Effective September 2, 2026
Privacy Policy
Deal Est8 works by reading data you connect to it: your email, your calendar, your contacts, your text messages. This page says exactly what we do with that data, in plain language, and what we never do.
Who we are
Deal Est8 (dealest8.com and app.dealest8.com) is built and operated by AutoNest Labs, Detroit, Michigan. Questions about this policy go to staff@autonestlabs.com.
What we collect, and why
- Account information. Your name, email address, and password (or your Google sign-in identity). Used to sign you in and run your workspace.
- Email you connect (Gmail or Outlook). With your permission we read message headers and bodies to build your contact database, keep your inbox in sync, learn how you write so drafts sound like you, and let the resident AI answer questions about your correspondence. With your permission we also send email on your behalf, only when you approve a draft or turn on an automation you configured.
- Calendar you connect. Event titles and times, so the AI can tell you what is on your week and book appointments you ask for.
- Contacts, deals, tasks, notes, and properties you or the AI add to your workspace.
- Text messages and calls on a business phone number you provision through us (via our telephony provider, Telnyx), including inbound texts and the replies you approve.
- MLS listing data only when you connect your own MLS credentials, and only for your own use inside your workspace.
- Usage and diagnostic data. An activity log of actions taken in your workspace (by you or the AI), technical error reports, and basic page-view analytics on our website (page, referrer, campaign tag, and a non-identifying visit id; no advertising cookies).
Google user data: the Limited Use commitment
Deal Est8’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Gmail and Google Calendar data to provide the features you see in the app: building and syncing your contact database, drafting and sending messages you approve, learning your writing voice, and answering your questions about your own correspondence and schedule.
- We do not sell Google user data. We do not use it for advertising. We do not use it to train generalized AI or machine-learning models. The AI that reads your mail does so only to serve you, in your workspace, on your request.
- Humans at AutoNest Labs do not read your Google data except when you ask us to for support, when required by law, or for security investigation.
- We do not transfer Google user data to third parties except our processors listed below, as needed to provide the service, or as required by law.
Who processes data for us
We run on a small set of infrastructure providers, each bound by their own data-processing terms: Supabase (database and authentication), Railway (application hosting), Anthropic (the AI model that reads and drafts; requests are not used to train Anthropic’s models under our API terms), Telnyx (phone numbers, SMS, and calls), and Google or Microsoft (the mailbox and calendar you connect). We do not share your data with anyone else.
How we protect it
- Every workspace is isolated by row-level security in the database. A user can only ever read their own workspace’s rows, enforced at the database layer and covered by automated tests.
- OAuth tokens for your mailbox and calendar are encrypted at rest. Nobody at AutoNest Labs can see them.
- All traffic is encrypted in transit (TLS).
- The AI cannot send anything without passing your approval settings. By default every outbound message waits in your approval queue.
- Every action the AI takes is written to a permanent, per-workspace activity log you can read.
Text messaging and consent
Text messages sent through Deal Est8 are sent by you, the licensed professional, to your own contacts. You are responsible for having the consent required to text them. We honor opt-outs: a reply of STOP (or similar) blocks all further texts to that number, and quiet hours you configure are enforced by the system, not by the AI’s judgment.
Your control
- Disconnect any time. Removing a connected mailbox or calendar in Settings revokes our access; you can also revoke it from your Google or Microsoft account security page.
- Export. Your contacts and data came from your own accounts and belong to you. Ask and we will give you a full export.
- Delete. Email staff@autonestlabs.com from your account address and we will delete your workspace and all data in it, including synced email, within 30 days. Backups roll off within a further 30 days.
- Correct. Everything the AI infers about a contact is editable by you in the app.
Retention
We keep your workspace data for as long as your account is active. Synced email is retained so the AI can answer questions about your history; you can trigger deletion at any time as described above. Diagnostic logs are kept for 90 days.
Children
Deal Est8 is a business tool for licensed real estate professionals and is not directed at anyone under 18.
Changes
If this policy changes in a way that affects how we handle your data, we will email the address on your account before the change takes effect. The effective date at the top of this page always reflects the current version.