Terms & Conditions and Privacy Policy (GDPR)

Last updated: June 2026

1. Who we are

DealConverter ("DealConverter", "we", "us") is a software-as-a-service platform for M&A advisors and business brokers, operated by ArtificialTech, a company registered in the Netherlands. As a Dutch-registered entity we are subject to Dutch data protection law and the EU General Data Protection Regulation (GDPR), supervised by the Autoriteit Persoonsgegevens (AP), the Dutch Data Protection Authority.

For the personal data of your own clients, contacts and counterparties that you upload to DealConverter, you are the data controller and we act as your data processor, processing that data solely on your documented instructions to provide the service. For your own account and billing data, we act as the data controller.

Data protection contact: julioraulcordal@artificialtech.io.

2. The service and your account

  • Free trial: new workspaces get a 30-day free trial with full access and no credit card required. We may end or modify trials at any time.
  • Paid subscription: after the trial, continued use requires an active paid plan (currently €49 / month). Fees are billed in advance and are non-refundable except where required by law.
  • Account security: you are responsible for keeping your credentials confidential and for all activity under your account.
  • Acceptable use: you may not use DealConverter for unlawful purposes, to upload data you have no right to process, to attempt to breach security, or to reverse-engineer the service.

3. What data we collect and why

  • Account data: name, work email, hashed password, company / workspace name and optional phone number — used to create and secure your account and to contact you about the service.
  • CRM & deal content: mandates, companies, contacts, documents, notes, tasks and pipeline data that you create or upload. This may include personal data of third parties, for which you are the controller.
  • Connected integrations: with your authorisation, email (inbox) and calendar data used to sync communications and events into your workspace. Access tokens are stored securely and can be revoked at any time.
  • AI-processed content: documents and messages you submit to AI features (e.g. document summaries, deal insights) are processed to generate the requested output.
  • Technical & usage data: IP address, device/browser information, log files and a session token cookie, used to operate, secure and improve the service.
  • Billing data: the information needed to process your subscription, handled by our payment provider — we do not store full card numbers.

Please do not enter special-category data (e.g. health, racial/ethnic origin, political opinions) into free-text fields. We do not request such data and process it only if you choose to provide it.

4. Legal basis for processing

  • Performance of a contract (Art. 6(1)(b)): to provide the platform you have signed up for.
  • Legitimate interests (Art. 6(1)(f)): to secure, maintain and improve the service and prevent abuse, balanced against your rights.
  • Consent (Art. 6(1)(a)): for optional integrations and any marketing communications. You may withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): to comply with accounting, tax and other legal requirements.

5. Use of AI

We use AI models to summarise documents, surface deal insights and assist with everyday tasks. AI is assistive only: it does not make legally significant or autonomous decisions about you, and a human remains in control of any action taken on its output. Content sent to AI sub-processors is used only to return your result and is not used to train third-party models.

6. Sub-processors, storage & international transfers

Data is hosted on infrastructure located within the European Union. We rely on a limited set of vetted sub-processors — for example cloud hosting, transactional email and AI providers — each bound by data-processing terms. Where any processing involves a transfer outside the EU/EEA, it is covered by adequacy decisions or the European Commission's Standard Contractual Clauses (SCCs). We do not sell your data. A current list of sub-processors is available on request.

7. Data retention

We retain personal data for as long as your account is active and as needed to provide the service. On account closure or a deletion request, we erase or anonymise your personal data within 30 days, except where retention is required by law (e.g. invoicing records). Backups are purged on a rolling cycle.

8. Your rights (GDPR)

  • Access: request a copy of the personal data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data ("right to be forgotten").
  • Portability: receive your data in a structured, machine-readable format.
  • Restriction & objection: limit or object to certain processing.
  • Withdraw consent: at any time, without affecting prior lawful processing.

To exercise any right, email julioraulcordal@artificialtech.io. We respond within 30 calendar days. If you are an end client of one of our customers, please contact that customer (the controller) first.

9. Security

We apply appropriate technical and organisational measures, including encryption in transit, hashed passwords, access controls and restricted internal access. No system is perfectly secure, but we maintain procedures to detect, manage and notify relevant breaches as required by GDPR Art. 33–34.

10. Cookies

We use a strictly necessary session cookie to keep you logged in and to secure the application. We do not use advertising cookies. Any optional analytics are used only with your consent.

11. Liability

The service is provided "as is" to the extent permitted by law. We are not liable for indirect or consequential losses, and our aggregate liability is limited to the fees you paid in the 12 months preceding the event giving rise to the claim. Nothing in these terms excludes liability that cannot be excluded under applicable law.

12. Complaints

If you believe your data has been processed unlawfully, you may lodge a complaint with a supervisory authority. As ArtificialTech is registered in the Netherlands, our lead authority is the Autoriteit Persoonsgegevens (AP). You may also contact the authority in your country of residence.

13. Changes & governing law

We may update these terms from time to time; material changes will be notified by email or in-app. These terms are governed by the laws of the Netherlands, and disputes are subject to the competent Dutch courts, without prejudice to any mandatory consumer protections in your country of residence.

14. Contact

Data controller: DealConverter / ArtificialTech (Netherlands)
Email: julioraulcordal@artificialtech.io

← Back to home