Legal

Last updated: July 29, 2026

Privacy Policy

Draft for legal review. This describes how PE Dealroom handles personal information during our design-partner phase. A formal privacy notice will replace this before general availability. Questions: privacy@pe-dealroom.com.

Last updated below.

1. Who we are

PE Dealroom (pe-dealroom.com) provides workspace software for private-equity investment teams. In privacy terms, we are typically a processor acting on behalf of your firm (the controller) for the deal, fund, LP, and portfolio data you upload. For your account details and product telemetry, we act as a controller.

2. Personal data we collect

  • Account data: name, business email, firm, role.
  • Authentication data: password hash, sign-in timestamps, IP address for security purposes.
  • Content you upload: deal records, fund and LP records, documents, notes, portfolio data. These may contain personal data about your team, advisors, or third parties.
  • Product usage telemetry: which pages and features you use, error events, performance metrics. We use these to keep the Service reliable.
  • Support communications: emails you send us and our responses.

We do not knowingly collect data from anyone under 18.

3. How we use personal data

  • To provide, secure, and support the Service.
  • To authenticate you and enforce access controls.
  • To communicate with you about your account, security, and updates.
  • To diagnose issues and improve reliability and performance.
  • To comply with legal obligations and enforce our Terms of Service.

We do not sell personal data, and we do not use Customer Data to train third-party foundation models.

4. Legal bases (EEA / UK)

We rely on: performance of a contract with you or your firm; our legitimate interests in operating and securing the Service; and, where required, your consent.

5. Sharing and subprocessors

We share personal data only with:

  • Trusted infrastructure subprocessors (managed database and hosting, object storage, transactional email delivery, AI inference). A current subprocessor list is available on request; a public list is coming.
  • Auditors, advisors, and authorities where required by law.

6. International transfers

Where personal data is transferred outside your region, we rely on appropriate safeguards including Standard Contractual Clauses.

7. Retention

  • Customer Data: retained while your account is active and deleted within 30 days of account termination, unless retention is required by law.
  • Account and telemetry data: retained while your account is active and for a reasonable period afterwards for security, audit, and legal purposes.
  • Support communications: retained for the period necessary to provide and improve support.

8. Security

Row-level tenant isolation, encryption in transit and at rest, private document storage buckets, per-workspace audit logs, role-based access, and principle-of-least-privilege service credentials. Report suspected vulnerabilities to security@pe-dealroom.com.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, restrict, object to, or delete your personal data, and to lodge a complaint with a supervisory authority. For Customer Data uploaded by your firm, please contact your firm's account administrator first — we will support them in responding to you.

To exercise a right directly with us: privacy@pe-dealroom.com.

10. Cookies

We use strictly necessary cookies to keep you signed in and to keep the Service secure. We do not use advertising or cross-site tracking cookies.

11. Changes

We will notify material changes at least 30 days in advance by email or in-product notice.

12. Contact