1. Who we are
DealMotion is a business software service operated by Webman AS, organisation number 925 655 864, Russervegen 7, 7652 Verdal, Norway.
In this Privacy Policy, "DealMotion", "we", "us" and "our" refer to Webman AS and the DealMotion service.
Privacy contact: privacy@dealmotion.app
2. Scope of this Privacy Policy
This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you:
- visit dealmotion.app or related DealMotion websites;
- create or use a DealMotion account;
- use DealMotion as an authorised user of a business customer;
- contact us for sales, support or other enquiries;
- connect third-party services, including Meta products such as Facebook and Instagram; or
- otherwise interact with DealMotion.
A business customer may upload or otherwise process personal data in DealMotion about its own customers, leads, employees, suppliers and other contacts. For that data, the business customer normally acts as the data controller and DealMotion acts as a data processor under the customer's instructions and the applicable data processing agreement. Questions about such data should normally first be directed to the business that controls the relevant DealMotion account.
3. Personal data we collect
Depending on how you use DealMotion, we may collect the following categories of personal data.
3.1 Account and organisation data
This may include:
- name;
- business email address;
- telephone number;
- job title and role;
- employer or organisation;
- account identifiers;
- authentication and access information;
- language, time zone and account preferences; and
- information about permissions and user roles.
3.2 Customer content
Business customers and their authorised users may enter, import or generate content in DealMotion, including:
- customer and contact information;
- leads, opportunities and CRM records;
- proposals, orders and invoices or invoice-related information;
- service tickets, messages and communications;
- product, warehouse and asset information;
- appointments, work schedules and time records;
- employee and HR-related business information;
- notes, documents, images and attachments; and
- other information submitted through enabled DealMotion modules.
The business customer determines which customer content is submitted to DealMotion and is responsible for having a lawful basis for that processing.
3.3 Billing and commercial data
This may include:
- subscription plan;
- billing contact;
- company and tax information;
- payment status;
- invoices and transaction references; and
- purchase and subscription history.
Payment card information may be processed directly by a payment service provider and may not be stored by DealMotion.
3.4 Technical and usage data
We may collect technical information automatically, including:
- IP address;
- browser and device type;
- operating system;
- login history;
- timestamps;
- pages and features used;
- error reports;
- security and audit logs;
- approximate location derived from IP address; and
- cookie or similar technology identifiers.
3.5 Support, sales and communications data
When you contact us, we may collect:
- contact details;
- the content of your enquiry;
- support history;
- meeting notes;
- feedback; and
- records of communications with us.
3.6 Data from connected services
When an authorised user connects a third-party service, DealMotion may receive and process data made available through that service and the permissions selected by the user. This may include identifiers, account information, content, activity data, access tokens and integration logs.
4. Meta, Facebook and Instagram integration
When an authorised user connects a Meta account or business asset to DealMotion, we may process Meta Platform Data required to provide the selected integration features.
Depending on the permissions and features enabled, this may include:
- Meta user and business account identifiers;
- Facebook Page identifiers and Page information;
- Instagram professional account identifiers and profile information;
- advertising account identifiers;
- permissions and connection status;
- OAuth access tokens and related authentication information;
- lead advertisement form submissions and lead details;
- Messenger or Instagram message content, sender identifiers and attachments;
- campaign, ad set and advertisement information;
- advertising performance data such as spend, impressions, reach, clicks, conversions, frequency and related metrics;
- webhook events; and
- deauthorisation and data deletion request information.
We use this data only to:
- establish and maintain the authorised connection;
- import and display leads, messages and advertising information requested by the customer;
- route information to the correct DealMotion organisation;
- provide reports, performance analysis and recommendations;
- troubleshoot and secure the integration;
- comply with Meta's platform requirements; and
- respond to deletion, disconnection and deauthorisation events.
DealMotion does not sell Meta Platform Data. We do not use Meta Platform Data to create advertising profiles for our own independent marketing purposes. Access is limited to authorised users of the connected DealMotion organisation and service providers that require access to operate the service.
The business customer is responsible for ensuring that its use of Meta data, leads and communications complies with applicable laws, Meta's terms and the rights of the individuals concerned.
5. How and why we use personal data
We process personal data for the following purposes:
- to create and administer accounts;
- to provide, operate and support DealMotion;
- to perform our agreement with the business customer;
- to enable integrations requested by authorised users;
- to process subscriptions, invoices and payments;
- to communicate about the service, support and security;
- to prevent fraud, abuse and unauthorised access;
- to diagnose errors, maintain logs and improve reliability;
- to improve and develop DealMotion;
- to comply with legal, accounting and regulatory obligations;
- to establish, exercise or defend legal claims; and
- to send marketing communications where permitted by law.
6. Legal bases
Where DealMotion acts as a data controller, we rely on one or more of the following legal bases:
- Contract — processing necessary to enter into or perform an agreement with you or your organisation.
- Legitimate interests — operating, securing, improving and promoting a business software service, provided those interests are not overridden by your rights.
- Legal obligation — processing required by accounting, tax, security or other applicable laws.
- Consent — where consent is required, such as for certain optional cookies or marketing activities. Consent may be withdrawn at any time.
Where DealMotion acts as a data processor, we process personal data on the documented instructions of the relevant business customer.
7. AI-enabled features
Where a customer enables AI functionality, DealMotion may process selected customer content or integration data to generate summaries, classifications, drafts, analyses or recommendations.
AI output may be incomplete or inaccurate and should be reviewed by an authorised human before it is relied upon or used to make decisions. Customers should not submit special categories of personal data or other highly sensitive information to an AI feature unless the feature and the customer's agreement expressly permit it.
We may use approved service providers to operate AI functionality. Such providers may process data only as necessary to provide the service and subject to applicable contractual safeguards.
8. Sharing of personal data
We may disclose personal data to:
- the business customer that controls your DealMotion account;
- authorised users within the relevant organisation;
- cloud hosting, infrastructure, communications, payment, support, analytics and security providers;
- integration and AI service providers where the relevant feature is enabled;
- professional advisers, auditors and insurers;
- public authorities where disclosure is legally required; and
- a buyer, investor or successor in connection with a merger, financing, restructuring or sale of all or part of the business.
Service providers may process personal data only for the agreed purposes and under appropriate contractual obligations.
We do not sell personal data.
9. International transfers
Personal data may be processed in Norway, the European Economic Area and other countries where our approved service providers operate.
Where personal data is transferred outside the European Economic Area, we use an applicable lawful transfer mechanism, such as an adequacy decision, the European Commission's standard contractual clauses, or another legally recognised safeguard.
10. Data retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, including to provide the service, comply with legal obligations, resolve disputes and enforce agreements.
In general:
- account and organisation data is retained while the account or customer relationship is active;
- customer content is retained according to the customer's instructions and subscription agreement;
- billing and accounting information is retained for the period required by applicable law;
- security and technical logs are retained for a limited period appropriate to their purpose; and
- data in backups may remain until the relevant backup is overwritten or expires under our backup schedule.
When an account is terminated or data is deleted, we remove the data from active systems without undue delay, subject to technical backup cycles, legal retention duties and any data that must be retained to establish or defend legal claims.
11. Data security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or access.
These measures are reviewed and updated based on the nature of the data, the available technology, the risks involved and applicable contractual and legal requirements. No system can be guaranteed to be completely secure.
12. Your rights
Subject to applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request deletion of your data;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain data in a portable format;
- withdraw consent where processing is based on consent; and
- complain to a competent data protection authority.
In Norway, the supervisory authority is Datatilsynet.
Where your data is controlled by a DealMotion business customer, we may refer your request to that customer or assist the customer in responding.
13. How to request deletion of your data
You may request deletion of personal data held by DealMotion by following these steps:
- Send an email to privacy@dealmotion.app.
- Use the subject line "Data Deletion Request" or "Meta Data Deletion Request".
- State: your name; the email address associated with your DealMotion account; the name of the DealMotion organisation you belong to; and whether the request concerns your full DealMotion account, Meta Platform Data, or specific records.
- We may ask for reasonable information to verify your identity and authority.
- We will confirm receipt and process the request without undue delay, subject to applicable legal obligations and any rights of the business customer that controls the data.
You may also disconnect a connected Meta integration through the integration settings where that functionality is available. Disconnecting stops future collection through that connection. To request deletion of previously imported Meta Platform Data, follow the email procedure above unless DealMotion provides an in-product deletion option.
Meta Platform Data will be deleted when required by Meta's Platform Terms, including following a valid user request, a relevant deauthorisation event or deletion of the associated DealMotion account, unless applicable law requires or permits retention.
14. Cookies
DealMotion may use cookies and similar technologies that are necessary for authentication, security, preferences and operation of the service.
Optional analytics or marketing technologies will be used only where permitted by law and, where required, after consent has been obtained. Further information may be provided in a separate cookie notice.
15. Children
DealMotion is a business service and is not directed to children. Users must be legally capable of representing the business for which they use the service.
16. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to DealMotion, our integrations, legal requirements or privacy practices.
The current version will be published at the same public URL with a revised effective date. We will provide additional notice where required by law or where changes are material.
17. Contact
Questions, requests or complaints concerning privacy may be sent to Webman AS / DealMotion, Russervegen 7, 7652 Verdal, Norway. Organisation number 925 655 864.
Email: privacy@dealmotion.app