This Privacy Policy explains how CachePile ("Dealglance", "we", "us", or "our") handles information in connection with the Dealglance iOS, iPadOS, and macOS app and the website at dealglance.cachepile.io (together, the "Service").

The short version

check_circle Your CRM data (deals from HubSpot, Pipedrive, and/or Salesforce, whichever you connect) moves directly between your device and your CRM, and stays there. We do not store your CRM data on any server, not even briefly — the cache that keeps your widgets, menu bar, and Control Center actions in sync is local to your own device.
check_circle Your CRM login stays with your CRM provider. We never see your CRM password.
check_circle We use no third-party analytics, advertising, or tracking SDKs, and we do not sell your data or use it to train any AI model.
check_circle Our backend does three jobs, none of which touch your deal data: complete the secure CRM sign-in exchange, refresh your CRM connection's access token, and (not yet in use) validate Apple purchase receipts. Your subscription status is verified locally on your device using Apple's StoreKit.

Information we process

CRM deal data you authorize. When you connect a CRM (HubSpot, Pipedrive, and/or Salesforce), you approve Dealglance's access to that CRM's deals (read and write, plus — for HubSpot only — the specific additional scope needed to create Notes). The app reads this data live from your CRM to show it in the app, widgets, and macOS menu bar, and writes the changes you make (e.g. logging a note, call, or meeting, moving a stage). This data is processed on your device. A limited amount may be cached on your device (for example, to render a widget) so it can display without reopening the app.

On-device cache. So your widgets, macOS menu bar, and Control Center actions can stay in sync without each independently re-fetching from your CRM, the app keeps a brief local cache of the deal data it already fetched (deal names, stages, amounts, and similar metadata) in a container shared between Dealglance's own app, widget, and extensions on your device (Apple's "App Group"). This cache never leaves your device and is not visible to us. It refreshes automatically every few minutes and is cleared when you disconnect that CRM or delete the app.

Authorization tokens. To connect a CRM, Dealglance uses OAuth. The resulting access and refresh tokens are stored securely in your device's Keychain. During the initial sign-in and during token refresh, these tokens pass through our backend only long enough to complete the secure exchange with your CRM; they are held briefly in memory for a one-time hand-off to your device and are not written to a database by us.

Purchase information. Subscriptions are sold through Apple's In-App Purchase. Apple processes your payment; we never receive your card details. Your subscription status is verified locally on your device using Apple's StoreKit — we do not receive or process your purchase or transaction information on our servers.

Diagnostic and operational data. Our backend keeps minimal operational logs (such as timestamps, IP address, and error codes) to keep the Service secure and working. These logs do not contain your CRM deal content and are retained only for a short period. The app itself does not include third-party analytics or advertising trackers, so it does not ask for App Tracking Transparency permission.

How we use information

check_circle To connect your account to your CRM(s) and keep those connections working.
check_circle To show your deals and to perform the read/write actions you request.
check_circle To verify and manage your subscription.
check_circle To secure, debug, and maintain the Service.

What we do not do

check_circle We do not sell, rent, or share your personal information for advertising.
check_circle We do not use your data to train AI/ML models.
check_circle We do not store your CRM deal data on our servers at all — not durably, not briefly (see the on-device cache described above).

Service providers and third parties

We rely on a small number of providers to run the Service:

check_circle Your CRM (HubSpot, Pipedrive, and/or Salesforce) — whichever you connect; your deal data lives in your CRM account and is governed by that provider's own privacy terms.
check_circle Apple — App Store distribution and In-App Purchase billing.
check_circle Google Cloud Platform — hosts our backend (Cloud Run) and stores our CRM client secrets in Secret Manager. It does not receive your CRM login credentials, and does not store your deal data — the backend has no database for deal data of any kind.

Data retention

check_circle On your device: tokens and any cached deal data remain until you disconnect that CRM inside the app or delete the app.
check_circle On our backend: the temporary sign-in hand-off records are ephemeral and are deleted after they are claimed or expire. We hold no other record of your deal data at any point. Operational logs are kept for a short period and then deleted.

Your choices and rights

check_circle Disconnect anytime. Use the disconnect option in the app, and/or revoke Dealglance's access from your CRM account's connected-apps settings.
check_circle Delete your data. Deleting the app removes the stored connection and any cached data from your device. Because we do not store your CRM data, disconnecting and deleting the app removes it from Dealglance's control. To confirm deletion of any residual backend records associated with you, email dealglance@cachepile.io.
check_circle Depending on where you live (for example, under GDPR or the CCPA/CPRA), you may have rights to access, correct, delete, or restrict processing of your personal information. Contact us at dealglance@cachepile.io and we will respond as required by law.

Security

We use industry-standard protections, including TLS encryption in transit, secure Keychain storage on your device, secret management for our credentials, and least- privilege access scopes for whichever CRM(s) you connect. No method of transmission or storage is 100% secure, but we work to protect your information.

Children's privacy

Dealglance is a business tool intended for users aged 18 and older. It is not directed to children, and we do not knowingly collect personal information from children.

International users

We operate the Service from, and process limited data in, the United States and other locations where our providers operate. By using the Service you understand your information may be processed in those locations.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by notice in the app.

Contact

Questions or requests: dealglance@cachepile.io

*Dealglance is an independent app and is not affiliated with, endorsed by, or sponsored by HubSpot, Inc., Pipedrive Inc., or Salesforce, Inc. All trademarks are the property of their respective owners.*