Privacy Policy
Last updated 1 November 2026
Cloud Deal AI (“we”, “us”) runs dealbenchmark.com, a tool that analyses AWS commercial proposals you upload and helps you prepare for negotiation. This policy explains what we collect, why, where it is stored, and how to have it deleted.
What we collect
- Account details. Your email address and, if you provide one or sign in with Google or Microsoft, your name. A user ID is created for your account.
- Proposals you upload. The original file, the text extracted from it (extraction happens in your browser before upload), the commercial terms you confirm, and the analysis report we generate.
- Activity records. When a case is created or deleted, we record the event type, your user ID, the case ID, and the time.
- Technical logs. Our hosting provider records requests (such as time, address requested, and IP address) to operate and secure the service. Our application logs include your user ID and case IDs, not file contents.
We do not use advertising or analytics trackers.
How we use it
- To sign you in and keep your cases private to your account.
- To analyse your proposals and show you the results. The analysis runs on our own servers using fixed rules and a bundled public-price reference; your documents are not sent to any third-party AI service.
- To enforce usage limits, prevent abuse, and fix problems.
We do not sell your data or use it for advertising.
Benchmark contributions
Deal data from your uploads is used for benchmarks only if you explicitly opt in for that deal. Benchmarks are published only as aggregates of at least three deals, and contributed deal records do not include your name, email, or company identity. A deal you chose to contribute is kept after you delete its case; everything else about the case is deleted. Without your opt-in, nothing from your uploads is used for benchmarks.
Where your data is stored and who processes it
- Cloudflare hosts the application, database, and file storage, and processes request logs.
- Clerk manages sign-in: your email address, name, login methods, and session cookies. Passwords, if you use one, are stored hashed by Clerk and never seen by us.
- Google or Microsoft, only if you choose to sign in with them, confirm your identity and share your name and email with us.
- jsDelivr serves the PDF reader your browser uses to extract text. It receives your IP address when the reader loads, but not your files.
These providers may process data outside your country, including in the United States, under their own data protection terms.
How long we keep it
- Cases (file, extracted text, terms, and report) expire 30 days after upload. Expired cases and their files are deleted the next time you open your dashboard. You can delete any case yourself at any time, which removes it and its files immediately.
- Activity records are kept after a case is deleted, as a security and audit trail.
- Your account is kept until you ask us to delete it.
- Backups we make of the service may contain your data until they are replaced or deleted.
Cookies
We use only the cookies needed to keep you signed in, set by Clerk. There are no advertising or analytics cookies.
Your rights
You can ask us to access, correct, export, or delete your personal data, or to delete your account. Depending on where you live, you may also have the right to object to or restrict processing and to complain to your data protection authority. Email mickael72@gmail.com and we will respond within 30 days.
Children
The service is intended for business use and is not directed at anyone under 16.
Changes
If we change this policy, we will update it here and change the date above.
Contact
Questions about privacy: mickael72@gmail.com.