VO Deal Desk Privacy Policy

1. Scope and controller

This Privacy Policy explains how The Dulcet One VO, LLC, doing business as VO Deal Desk (“VO Deal Desk,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects personal information through vodealdesk.com, the protected VO Deal Desk application, subscriptions, support, operational metrics, monitoring, and related communications. It does not govern independent third-party sites or services. We act as controller for our own business purposes; provider roles may vary.

2. Information we collect

• Account and access: email or identity context, canonical identity hash, plan, status, approved seats, grant metadata, and authentication or access events.
• Submitted material: casting notices, contracts, scripts, screenshots, pasted text, prompts, and other content you choose to analyze, including information about third parties.
• Saved workspace data: source-sanitized results, status, notes, quotes, next steps, saved references, earnings amounts and dates, genre, and optional client/contact details.
• Billing: email, Stripe customer and subscription identifiers, plan, cadence, status, and billing dates. Stripe processes complete payment credentials; we do not store them.
• Support and feedback: communications, optional contact information, page/build, limited browser diagnostics, and bounded product observations.
• Marketing: Insider email, consent and confirmation status, signup time and source, subscription status, and delivery or suppression metadata.
• Security and operations: request, access, error, abuse-prevention, audit, availability, and security metadata. Aggregate metrics may include time, environment, allowlisted route or feature category, outcome, duration, coarse acquisition category, country code, and device class. We design metrics to exclude uploaded source content, prompts, responses, full URLs, query strings, IP addresses, raw user agents, cookies, tokens, and direct customer identifiers.

3. Sources

We collect information directly from you; from authorized account administrators and users; automatically from your browser, device, and use of the Service; from payment, identity, security, hosting, email, and analytics providers; and from counterparties or other people who communicate with us. If you submit information about another person, you are responsible for authority and required notice.

4. How we use information

• Provide, personalize, secure, troubleshoot, and improve the Service;
• perform requested analyses and save user-directed records;
• authenticate users, manage entitlements, process payments, and administer subscriptions;
• respond to support, privacy, legal, and content reports;
• send transactional messages and, with consent, marketing updates;
• measure aggregate feature adoption, reliability, performance, and acquisition trends;
• detect fraud, misuse, threats, outages, and policy violations;
• comply with law, preserve evidence, resolve disputes, and enforce agreements; and
• create aggregated or de-identified information that is not reasonably linkable to a person.

Where law requires a legal basis, we rely as applicable on contract performance, legitimate interests, consent, and legal obligations. You may withdraw consent prospectively where consent is the basis.

5. Automated processing and AI providers

When enabled and requested, submitted material may be transmitted through Cloudflare infrastructure to an AI provider, including OpenAI, to generate an analysis. We do not intentionally use submitted confidential source material to train our own models. Provider handling depends on the contracted service configuration. Features that require a specified privacy configuration may be disabled until that configuration is confirmed. Do not submit data you are not authorized to process.

6. How we disclose information

We disclose information only as reasonably necessary: to hosting, security, identity, AI, payment, transactional-email, and marketing vendors acting for us; to professional advisers, auditors, insurers, and authorities; to protect rights, safety, security, and legal compliance; in a merger, financing, acquisition, reorganization, bankruptcy, or transfer, subject to appropriate protections; and at your direction or with consent. Current core providers may include Cloudflare, OpenAI, Stripe, Resend, and Kit. We do not sell personal information for money. We do not use or disclose personal information for cross-context behavioral advertising as those terms are commonly defined.

7. Retention

We retain personal information only as reasonably necessary for the purposes above, considering account status, user choices, operational needs, security, contractual and accounting duties, dispute and legal-hold requirements, and provider limitations. Submitted analysis source is designed for transient processing and is not intentionally persisted as source material in History. Saved History, Workspace, and Earnings records remain until user deletion or an applicable account-end process. Billing, entitlement, audit, security, suppression, and legal records may be retained longer where necessary. Controlled backups expire on operational schedules and may not be deleted immediately when a live record is deleted. We delete or de-identify information when the applicable purpose ends, unless a legal or security exception applies.

8. Security

We use administrative, technical, and organizational safeguards designed for the nature of the information, including encryption in transit, provider encryption at rest, access controls, least privilege, security monitoring, rate limits, backups, endpoint protections, and incident procedures. No method is completely secure, and we cannot guarantee absolute security. You are responsible for device security, account credentials, authorized users, and appropriate redaction and backups.

9. Your choices and privacy rights

You may access, correct, export, or delete supported records through available Service controls; cancel a subscription; unsubscribe from marketing; and request access, correction, deletion, portability, restriction, objection, or withdrawal of consent where applicable law grants that right. We may verify identity, clarify scope, deny or limit a request where permitted, preserve required records, and respond through an authorized agent process where required. You will not be discriminated against for exercising applicable rights. To submit a request, email Jerry@TheDulcetOneVO.com. You may appeal a denial by replying “Privacy Appeal.” If unresolved, you may contact the regulator or attorney general available under applicable law.

10. Marketing communications

Insider enrollment does not grant or affect private-beta access. Insider marketing uses affirmative consent and double opt-in. Every marketing email provides an unsubscribe method. Unsubscribing prevents further marketing sends but not necessary transactional or legal messages. We retain minimum suppression and audit information needed to honor the opt-out and prevent accidental re-mailing. A later subscription requires a new confirmed opt-in.

11. Cookies and similar technologies

The public site and protected application may use strictly necessary cookies, tokens, or similar technologies for authentication, security, fraud prevention, session continuity, and preferences. Cloudflare Turnstile processes anti-abuse signals on forms. We use coarse first-party operational measurement rather than third-party behavioral advertising. Browser controls may affect functionality. We do not currently respond to browser “Do Not Track” signals because no uniform standard applies; legally recognized opt-out preference signals will be honored where they apply to our practices.

12. Children

The Service is for adults and is not directed to children under 18. We do not knowingly collect personal information from children. Contact us if you believe a child provided information so we can investigate and delete it as appropriate.

13. United States and international use

VO Deal Desk is operated from the United States, and information may be processed in the United States and other locations where providers operate. Those locations may have different laws. Where legally required, we use an approved transfer mechanism and supplementary safeguards. The current commercial offering is intended for the United States; users accessing elsewhere are responsible for local restrictions, and we may limit availability.

14. Third-party links and services

Third-party services and links have their own notices and practices. We encourage you to review them. We are not responsible for independent third-party practices.

15. Changes to this Policy

We may update this Policy to reflect changes in practices, law, providers, or the Service. We will post the revised date and provide additional notice or obtain consent when required. Material changes apply prospectively.

16. Contact

Privacy questions and verified rights requests: Jerry@TheDulcetOneVO.com. Legal and general notices: admin@vodealdesk.com. Mailing address: The Dulcet One VO, LLC, 4715 Columbia Street, Cumming, Georgia 30040, United States.