Last updated: September 9, 2026
Big Deal Soft (“we”, “us”, “our”) provides cloud-based business operations software. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to bigdealsoft.com and to our software services (the “Services”).
1. Information We Collect
Information you give us. Your name, business name, email address, phone number, billing details, and anything else you send when you request a demo, contact us, or create an account.
Information we collect automatically. When you visit our site or use the Services, we collect IP address, browser and device type, pages viewed, referring page, and timestamps. See our Cookie Policy for details on cookies and similar technologies.
Customer data. Information you or your users enter into the Services — inventory records, transactions, accounting entries, documents, and related business records. We process this data on your behalf and under your instructions.
Information from third parties. Limited information from our payment processor, analytics providers, and integration partners you choose to connect.
2. How We Use Information
- To provide, maintain, and secure the Services
- To create and administer accounts and process payments
- To respond to demo requests, support tickets, and other enquiries
- To improve our products, diagnose problems, and monitor performance
- To send service notices, and — where you have opted in — product updates you can unsubscribe from at any time
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
We do not sell your personal information and we do not use it to serve advertising.
AI features. Parts of the Services offer AI assistance. These features are off by default and are switched on per deployment and per account. Where they are switched on, the material being worked on — product and inventory records, and the text a user types into AI search — is sent to Google’s Gemini API to produce a result. We use Google’s paid tier, under which Google does not use that content to train or improve its models and retains it only briefly to detect abuse of the service. We do not train our own models on your data.
3. Legal Bases for Processing
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the Services), legitimate interests (securing and improving the Services, business communications), consent (optional cookies and marketing email), and legal obligation (tax, accounting, and lawful requests).
4. Our Role in Handling Customer Data
For information you enter into the Services, you are the data controller and we act as a data processor. We process it only to deliver the Services, follow your documented instructions, and meet legal requirements. For information about our own site visitors, prospects, and account contacts, we act as the controller.
5. How We Share Information
- Service providers — hosting, email delivery, payment processing, analytics, and support tooling, each bound to confidentiality and permitted to use the data only to serve us
- Google (Gemini API) — only where AI features are enabled, and only for the material described above
- Integration partners — only where you connect an integration, and only the data that integration needs
- Legal and safety — where required by law, or to protect our rights, users, or the security of the Services
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected customers
6. Data Retention
We keep personal information for as long as your account is active or as needed to provide the Services, and afterwards only as required for legal, tax, accounting, or dispute-resolution purposes. Customer data is deleted or returned on request after termination, subject to those obligations and to routine backup cycles.
7. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls on a least-privilege basis, logging, and regular backups. No system is completely secure, so we cannot guarantee absolute security, but we will notify affected customers and regulators of a qualifying breach as required by law.
8. International Transfers
We are based in the United States and our service providers may process data there or elsewhere. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
9. Your Rights and Choices
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents may request disclosure of the categories of personal information collected and disclosed, request deletion, and are entitled not to be discriminated against for exercising these rights.
To exercise a right, email us at the address below; we respond within the time frame the applicable law requires. If your request concerns data held by a customer of ours inside the Services, we will refer you to that customer. You may also lodge a complaint with your local supervisory authority.
10. Cookies
We use essential, analytics, and preference cookies. You can manage them in your browser settings — see our Cookie Policy for the full list and instructions.
11. Children’s Privacy
The Services are intended for businesses. We do not knowingly collect personal information from anyone under 16, and we delete such information if we learn we have collected it.
12. Third-Party Links
Our site and the Services may link to sites we do not control. This policy does not apply to them, and we encourage you to read their privacy policies.
13. Changes to This Policy
We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, notify account holders by email or in-product notice before the change takes effect.
14. Contact
For questions about this Privacy Policy or to exercise your rights, contact us at support@bigdealsoft.com or write to Big Deal Soft, 1578 Dorchester Avenue, Boston, MA 02122, USA.