Policy
Privacy
Dealbid is a marketplace for software deals. Buyers browse without an account. Founders sign in to list a deal and bid for placement. This page says what is stored for each, and what is not.
If you are just browsing
Dealbid does not know who you are. Browsing creates no account, and no name, email address or IP address is stored for you.
When you click through to a deal, that click is recorded so the founder can see their own click figure, and so the weekly and monthly lists — which rank on buyer clicks, never on money — can be counted. What is stored is a pseudonym, not you:
- Your IP address and browser user-agent are used to calculate it, together with a secret and the current date. Neither is stored.
- The date is part of the calculation, so the pseudonym changes every day. The record cannot be used to follow one person from one day to the next.
- The secret means a copy of the table cannot be worked backwards into a list of IP addresses.
There is no analytics and no advertising on this site. No Google Analytics, no tag manager, no pixel, and no third-party script of any kind.
One cookie, and only if you choose a colour theme. It stores light, dark or nothing, so the site does not show you the wrong theme on the next page. It identifies nobody.
If you subscribe to deal emails
Your email address is stored, with the exact sentence you agreed to and the time you agreed to it:
I agree to receive Dealbid emails about new software deals. I can unsubscribe at any time.
The wording itself is stored rather than a tick, so what you agreed to can always be shown back to you — even after the wording changes for later subscribers. You can unsubscribe at any time, and the date you did is recorded.
If you sign in as a founder
Sign-in is Google. Dealbid never sees or stores a password.
What Google provides, and what is kept: your Google account identifier, your email address and your display name.
The permissions Dealbid asks Google for
openid, email and profile — and nothing else. Dealbid has no access to your Gmail, Drive, Calendar, contacts or any other Google service, and cannot act on your behalf anywhere in Google. It asks for identity, and nothing more.
While you are signed in, a session record is held. The session identifier is stored only as a one-way digest, so a copy of the database does not let anyone sign in as you. When the session was created, last used and ended is recorded.
What you provide as a founder is also stored: your display name and contact email, the deals you submit, your bids, your promotional credit ledger, and the moderation decisions taken on your deals along with the note explaining each one.
If you report a deal
Reporting is anonymous unless you choose otherwise. If you give an email address so Dealbid can follow up, it is stored with the report. If you do not, the report is stored without one.
Who else handles this data
- Cloudflare hosts Dealbid and stores its database.
- Google authenticates founders, and only founders.
That is the complete list. Your data is not sold, and it is not shared for advertising.
Payments
Dealbid currently runs on promotional credit and takes no card payments, so no card or bank details are held at all. If that changes, this page changes with it before any payment is taken.
How long things are kept
- Subscriber addresses — until you unsubscribe. After that a minimal record that you unsubscribed is kept, so you are not emailed again.
- Founder accounts and the Google identity attached to them — while the account is in use, and deleted 24 months after the last sign-in, or sooner on request.
- Deals, bids and credit records — kept as business records even after an account is closed. They refer to one another, and a marketplace cannot un-record an auction that happened.
- Click pseudonyms — kept indefinitely. Each founder’s lifetime click figure is counted from them, and the records identify nobody: the raw IP and user-agent were never stored, and the pseudonym changes daily.
- Moderation decisions — kept while the account exists, because they are the founder’s own record of what was decided about their deal.
- Administrative logs — 24 months.
Your choices
Email privacy@dealbid.app and Dealbid will respond within 30 days. You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted.
If you are a founder, erasing your account removes your name, your address and the Google account attached to it. What stays is what the marketplace did: the deals, bids, credit and placements that record auctions which actually happened. Those no longer name you.
If you are a subscriber, erasing you removes your record entirely. That is different from unsubscribing, which keeps your address precisely so you are not emailed again — so if you ask to be erased and later subscribe once more, that is a fresh consent and it is recorded fresh.
Who Dealbid is, and which law applies
Dealbid is operated by Zonayed Ahmed — an individual, not a company. Questions about this page reach a person, not a department.
This notice is governed by the law of Bangladesh. That does not remove any consumer or data-protection right you have under the law of the country you live in. Where the two differ, the protection that is stronger for you is the one that applies.
Dealbid treats the UK and EU General Data Protection Regulations as applying to it. The lawful basis is your consent for deal emails, the contract between you and Dealbid for a founder account and the placements it buys, and legitimate interest for the anti-abuse filtering behind click counting — which is the reason a click is stored as a rotating pseudonym rather than as an address.
Changes to this page
When this page changes, the date below changes with it. There is no mailing list for policy changes and Dealbid does not promise to notify you of one.
Last updated: 2 September 2026