Privacy Policy
1. Who we are
DirtDealer (“DirtDealer,” “we,” “us”) provides a deal-brokerage automation service for real estate investors and brokers. We are operated by DirtDealer Services LLC, a StoneWave venture. You can reach us at intel@dirtdealer.us.
2. Scope
This policy describes how DirtDealer collects, uses, and protects information when you (a) create a DirtDealer account, (b) connect a third-party service such as Canva to DirtDealer, and (c) use DirtDealer to review, fact-check, or distribute property deliverables.
3. Information we collect
Account information. Name, email address, and authentication identifiers you provide when you sign up or sign in.
Third-party connection data. When you connect a service such as Canva, we receive:
- Your profile on that service (name, email, user identifier).
- OAuth access and refresh tokens scoped to the permissions you grant.
- Resources you authorize us to read or write. For Canva: designs, design content, assets, brand templates, comments, and folders within the scope you grant.
Property and listing data. Information you upload or connect about properties under management (address, lot data, pricing, photos, listing references) so DirtDealer can fact-check and populate deliverables.
Usage data. Standard server and application logs (timestamps, IP address, user agent, request paths, error traces) used for security and reliability.
4. How we use information
- Authenticate you and maintain your session.
- Read Canva designs you select so DirtDealer can cross-check property facts against your listing records.
- Post review comments on Canva designs and, with your explicit per-action approval, apply corrections.
- Import and export assets between Canva and DirtDealer as part of the deliverable workflow.
- Coordinate outreach and follow-ups you configure.
- Operate, secure, and improve the service.
We do not use Canva design content or listing data to train machine learning models, and we do not sell personal information.
5. How we handle Canva data specifically
- Tokens are stored encrypted at rest using AES-256, isolated per user, with refresh-token rotation. Tokens are never logged in plaintext.
- Design content read from Canva is processed in-memory for fact-checking. We persist only verification results (e.g., “address field mismatched listing record”) and a reference identifier — not the full design payload.
- Scope minimization. We request only the OAuth scopes required for the user-visible features above and remove scopes we no longer use.
- Revocation. You can disconnect Canva at any time from your DirtDealer settings. Doing so revokes our tokens and triggers deletion of associated tokens and references within 24 hours.
6. Sharing
We share information only:
- With Canva (the source or destination of the data you authorized).
- With infrastructure subprocessors we use to run the service (hosting, database, error monitoring, transactional email). A current list is available on request.
- When required by law or to protect rights, safety, and security.
We do not sell personal information.
7. Data location and retention
- Region: United States (primary hosting).
- Account data: retained while your account is active.
- Canva tokens and references: retained while the connection is active; purged within 24 hours of disconnect or account deletion.
- Logs: retained for 90 days for security and debugging.
8. Your rights
You can request access to, correction of, export of, or deletion of your personal information by emailing intel@dirtdealer.us. We respond within 30 days.
Depending on your jurisdiction (e.g., California, EU/UK), you may have additional rights including the right to object to or restrict processing and the right to lodge a complaint with a supervisory authority.
9. Security
We use industry-standard administrative, technical, and physical safeguards including encryption in transit (TLS) and at rest (AES-256), least-privilege access controls, and audit logging. No system is perfectly secure; we encourage you to use a strong unique password and to disconnect integrations you no longer need.
10. Children
DirtDealer is not directed to children under 16 and we do not knowingly collect their information.
11. Changes
We will post material changes to this policy on this page and update the “Last updated” date. For significant changes affecting how we use your data, we will provide additional notice (e.g., email).
12. Contact
Questions or requests: intel@dirtdealer.us.