoom customer is typically the controller, and DealRoom acts as processor on that customer’s behalf.

Legal Bases for Processing

We process personal information under the following legal bases:

EEA, UK, and Swiss Rights

Subject to applicable law, you may have the right to:

• access your personal data;
• correct inaccurate personal data;
• request deletion of personal data;
• restrict or object to processing;
• request portability;
• withdraw consent;
• object to direct marketing; and
• lodge a complaint with your local supervisory authority.

To exercise your rights, contact privacy@dealroom.net.

15. Do Not Track

Some browsers transmit “Do Not Track” signals. Because there is not a uniform standard for responding to Do Not Track signals, our websites may not respond to them. Where required by applicable law, we honor legally recognized opt-out preference signals, such as Global Privacy Control, as described above.

16. Children

The Services are intended for business use and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact privacy@dealroom.net, and we will take appropriate steps to delete the information.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last Updated” date. If we make material changes, we will provide notice as required by applicable law, such as by email, through the Services, or by posting a notice on our website.

18. Contact Us

If you have questions about this Privacy Policy or DealRoom’s privacy practices, please contact us at:

DealRoom Technologies, Inc.

Email: privacy@dealroom.net

‍