Privacy
How Deavo handles your information. We collect what we need to run the marketplace — and nothing we don’t.
Last updated November 2026.
Deavo is a Canadian platform and handles personal information in line with PIPEDA. This is a v1 plain-language summary.
What we collect
- Account details (name, email, role) and, for buyers, your buy-box preferences.
- Listing information you submit, and the messages/documents you exchange in a deal room.
- NDA signature records (your typed name, the timestamp, and IP) as clickwrap evidence.
- Basic usage data to keep the service secure and working.
How we use it
- To run the marketplace: publish listings, match buyers, and enable deal rooms.
- To send the notifications and alerts you opt into (you can turn these off).
- To screen listings for fraud and keep the platform safe.
What we don't do
We don't sell your personal information. Confidential business details stay blind until a seller approves access. Scraped-listing contact details are never shown publicly.
Cookies
Deavo uses cookies only to run the site and keep you signed in. When you sign in, our sign-in provider, Supabase, sets cookies named sb-…-auth-token that hold your session. They last up to 400 days and are removed when you sign out. When listing photos load, our storage provider’s network (Cloudflare) may set a short-lived security cookie, __cf_bm (30 minutes), used only to filter automated traffic. We use no advertising, analytics or tracking cookies. We also note in your browser that you closed our cookie notice, so it does not reappear for 12 months. You can clear cookies in your browser settings at any time.
Questions you send us
When you use “Have a question?”, we collect your question, your email address, your name if you give it, the topic you choose and the page you sent it from. We use them only to answer you; we do not send you marketing because you asked a question. To stop spam, we also keep a coded form of your internet address for 30 days; after one day it can no longer be linked back to the address, except in our database host’s backups, which are deleted after 7 days. Your question is stored by our hosting providers (Vercel and Supabase) and passes through our email providers (Amazon SES and our mailbox provider) so a person can read it. We keep questions for two years, then delete them. To see or delete yours sooner, email hello@deavo.ai.
Your choices
You can update your details, turn off alert emails, or ask us to delete your account. To make a request, contact us. We'll keep this policy current and note the date above.