Privacy, in plain language.

Who is responsible for your data

The data controller for information processed by DealForge is Nikah AI Ltd, of Office 1216, 60 Tottenham Court Road, Fitzrovia, London, W1T 2EW, United Kingdom (company number 17199968). Its data-protection registration is ZC176381. A product brand name on its own is not a valid controller identity under UK GDPR Article 13 — the values above must be confirmed before this page can be treated as a complete privacy notice.

Information used to operate DealForge

DealForge processes account details, workspace membership information, deal setup details, and the records a customer chooses to upload or enter into a diligence workflow. This can include confidential business information and, depending on customer use, information about individuals.

How the information is used

The product uses this information to authenticate users, organize deal workspaces, process uploads, support evidence review, generate product workflow outputs, maintain the application, and respond to customer requests. This draft does not make a claim about using uploaded customer data for unrelated model training; that statement requires documented configuration and legal confirmation before publication.

Lawful basis for processing

Account, workspace, and deal-record processing described above is necessary to perform our contract with you (Article 6(1)(b)) or, for prospective users and general service administration, our legitimate interest in operating and securing the product (Article 6(1)(f)). Analytics processing only happens after you give consent on the cookie banner (Article 6(1)(a)); withdrawing consent stops it going forward. This draft does not yet map every processing purpose to a basis in a formal record of processing activities — that record should be completed as part of legal review.

Access and service providers

Access is intended to be limited to users assigned to the relevant workspace and deal, subject to the product controls described in the Trust Center. DealForge uses project services identified in the Trust Center; a contract-ready subprocessor schedule should be confirmed during customer contracting.

Cookies and analytics

The only analytics SDK loaded by this site is PostHog. It is switched off by default and is initialised only if you accept it on the banner. When you accept, PostHog sets a first-party cookie and a matching local-storage entry holding a randomly generated analytics identifier and session identifier, records a page view for each page you open, and autocaptures interactions such as clicks on links and buttons. Any utm_source, utm_medium and utm_campaign values from your arriving link are stored in session storage and attached, with your analytics identifiers, to a checkout link if you start a purchase.

If you reject, or have not answered, none of that runs: no PostHog request is made and nothing is written to your device except the record of your own choice, which is strictly necessary. The session cookie used to keep you signed in is also strictly necessary and is not covered by the banner. You can change your mind at any time:

International transfers

When you consent to analytics, PostHog processes your data outside the UK/EEA (a US-hosted endpoint by default; see Cookies and analytics above). Other project services identified in the Trust Center may also process data outside your region. The transfer safeguard relied on for this is the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Deleting your account

You can delete your account and its data yourself from inside the product, without contacting us. The account deletion page is public and sets out exactly what is deleted, what is kept and why.

Retention and deletion

This draft does not state a universal retention period. Retention, deletion, and legal-hold handling should be defined for the relevant customer relationship and transaction. Contact the team to request the current process.

Your rights

Subject to applicable law, you can ask to access, correct, delete, or receive a copy of your personal data, and you can object to or ask us to restrict some processing. Analytics consent can be withdrawn at any time using the controls above, with no effect on your ability to use the product. To exercise a right, contact us using the details below. If you are not satisfied with the response, you can complain to the ICO or your local data-protection supervisory authority — our own registration status is ZC176381.

Questions and requests

For privacy questions, deletion requests, or requests for the current privacy documentation, contact info@nikah-ai.com. Do not include sensitive files, credentials, or transaction records in the email.