Privacy policy
Last updated: 11 November 2026
This policy explains what information Dealplier (operated by EVEXA, “we”) processes, why, where, and the choices you have. Dealplier is a sales-execution application used by companies to manage RFQs, quotations, approvals and follow-ups.
Who is responsible
Each customer company decides what business information it puts into its workspace and is responsible for it (the controller). We process that information on the company's behalf to provide the service (the processor).
We are responsible for the information we collect to run our own website and to manage customer accounts and billing.
Information we process
- Account information: name, work email, role, language preference and team.
- Workspace content your company adds: customers, contacts (names, job titles, emails, phone numbers), projects, opportunities, quotations, tasks, activities, uploaded documents and RFQ emails forwarded or uploaded to the RFQ Inbox.
- Technical information: sign-in sessions, IP address and browser information in security logs, and error reports.
- Website enquiries: when you request a demo we receive your name, company, email and, if you give them, your phone number, sector and message. We email the request to our team and send you a confirmation.
- Website assistant: questions you type into the assistant on our website are sent to our model provider only to answer them; we do not store the conversation. We keep a daily message count per visitor, linked to a one-way code derived from the IP address (not the address itself), to prevent abuse.
- Cookies: a sign-in cookie and a language preference cookie. We do not use advertising or tracking cookies.
How we use it
We do not sell your data, use it for advertising, or use it to train language models.
- To provide the service: store and show your data, read documents you upload, send invitations, password resets and follow-up alerts.
- To keep it secure and reliable: access control, audit logs, monitoring, backups and investigating errors.
- To give support, only when your workspace admin grants time-limited, read-only access, which is recorded in your audit log.
Connected mailboxes (Outlook)
A user may connect their own Outlook / Microsoft 365 mailbox, if the workspace admin allows it. We then read, with read-only permission, the recent messages of the folders the admin chose (inbox, sent items) and keep their subject, sender, recipients, date and a short preview — not the full message. These are visible only to the mailbox owner.
When a message is linked to an opportunity, its subject, sender and preview become part of that opportunity's history and are visible to the colleagues who can see it. If the admin enables it, attachments of linked messages are added to the opportunity's documents. We never send email from, or change anything in, the mailbox. Disconnecting deletes the synchronized messages and the sign-in tokens.
Language-model processing
Some features (reading documents, summaries and suggested next steps) can use a language model. When enabled, the relevant text is sent to our model provider only to produce the requested result. Results show the source they are based on and nothing is saved without a person confirming it.
A workspace admin can switch language-model processing off in Settings → Suggestions; the features then use deterministic rules only.
Service providers and locations
We use the following providers to run Dealplier. Your data may therefore be processed outside the Kingdom of Saudi Arabia, in the locations listed. Data is encrypted in transit, and access is limited to what each provider needs to perform its service.
| Provider | What it does | Where data is processed |
|---|---|---|
| Supabase | Database, file storage and sign-in | Asia Pacific (Tokyo, Japan) |
| Vercel | Hosting of the website and application server | United States and global edge network |
| Resend | Sending service emails (invitations, password resets, alerts, demo-request confirmations) | Asia Pacific (Tokyo, Japan) |
| Sentry | Error and reliability monitoring (no document content) | European Union (Germany) |
| OpenRouter / OpenAI | Optional language-model processing of document text, recorded updates, website-assistant questions and — only if the workspace admin allows it — the subject and short preview of synchronized emails | United States |
| GitHub | Storage of encrypted daily backups | United States |
Security
- Each company's data is separated at the database level and checked with cross-company tests.
- Roles and permissions are enforced on the server.
- Daily encrypted backups are restored automatically into a test database to verify them.
- Every change is recorded in an audit log available to your admins.
How long we keep data
See the data retention page for each type of record.
Your rights
Depending on applicable law, including the Saudi Personal Data Protection Law, you may ask to access, correct, delete or receive a copy of your personal data, or object to certain processing. If your data is in a customer's workspace, please contact that company first; we will help them respond.
Send requests to info@evexa.tech. We respond within 30 days.
Children
Dealplier is a business service and is not intended for anyone under 18.
Changes
We will post any change here and update the date above. For significant changes we will notify workspace admins by email.
Contact
EVEXA · info@evexa.tech