Privacy Policy — Dealium

This policy explains what happens to personal data when you visit dealium-ai.com, the public Dealium AI website. It is short because the site does very little: it is a set of static pages with no accounts, no analytics, no advertising tags, and no trackers. It does not cover the Dealium application at app.dealium-ai.com, or any other site we link to.

The short version. This site sets no cookies and writes no visit log. The contact form sends what you typed to our own EU-hosted platform, where it is stored so we can reply; nothing else is collected. The only third party your browser contacts is Google, which serves the typefaces these pages are set in.

1. Who this policy is from, and how to reach us

This policy is issued by Dealium AI, the operator of the website at dealium-ai.com ("Dealium AI," "we," "us"). We decide why and how the personal data described here is used, which makes us the controller for it.

Write to hello@dealium-ai.com for anything to do with privacy — a question, a request under section 7, or a complaint. It is the address published on our contact page and it is the right route for all of them.

2. What this website collects

The contact form submits only what you typed. The "Request access" form on our contact page sends your name, work email, company, role, commodity and message to our own EU-hosted platform, together with the page you sent it from, so that we can reply and set up your pilot. It is stored there as an access request and a notification is sent to our team. If the platform cannot be reached, your browser falls back to handing the same message to your own email application, addressed to hello@dealium-ai.com. You can read it, edit it, or close it without sending. The fields are:

full name;
work email — the only required field;
company;
role, chosen from a fixed list (broker, importer, exporter, trading desk, or other);
primary commodity;
a free-text message.

If you press send in your own email app, we receive an ordinary email at hello@dealium-ai.com containing whatever you chose to include, along with your sending address and the routing information every email carries. Until then, we receive nothing at all.

We do not keep a visit log. The web server that serves these pages is not configured to write an access log, so ordinary page requests — and the IP addresses they come from — are not recorded. The server still emits low-level error output, for example when a connection fails, which is held transiently for keeping the site running and is never used to identify you or to build a profile.

And nothing else. There is no analytics, no advertising or social pixel, no session recording, no fingerprinting, no newsletter sign-up, no file upload, and no login on this website. The "Dealium AI copilot" panel you see elsewhere on the site is a static illustration containing two links; it has no message box and sends nothing anywhere.

3. Why we use it, and our lawful basis

Every purpose below has a lawful basis under Article 6 of the General Data Protection Regulation. There are only three.

Purpose	Lawful basis
Reading and replying to an email you send us, and following up on it	Steps before a contract — Art. 6(1)(b), where you are asking about using Dealium; otherwise our legitimate interest — Art. 6(1)(f) — in answering people who approach us
Keeping the website online and protecting it from abuse and attack	Legitimate interest — Art. 6(1)(f) — in running a service that stays available and secure
Loading the typefaces the pages are set in	Legitimate interest — Art. 6(1)(f) — in presenting a legible, consistent site

We do not use your details for marketing unless you ask us to, we do not add enquiries to a mailing list, and we make no automated decisions about you.

4. Who receives it

We do not sell personal data and we do not share it for advertising. There is no analytics provider, no advertising network, and no customer-relationship system behind this site. Two recipients are worth naming plainly:

Google, for web fonts. Every page loads typefaces from fonts.googleapis.com and fonts.gstatic.com. Your browser makes that request directly to Google, which discloses your IP address and browser information to Google as an independent controller under its own privacy policy. It happens as the page loads, before you interact with anything, and it is the only third-party connection this website makes.
The provider that operates our mailbox. An email you send travels through the ordinary email system and is stored in the hello@dealium-ai.com mailbox, so the provider hosting that mailbox necessarily handles it.

Everything else these pages load — the video, images, stylesheets, and scripts — is served from dealium-ai.com itself. There are no embedded players, maps, chat widgets, or iframes. We would of course disclose personal data if the law required it of us, and we would look for a way to tell you unless we were prohibited from doing so.

5. How long we keep it

Emails you send us. Kept only as long as we need them to deal with your enquiry, and for a short period afterwards in case you come back to us, then deleted. If an enquiry goes nowhere, we delete the message rather than keep it on file.
Your visit. Nothing to keep — there is no access log. The server's transient error output rolls off in the normal course of operating the site.
Your theme preference. Stays on your device until you clear your browser storage. It never reaches us, so there is nothing on our side to delete.

6. Cookies and local storage

This website sets no cookies. Not analytics, not advertising, not preference cookies, and none from a third party. That is also why you see no consent banner: there is nothing here to consent to.
One item of local storage. If you click the light/dark toggle, we save dealium-theme in your browser so the site remembers your choice. It holds the word "light" or "dark," nothing more, it is never transmitted to us, and clearing your browser storage removes it.

Our Cookie Notice covers this in more detail. If we ever introduce anything that needs consent, we will ask for it and update both that notice and this policy before it is switched on.

7. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you, and receive a copy of it;
rectification — have inaccurate data corrected and incomplete data completed;
erasure — have your data deleted;
restriction — have us pause our use of it, for example while we check an accuracy challenge;
portability — receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where that is technically feasible;
object to processing we base on legitimate interests, and to direct marketing at any time and without giving a reason;
withdraw consent at any time where we rely on it, without affecting anything done beforehand; and
complain to a data protection authority — the one in the country where you live, where you work, or where you think the problem happened.

How to exercise them. Email hello@dealium-ai.com and tell us what you want. In practice we hold nothing about you unless you have written to us, so a request usually comes down to the correspondence in that mailbox. We reply within one month; if a request is genuinely complex we may take up to two months more and will tell you within the first month why. We do not charge for this. We may ask you for enough information to be confident we are dealing with the right person, and we will not use what you send us for anything else.

We would like the chance to put a problem right ourselves, so please come to us first — but you are not required to, and you can go to a supervisory authority at any time.

8. Changes to this policy

If what this website does changes, we change this policy to match, and we revise the effective date at the top of the page. We do not hold a mailing list to notify, so this page is the notice: if we ever begin collecting more than is described here, it will be described here first.

9. Contact

Privacy questions, requests, and complaints all go to hello@dealium-ai.com.

Dealium is a software provider and is not a bank, payment institution, or escrow agent; it does not hold client funds. See our No-custody statement, Terms of Service, and Cookie Notice.