Security practices
Plain-English explanation of how Deal Clarity protects your account, your payment, and the documents you upload. We do not hold SOC 2, ISO 27001, or PCI certifications, and we will not claim otherwise.
Account security
- Sign-in is handled by our authentication provider. We never see or store your password.
- Email confirmation is required before an account is active.
- You can delete your account and its data from your account settings.
Payment processing
- Payments are processed by Stripe. Card numbers are entered on Stripe's checkout, not on our servers.
- We store only what is needed to know which review you purchased.
- Every purchase is one-time. Nothing renews automatically.
Document privacy
- Your quote is uploaded so the numbers on it can be read and organized into your review.
- Documents are stored privately and tied to your account, not shared publicly.
- We do not send your document to a dealership, and we do not sell your contact details.
Data access
- Access to your saved deals is restricted to your own account at the database level.
- A small number of staff can access data when required to investigate a support issue.
- Shared report links are read-only, contain no account or payment details, and can be turned off by you at any time.
Reporting a security concern
- If you believe you have found a security problem, email security@beforeyousign.app with the details.
- Please do not test against other people's accounts or data.
- We read every report and will confirm receipt by email.
Looking for how we protect your privacy and what we retain? See the privacy policy and data handling pages.