Deal Trio — Privacy Policy

Effective date: July 11, 2026

This Privacy Policy explains how Deal Trio collects, uses, discloses, stores and protects personal information when you use the Deal Trio website, application, communications and related services collectively referred to as the "Service."

Deal Trio is a free, independently operated and unincorporated online service based in Ontario, Canada.

This Privacy Policy applies to users in Canada, excluding Quebec, and the United States.

The Service is not currently offered to Quebec residents.

1. Privacy accountability

Deal Trio is responsible for personal information under its control.

The person responsible for privacy matters may be contacted as:

Privacy Officer, Deal Trio Email: hello@dealtrio.com

You may contact the Privacy Officer concerning:

• Privacy questions;
• Access requests;
• Correction requests;
• Consent withdrawal;
• Account closure;
• Deletion requests;
• Security concerns; or
• Privacy complaints.

Deal Trio may verify your identity before responding to a request concerning an account or personal information.

2. Information Deal Trio collects

A. Account and contact information

Deal Trio may collect:

• Email address;
• Full name;
• Phone number;
• City;
• Province or state;
• Country;
• Member category;
• Account status;
• Account identifier; and
• Account creation date.

An email address is required to create and access an account.

Other contact information may be optional, although missing information may limit what can be exchanged after a mutual connection.

B. Operator profile information

Operators may provide information such as:

• Work history;
• Operating or management experience;
• Industries;
• Responsibilities;
• Skills;
• Leadership experience;
• Business preferences;
• Compensation or ownership preferences;
• Location; and
• An identity-hidden introduction.

C. Owner profile information

Owners may provide information such as:

• Current or prospective ownership status;
• Business type;
• Industry;
• Location;
• Operating needs;
• Desired experience;
• Proposed compensation or ownership structures; and
• An identity-hidden opportunity description.

Identity-hidden fields should not include names, employer names, business names, contact details or other directly identifying information.

D. Conversation and message information

Deal Trio may collect and store information relating to:

• Conversation requests;
• Acceptances;
• Declines;
• Withdrawals;
• Message content;
• Message timestamps;
• Conversation status;
• Connection requests;
• Mutual connection consent;
• Contact-information release;
• Blocking;
• Reports;
• Conversation closure; and
• Reasons submitted when ending a conversation.

Messages may be processed by automated tools that attempt to identify and hide contact information before mutual connection.

E. Referral and founding-member information

Where referral or founding-member features are offered, Deal Trio may collect:

• Referral codes;
• Referral links;
• Referral source;
• Referred signups;
• Founding-member number;
• Rank;
• Profile-placement status; and
• Information used to identify duplicate accounts, manipulation or abuse.

F. Consent and legal records

Deal Trio may collect:

• Terms acceptance;
• Privacy Policy acknowledgement;
• Connection consent;
• Promotional-email consent, if offered;
• Consent wording or version;
• Consent date and time;
• Withdrawal of consent;
• IP address;
• Browser information; and
• Device information.

G. Technical and usage information

Deal Trio and its service providers may automatically collect:

• IP address;
• Browser type;
• Device type;
• Operating system;
• General geographic region derived from an IP address;
• Login and activity timestamps;
• Pages or features used;
• Referral source;
• Error and diagnostic information;
• Security events;
• Email-delivery events; and
• Authentication or session information.

Deal Trio does not intend to collect precise GPS location through the Service.

H. Support communications

If you contact Deal Trio, it may collect:

• Your email address;
• Your name, if provided;
• The content of your communication;
• Attachments you provide;
• Support history; and
• Information needed to investigate or respond.

I. Reports and moderation information

Deal Trio may collect:

• Reports of suspected misconduct;
• Relevant profile or message information;
• Investigation notes;
• Account actions;
• Safety concerns;
• Records of blocked interactions; and
• Information reasonably needed to prevent repeated misuse.

3. Information you should not provide

Do not submit:

• Social insurance or Social Security numbers;
• Passport or driver's-licence images;
• Government identification numbers;
• Bank-account information;
• Payment-card information;
• Passwords;
• Biometric information;
• Detailed health information;
• Criminal-record documents;
• Information about minors;
• Trade secrets;
• Privileged communications;
• Confidential employer records; or
• Personal information about another person unless you have authority to provide it.

Deal Trio may remove such information where appropriate.

If you voluntarily include sensitive information in a profile or message, Deal Trio may process it as part of operating, securing or moderating the Service.

4. How information is collected

Deal Trio collects information:

• Directly from you;
• Through your use of the Service;
• When another member interacts with your profile;
• When another member sends or responds to a request;
• When members exchange messages;
• Through referral links;
• Through hosting, authentication, email and security systems;
• Through browser and server logs;
• From reports submitted by members; and
• From service providers operating on Deal Trio's behalf.

Deal Trio does not purchase consumer-data lists to create member profiles.

5. How information is used

Deal Trio may use personal information to:

• Create and administer accounts;
• Authenticate users;
• Build and display identity-hidden profiles;
• Display profiles from the other member category;
• Facilitate conversation requests;
• Open and operate message threads;
• Attempt to redact contact information;
• Send service notifications;
• Record mutual connection consent;
• Release contact information following mutual consent;
• Operate referral and founding-member features;
• Provide support;
• Moderate content and conduct;
• Investigate reports;
• Prevent fraud and abuse;
• Protect users and Service security;
• Diagnose technical problems;
• Maintain and improve the Service;
• Enforce the Terms of Service;
• Comply with legal requirements;
• Establish, exercise or defend legal claims; and
• Complete a restructuring, incorporation or transfer of the Service.

Deal Trio will not use personal information for a materially different purpose without notice and additional consent where required by law.

6. Identity-hidden profile visibility

Other registered members may see information designated for your identity-hidden profile, which may include:

• An alias or member number;
• City and province or state;
• Background;
• Industry;
• Experience;
• Business type;
• Operational need;
• Structure preferences; and
• Identity-hidden introduction.

Before mutual connection, the normal member interface is designed not to display your full name, email address or phone number to other members.

Identity-hidden does not mean completely anonymous.

Another member may infer or discover your identity from contextual information you provide. Deal Trio does not guarantee that identity-hidden information cannot be connected to you.

7. Message processing and administrative access

Before mutual connection, Deal Trio may process messages using automated contact-detection rules.

These rules may attempt to identify:

• Email addresses;
• Phone numbers;
• Website addresses;
• Links;
• Social-media handles; and
• Other apparent contact information.

The system is not guaranteed to identify every contact or identifying detail.

Authorized Deal Trio personnel and service providers may access account details, profiles and messages where reasonably necessary to:

• Operate the Service;
• Provide support;
• Moderate content;
• Investigate reports;
• Prevent fraud;
• Protect safety;
• Enforce the Terms;
• Diagnose technical problems;
• Respond to a security incident; or
• Comply with law.

Administrative access does not mean every message is manually reviewed.

8. Mutual contact-information disclosure

When you select "I'm ready to connect" or a similar option, you authorize Deal Trio to disclose your contact information if the other member also agrees.

Once both members consent, Deal Trio may disclose:

• Full name;
• Email address;
• Phone number, if provided; and
• City and province or state.

The disclosure may occur automatically.

You may withdraw a connection request before mutual consent occurs.

After information has been disclosed, Deal Trio cannot reverse the disclosure, require the recipient to forget it or guarantee its deletion.

The recipient is responsible for using the information lawfully.

9. When information is disclosed

Deal Trio may disclose personal information in the following circumstances.

A. Mutual connection

Deal Trio discloses contact information to another member after both participating members consent to the connection.

B. Service providers

Deal Trio uses or may use service providers for:

• Application and website hosting;
• Database services;
• Authentication;
• Email delivery;
• Storage;
• Security;
• Error monitoring;
• Infrastructure; and
• Technical support.

Current providers may include:

• Supabase for database and authentication services;
• Vercel for hosting and infrastructure; and
• Resend for transactional email delivery.

These providers may process personal information only as reasonably necessary to provide their services, subject to their contractual and security obligations.

Provider details may change as the Service develops. This Privacy Policy will be updated where a change materially affects how personal information is handled.

C. Safety, security and enforcement

Deal Trio may disclose information where reasonably necessary to:

• Investigate fraud or misuse;
• Prevent abuse;
• Protect a person's safety;
• Protect Service security;
• Enforce the Terms;
• Respond to a security incident; or
• Establish, exercise or defend legal claims.

D. Legal compliance

Deal Trio may disclose information where required or permitted by applicable law, legal process, court order, regulator or law-enforcement request.

Where legally permitted and reasonably practical, Deal Trio may notify the affected user.

E. Incorporation or business transition

If operation of Deal Trio is transferred to a corporation, successor, purchaser or other operator, personal information may be reviewed or transferred as part of that transaction.

The recipient must handle the information consistently with this Privacy Policy unless affected users are notified and any additional consent required by law is obtained.

F. Your direction or consent

Deal Trio may disclose information for another purpose when you direct it to do so or provide valid consent.

10. No sale or behavioural advertising

Deal Trio does not sell personal information for monetary consideration.

Deal Trio does not currently:

• Share personal information for third-party cross-context behavioural advertising;
• Use advertising pixels to track members across unrelated websites;
• Use profile or message content to create advertising profiles for unrelated third parties; or
• Display third-party behavioural advertising through the Service.

If these practices change, Deal Trio will update this Privacy Policy and provide additional notice, choices or consent where required.

11. Cookies and similar technologies

Deal Trio may use essential cookies, browser storage and similar technologies for:

• Authentication;
• Session continuity;
• Security;
• Remembering basic preferences;
• Fraud prevention; and
• Core platform operation.

Supabase, Vercel, Resend and other infrastructure providers may generate operational logs or use technologies reasonably necessary to provide their services.

Deal Trio does not currently use third-party advertising cookies.

Your browser may allow you to block or delete cookies. Blocking essential technologies may prevent the Service from functioning.

The Service may not respond to browser "Do Not Track" signals because there is no universally accepted technical standard for those signals.

12. Cross-border processing

Deal Trio is based in Ontario, Canada.

Supabase, Vercel, Resend and other service providers may process or store personal information in Canada, the United States or other jurisdictions where they operate.

Information processed in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, regulators or law-enforcement authorities there.

Deal Trio remains responsible for personal information under its control and takes reasonable steps to use providers that maintain appropriate safeguards.

You may contact the Privacy Officer for additional information about service-provider categories or cross-border processing.

13. Consent

Deal Trio seeks consent appropriate to the sensitivity of the information and the way it will be handled.

Consent may be obtained through:

• An agreement checkbox;
• A connection button;
• An optional communication preference;
• A request you make;
• Conduct that reasonably indicates consent; or
• Another method permitted by applicable law.

Examples of express consent include:

• Agreeing to the Terms and acknowledging this Privacy Policy;
• Requesting promotional communications, if offered;
• Asking to exchange contact information; and
• Accepting another member's connection request.

You may withdraw consent for optional processing by emailing hello@dealtrio.com.

If information is necessary to provide the Service, withdrawing consent may limit the Service or require closure of your account.

Withdrawal does not invalidate processing or disclosures that lawfully occurred before the withdrawal.

14. Service and promotional communications

Deal Trio may send communications reasonably necessary to operate or secure the Service, including:

• Sign-in links;
• Verification messages;
• Security notices;
• Conversation requests;
• Message notifications;
• Connection confirmations;
• Moderation notices;
• Account-status messages; and
• Material legal or operational notices.

During the beta, Deal Trio does not intend to send unrelated promotional or marketing communications.

If promotional communications are introduced, Deal Trio will obtain consent and provide sender information, contact information and an unsubscribe method where required by applicable law.

Opting out of promotional communications will not prevent necessary account, security or transactional communications.

15. Retention

Deal Trio retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Maintain an active account;
• Provide conversations and connection records;
• Protect safety and Service integrity;
• Prevent repeated abuse;
• Resolve disputes;
• Demonstrate consent;
• Meet legal obligations; and
• Establish, exercise or defend legal claims.

When an account is closed or deletion is requested:

• The identity-hidden profile will be removed from active member browsing;
• Deal Trio will begin deleting information no longer reasonably required;
• Some information may remain temporarily in backups;
• Information previously disclosed to another member cannot be recalled;
• Limited security, consent, fraud, dispute or legal records may be retained; and
• Messages or moderation records may be retained where reasonably necessary to investigate abuse or protect legal rights.

Retention periods vary depending on the nature, sensitivity and purpose of the information.

When information is no longer required, Deal Trio will delete, de-identify or securely dispose of it.

16. Security safeguards

Deal Trio uses administrative, technical and organizational safeguards intended to protect personal information from:

• Loss;
• Theft;
• Unauthorized access;
• Unauthorized disclosure;
• Unauthorized copying;
• Misuse;
• Modification; and
• Destruction.

Safeguards may include:

• Authentication controls;
• Database access restrictions;
• Row-level access controls;
• Restricted administrative access;
• Encryption in transit;
• Logging;
• Provider security features;
• Software maintenance;
• Data minimization; and
• Administrative procedures.

No online system or storage service can be guaranteed completely secure.

You are responsible for protecting your email account, device and sign-in links.

17. Privacy and security incidents

Deal Trio maintains procedures intended to identify and respond to privacy and security incidents.

Where required by applicable law, Deal Trio will:

• Assess the incident;
• Take reasonable containment and remediation measures;
• Notify affected individuals;
• Notify the appropriate regulator;
• Notify other organizations where doing so could reduce harm; and
• Maintain required incident records.

Records required under Canadian private-sector privacy law will be retained for the legally required period.

The timing and content of notifications will depend on the circumstances and applicable law.

18. Accuracy and correction

Deal Trio relies on members to provide accurate and current information.

You may update information through account features where available or request correction by emailing hello@dealtrio.com.

Deal Trio may refuse to change information where it must be retained as an accurate historical, consent, moderation, security or legal record.

19. Access rights

Subject to applicable law, you may request:

• Confirmation of whether Deal Trio holds personal information about you;
• Access to that information;
• Information about how it has been used;
• Information about parties to whom it has been disclosed; and
• Correction of inaccurate or incomplete information.

Deal Trio may require information reasonably necessary to verify your identity.

Access may be limited where permitted or required by law, including where disclosure would reveal:

• Another person's personal information;
• Confidential commercial information;
• Security-sensitive information; or
• Information protected by legal privilege.

Requests may be sent to hello@dealtrio.com.

20. Account closure and deletion

You may request account closure or deletion by emailing hello@dealtrio.com.

Deal Trio may verify the request before acting.

Deletion is subject to lawful retention needs, including:

• Security;
• Fraud prevention;
• Abuse investigations;
• Consent records;
• Legal compliance;
• Dispute resolution; and
• Legal claims.

Closing an account does not delete information another member received following mutual connection.

21. United States privacy rights

Depending on your state of residence and whether the relevant law applies to Deal Trio, you may have rights to:

• Know or access personal information;
• Correct inaccurate information;
• Request deletion;
• Obtain a portable copy;
• Opt out of certain sales, sharing or targeted advertising;
• Limit certain uses of sensitive information;
• Use an authorized agent; or
• Appeal a denied request.

Deal Trio does not sell personal information or share it for third-party cross-context behavioural advertising.

Deal Trio will not unlawfully discriminate against you for exercising an applicable privacy right.

Requests and appeals may be sent to hello@dealtrio.com.

Deal Trio may verify your identity and an authorized agent's authority before completing a request.

22. Children

The Service is intended only for people who are at least 18 years old.

Deal Trio does not knowingly create accounts for or collect personal information from children.

If you believe a person under 18 has provided personal information, contact hello@dealtrio.com.

23. Third-party websites

The Service may contain links to websites or services not controlled by Deal Trio.

Their information practices are governed by their own privacy policies.

Deal Trio is not responsible for third-party privacy or security practices.

24. Privacy complaints

You may submit a privacy question or complaint to:

Privacy Officer, Deal Trio Email: hello@dealtrio.com

Please provide enough information for Deal Trio to understand and investigate the concern.

Deal Trio will review the matter and respond within a reasonable period.

If the concern cannot be resolved, you may have the right to contact the Office of the Privacy Commissioner of Canada, a provincial privacy regulator or an applicable United States privacy authority.

25. Changes to this Privacy Policy

Deal Trio may update this Privacy Policy to reflect:

• Service changes;
• New providers;
• New features;
• Security practices;
• Legal requirements;
• Incorporation; or
• Changes in information handling.

The updated Privacy Policy will display a revised effective date.

Deal Trio will provide reasonable notice of material changes through the Service or by email.

Where required, Deal Trio will obtain renewed or additional consent.

26. Contact

For privacy questions, access requests, correction requests, complaints, account closure, deletion or security concerns:

Privacy Officer, Deal Trio Email: hello@dealtrio.com