Privacy Policy

Last updated 29 October 2026

DealJar is run by Rebellion Ltd, trading as DealJar ("we", "us"), a New Zealand company. This policy explains how we handle personal information under the Privacy Act 2020. Questions: dan@rebellion.digital.

What we collect

• Account details: your name, email address and workspace name.
• Sign-in with Google or Microsoft: only your name, email address and basic profile, used to sign you in.
• CRM data: the leads, contacts, deals, notes and tasks you and your team enter.
• Billing: handled by Stripe. We never see or store your full card number.
• Technical data: basic logs (IP address, browser, times) to keep the service secure and working.

How we use it

To provide and secure DealJar, send sign-in codes and service notices, bill your subscription, and provide support. We don't sell personal information or use it for advertising.

Your customers' data

The CRM data you put in DealJar belongs to you. You decide what goes in and are responsible for having the right to hold it. We process it only to run the service for you.

Google user data

DealJar's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide DealJar features you choose to use, and we never use it for advertising or sell it.

Who we share it with

Trusted providers that help run DealJar: Cloudflare (hosting and email delivery), Stripe (payments), and Google and Microsoft (sign-in). Some of them store data outside New Zealand, and we use providers with comparable privacy safeguards. We may disclose information if the law requires it.

Storage and retention

Data is stored securely with Cloudflare. If you close your workspace, we delete its CRM data within 90 days. We keep billing records for 7 years, as NZ tax law requires.

Your rights

You can ask to see, correct, export or delete your personal information by emailing dan@rebellion.digital. Workspace owners can also export their data.

Cookies

We use one essential session cookie to keep you signed in. No tracking or advertising cookies.

Security and breaches

We use encryption in transit, access controls and separate data for each workspace. If a privacy breach is likely to cause serious harm, we'll tell affected people and the Privacy Commissioner.

Complaints

Please contact us first. If you're not satisfied, you can complain to the Office of the Privacy Commissioner.

Changes

We'll post any changes here and update the date above.