Legal
Dealioo Privacy Policy
Last updated: September 22, 2026
1. Introduction
This Privacy Policy explains how Dealioo collects, uses, shares, and protects personal information when you use our websites, apps, and related services (together, “Dealioo”).
Who operates Dealioo
Dealioo is operated by Dealioo. For privacy questions or requests, contact us at support@dealioo.com.
Dealioo is a business marketing platform. We help you run promotional campaigns, build signup funnels, track guests, process offer-related payments, and measure results. When you connect advertising or other platforms, we act as your authorized tool to manage those integrations.
2. Information we collect
Depending on how you use Dealioo, we may collect the following categories of information:
Account information
- Name, email address, and login credentials associated with your Dealioo account
- Role and membership details when you join or manage a business workspace
Business information
- Business name, contact details, branding assets (such as logos), and setup preferences
- Campaign and funnel configuration you create in Dealioo
Customer / guest data
- Guest names, emails, phone numbers, and other details you or your funnels collect
- Visit, redemption, and engagement history tied to your campaigns
Funnel submissions
- Information guests submit on landing, signup, payment, and confirmation pages
- Funnel analytics events such as page views and conversion steps
Orders and payment-related data
- Order and payment status records needed to operate prepaid/postpaid offers
- Payment metadata returned by Stripe (Dealioo does not store full card numbers)
Device, browser, and technical data
- IP address, browser type, device information, and approximate location derived from connection data when needed for security, fraud prevention, or service operation
- Log and diagnostic data related to app usage and errors
Cookies and analytics
- Cookies and similar technologies used for authentication, session continuity, preferences, and product analytics
- Usage metrics that help us understand how Dealioo is used and improve the product
Support messages
- Messages, attachments, and contact details you send when requesting help or reporting issues
3. How we use information
We use personal information to:
- Operate accounts, create and manage user accounts, business workspaces, roles, and access.
- Run funnels and campaigns, host and deliver your promotional funnels, campaigns, and related guest experiences.
- Process orders, support prepaid and postpaid offer flows, order records, and payment status with Stripe.
- Provide analytics, show performance, conversion, and engagement reporting in your dashboard.
- Customer support, respond to questions, troubleshoot issues, and improve reliability.
- Security, authenticate users, prevent abuse, detect fraud, and protect the platform.
4. Meta Ads integration
What we do with Meta
When you connect Meta, we use the Meta Marketing API (Facebook Graph API) to:
- Connect your Facebook account via secure OAuth login
- Let you pick a Meta ad account
- Build and publish campaigns, ad sets, creatives, and ads from our campaign builder
- Display campaign stats and publish status inside your dashboard
Data we receive from Meta
We only request data needed to connect advertising and show results. We do not sell your Meta data to third parties.
Account & connection
- Meta user ID (Facebook user who authorized the connection)
- OAuth access token (stored encrypted; used only to call Meta on your behalf)
- Granted permission scopes and token expiration time
- Connection status and connection timestamp
- Selected Meta ad account ID
Advertising assets
- Ad account names and IDs available to your Facebook user
- Campaign, ad set, ad, and creative IDs created or referenced through Dealioo
- Campaign setup fields you enter in our builder (budget, audience, schedule, creative text, media)
Performance & diagnostics
- Campaign and ad delivery metrics returned by Meta (e.g. spend, impressions, clicks)
- API error messages when publish or sync fails (to help you fix issues)
- Integration audit events (connection, disconnect, publish steps; tokens are never logged)
Meta permissions
When you connect Meta, you see Meta’s consent screen. You can revoke access anytime by disconnecting in Dealioo or in your Meta account settings.
| Permission | Why we need it |
|---|---|
| ads_read | Read campaign performance, delivery status, and ad account details so you can review results inside Dealioo. |
| ads_management | Create, read, delete, and publish ad campaigns, ad sets, creatives, and ads on your behalf through the Meta Marketing API. |
| pages_show_list | List Facebook Pages you manage so you can choose which Page will run your ads. Requested with ads_management. |
| pages_read_engagement | Read the Facebook Page you select (name, picture, about, category, and contact details) so you can verify the correct Page will represent your ads in Dealioo before publishing. Requested with ads_management. |
| public_profile | Identify the Facebook user connecting the Meta Ads account to Dealioo. |
Disconnecting an advertising platform stops Dealioo from making future API requests. Users may separately request deletion of previously stored integration data.
5. Google Ads integration
What we do with Google Ads
When you connect Google Ads, we use the Google Ads API and related Google OAuth services to:
- Connect your Google account via secure OAuth login
- Let you pick a Google Ads customer account
- Build campaign drafts in our Google campaign builder and publish campaigns, ad groups, keywords, and responsive search ads to Google Ads
- Display campaign performance (spend, impressions, clicks) in your Dealioo dashboard
- Optionally configure a Google Ads conversion tag (AW-…) on your funnel and store ad-attributed funnel events when guests click your Google ads
Data we receive from Google
We only request data needed to connect advertising and show results. We do not sell your Google data to third parties.
Account & connection
- Google user ID and email (from the Google account that authorized the connection)
- OAuth access and refresh tokens (stored encrypted; used only to call Google on your behalf)
- Granted OAuth scopes and token expiration time
- Connection status and connection timestamp
- Selected Google Ads customer ID and manager (login) customer ID when applicable
Advertising assets
- Google Ads customer accounts available to your Google login
- Campaign builder drafts you save in Dealioo (goals, budget, locations, keywords, ad copy, media)
- Campaign, ad group, ad, budget, and keyword IDs created or referenced after publish
- Publish job status and error messages when sync or publish fails
Performance & diagnostics
- Campaign metrics returned by Google Ads (e.g. spend, impressions, clicks)
- Conversion goal metadata from your linked Google Ads account
- Integration audit events (connection, disconnect, publish steps; tokens are never logged)
Funnel conversion tracking (optional)
- Google Ads tag ID (AW-…) and conversion labels you enter in Ads Tracking settings
- When guests arrive from Google Ads (gclid in the URL), funnel events such as page views, signups, and purchases may be stored in our database for reporting
- Browser conversion tags (gtag) may also fire on your public funnel pages when Ads Tracking is active
Google OAuth scopes
When you connect Google Ads, you see Google’s consent screen. You can revoke access anytime by disconnecting in Dealioo or in your Google account settings.
| Scope | Why we need it |
|---|---|
| https://www.googleapis.com/auth/adwords | Create, update, publish, and manage Google Ads campaigns, ad groups, keywords, and ads on your behalf through the Google Ads API. |
| https://www.googleapis.com/auth/tagmanager.readonly | Read your Google Tag Manager container list so you can optionally pick containers when configuring Ads tracking in Dealioo. |
| openid, email, profile | Identify the Google account connecting Google Ads to Dealioo and show which account is linked. |
Disconnecting an advertising platform stops Dealioo from making future API requests. Users may separately request deletion of previously stored integration data.
6. Payments and other integrations
Depending on your setup, Dealioo may also process information through these providers:
- Stripe — payment processing for connected businesses, checkout sessions, and payment status. Card details are handled by Stripe; Dealioo stores payment metadata needed for orders and reporting.
- Twilio — messaging and communications features when you connect a Twilio account (for example, SMS-related workflows).
- Hosting and cloud providers — infrastructure used to host Dealioo, store application data, and deliver media/assets.
- Analytics providers — product and advertising analytics tools you enable (including Meta and Google tracking where configured on your funnels).
7. How we share information
Dealioo only shares information with service providers when required to operate the platform, process payments, send communications, host infrastructure, provide advertising integrations, or meet legal obligations.
We do not sell personal information. We may also disclose information if required by law, to protect Dealioo or our users, or in connection with a business transfer (such as a merger or acquisition), subject to appropriate safeguards.
8. Data retention
We retain personal information for as long as needed to provide Dealioo, maintain your account and business records, meet legal and accounting requirements, resolve disputes, and enforce our agreements.
Retention periods vary by data type. For example, account and business records are typically kept while your account remains active; order and payment records may be retained longer where required for financial or legal compliance; support tickets and logs may be kept for a limited period for security and troubleshooting. When information is no longer needed, we delete or de-identify it according to our operational practices.
9. Security
- Meta and Google OAuth tokens are encrypted at rest in our database.
- Tokens are transmitted only over HTTPS to Meta’s Graph API or Google’s OAuth and Google Ads APIs.
- Audit logs exclude secrets, tokens, and passwords.
- Only authorized business admins can connect or disconnect Meta or Google Ads for their account.
- We use access controls, encrypted transport, and monitoring practices designed to protect personal information.
No method of transmission or storage is 100% secure. If you believe your account has been compromised, contact us promptly at support@dealioo.com.
10. Your privacy rights
Depending on your location and applicable law, you may have rights to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete personal information
- Request deletion of personal information
- Export or receive a copy of certain personal information, where applicable
To exercise these rights, contact support@dealioo.com. We may need to verify your identity before completing a request.
11. Data deletion
To request deletion of your personal information or advertising integration data, contact support@dealioo.com or use the account deletion controls available in Dealioo where offered.
Important: Disconnecting Meta or Google stops Dealioo from making future API requests to that platform. Disconnecting does not automatically delete all historical stored data (such as past campaign IDs, performance snapshots, or audit records). To remove previously stored integration data, submit a separate deletion request.
12. Cookies and tracking technologies
Dealioo uses cookies and similar technologies to keep you signed in, remember preferences, secure the service, and understand product usage. Businesses may also enable advertising or conversion tags (for example Meta Pixel or Google Ads tags) on public funnel pages; those technologies are controlled by the settings you configure and by the policies of those providers.
You can control cookies through your browser settings. Disabling certain cookies may affect how Dealioo works (for example, staying logged in).
13. International data transfers
Dealioo may be accessed by users in more than one country. Personal information may be processed and stored in locations where we or our service providers operate. When we transfer personal information across borders, we take steps designed to protect it in accordance with this Privacy Policy and applicable law.
14. Children’s privacy
Dealioo is intended for business use and is not directed to children under 13 (or the minimum age required by local law). We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact support@dealioo.com and we will take appropriate steps to delete it.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we may provide additional notice (for example, in-product notice or email). Continued use of Dealioo after an update means you acknowledge the revised policy.
16. Contact us
If you have questions about this Privacy Policy, or want to exercise privacy rights or request deletion, contact:
- Operator: Dealioo
- Privacy email: support@dealioo.com