Last Updated: March 13, 2026

This Privacy Policy ("Policy") describes how OpenWave Online LLC, doing business as Open DealFlow ("Open DealFlow," "ODF," "we," "us," or "our"), collects, uses, shares, and protects information when you visit our website at opendealflow.com, use our Pulse Portal, CRM platform, AI-powered features, or any of our related services (collectively, the "Service"). By using the Service, you agree to the practices described in this Policy.

1. Information We Collect

1.1 Information You Provide

When you register for, purchase, or use our Service, you may provide us with:

Account Information: Your name, email address, phone number, company name, billing address, and payment information.

Customer Data: Contact records, opportunity and deal data, property information, pipeline activity, messages, call recordings and transcripts, notes, documents, and any other data you or your team create, upload, or transmit through the Service.

Communications: Emails, support tickets, service requests, chat messages, feedback, and any other communications you send to us.

1.2 Information Collected Automatically

When you access our website or use the Service, we may automatically collect:

Usage Data: Pages visited, features used, actions taken within the Pulse Portal, session duration, login frequency, and other interaction data.

Device and Browser Information: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers.

Cookies and Tracking Technologies: We use cookies, pixel tags, and similar technologies to collect information about your browsing behavior. See Section 6 for details.

1.3 Information from Third-Party Platforms

We receive data from third-party platforms integrated with our Service, including GoHighLevel (CRM data, contact records, pipeline events, conversation messages), voice AI platforms (call recordings, transcripts), and LLM providers (AI processing results). This data is processed in accordance with this Policy and the terms of those platforms.

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing the Service. To operate, maintain, and deliver the Service, including the CRM platform, Pulse Portal, AI Agents, and Scout Intelligence Engine.

AI Processing and Intelligence. To power AI-driven features including seller readiness scoring, content analysis of messages and call transcripts, behavioral stage classification, intelligence briefings, automated message generation, and other AI-powered functionality. This processing analyzes the content and metadata of your communications and pipeline activity to generate insights, scores, and recommendations.

Cross-Customer Insights. To generate anonymized, aggregated insights, benchmarks, and best practices derived from data across our customer base. Individual data is never shared in identifiable form. Only structural patterns, statistical averages, and anonymized trends are used. See Section 3.3 for opt-out details.

Improving the Service. To analyze usage patterns, identify trends, diagnose technical issues, and improve the functionality, performance, and design of the Service.

Communication. To send you transactional communications (account confirmations, billing receipts, support responses), service notifications (feature updates, maintenance alerts, intelligence briefings), and marketing communications (product announcements, educational content). See Section 5 for marketing opt-out details.

Security and Compliance. To detect and prevent fraud, enforce our Terms and Conditions, comply with legal obligations, and protect the rights and safety of our users and our business.

3. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

3.1 Service Providers

We share information with third-party service providers who assist us in operating the Service. These include:

GoHighLevel — CRM platform hosting and functionality

Supabase — Database hosting and infrastructure

OpenAI and Anthropic — AI/LLM processing (using your API key, as described in our Terms)

VAPI — Voice AI call handling and transcription

Payment processors — Subscription billing and payment processing

Email and messaging providers — Transactional and marketing communications

All service providers are contractually obligated to use your information only for the purposes of providing services to us and to maintain appropriate security measures.

3.2 AI Processing

By using the Service, you consent to our AI systems processing all data within your account, including messages, call transcripts, contact records, opportunity data, property data, and pipeline activity. This processing powers features such as lead scoring, seller intent analysis, message generation, and intelligence briefings. AI processing is performed using the LLM provider and API key configured on your account. Open DealFlow does not provide a shared API key or absorb LLM usage costs.

3.3 Anonymized and Aggregated Data

We use anonymized and aggregated data from across our customer base to generate network-wide insights and benchmarks. Your individual data is never identifiable in these aggregations. A minimum sample size is enforced before any aggregated insight is surfaced. You may opt out of cross-customer data aggregation at any time by contacting us at [email protected]. Opting out will disable certain features that depend on aggregated data, including network benchmarking.

3.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent notice on our website before your information becomes subject to a different privacy policy.

3.5 Legal Requirements

We may disclose your information if required to do so by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Open DealFlow, our users, or the public, or to comply with applicable law or respond to valid legal process.

4. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your information, including encryption of data in transit (TLS) and at rest, row-level security policies on database tables restricting data access to authorized accounts, access controls limiting personnel access to customer data, and secure authentication for all platform access.

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. If we become aware of a data breach affecting your personal information, we will notify you as required by applicable law.

5. Marketing Communications

We may send you marketing communications about Open DealFlow products, features, and services via email. These communications are sent through our CRM platform (GoHighLevel).

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us at [email protected]. Opting out of marketing communications does not affect transactional or service-related communications (billing, support, security alerts, intelligence briefings tied to your subscription).

6. Cookies and Tracking Technologies

6.1 What We Use

We use the following tracking technologies on our website:

Meta Pixel (Facebook): We use the Meta Pixel to measure the effectiveness of our advertising, understand how visitors interact with our website, and deliver targeted advertising on Meta platforms (Facebook, Instagram). The Meta Pixel may collect information about your browsing behavior, device information, and interactions with our website.

Cookies: We use essential cookies required for the Service to function (authentication, session management) and analytics cookies to understand website usage patterns.

Future Analytics: We may implement additional analytics tools (such as Google Analytics) in the future. This Policy will be updated accordingly.

6.2 Your Choices

Most web browsers allow you to control cookies through browser settings. You can set your browser to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect the functionality of certain parts of the Service.

To opt out of Meta's targeted advertising, visit Meta's Ad Preferences at https://www.facebook.com/adpreferences.

7. Data Retention

We retain your personal information and Customer Data for the duration of your active subscription. Following termination or expiration of your subscription, we retain your data for a period of 90 days to allow for data export and transition. After this retention period, your data may be permanently deleted.

Anonymized and aggregated data (which cannot be used to identify you) may be retained indefinitely for analytical and benchmarking purposes.

We may retain certain information for longer periods as required by law (tax records, billing records) or as necessary to resolve disputes or enforce our agreements.

8. Your Rights

8.1 All Users

You have the right to:

Access the personal information we hold about you by contacting us.

Correct inaccurate personal information by updating your account or contacting us.

Delete your account and request deletion of your personal data, subject to our data retention requirements and legal obligations.

Export your contact records from the CRM upon request. See our Terms and Conditions for data portability details.

Opt out of cross-customer data aggregation by contacting us.

Opt out of marketing communications as described in Section 5.

8.2 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.

Right to Delete. You may request that we delete personal information we have collected from you, subject to certain legal exceptions.

Right to Opt Out of Sale. We do not sell your personal information. If this practice changes, we will update this Policy and provide a "Do Not Sell My Personal Information" link on our website.

Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at [email protected]. We will verify your identity before processing your request and respond within 45 days as required by law.

9. Children's Privacy

The Service is designed for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly.

10. Third-Party Links and Services

The Service may contain links to third-party websites, platforms, or services that are not owned or controlled by Open DealFlow. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with our Service.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated Policy on our website with a revised "Last Updated" date and, where appropriate, by sending an email notification. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated Policy.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Florida, without regard to conflict of law principles. By using the Service, you consent to the exclusive jurisdiction and venue of the state and federal courts located in Miami-Dade County, Florida in all disputes arising out of or relating to this Policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how your information is being handled, please contact us:

OpenWave Online LLC, d/b/a Open DealFlow Email: [email protected] Website: https://opendealflow.com