Gadabout Privacy Policy

Effective date: October 30, 2026 Last updated: October 30, 2026

Gadabout is currently in a limited pilot. We'll update this policy as features change.

Summary

Who we are. Park Axis LLC, doing business as Gadabout, makes DealMaker and SalesOS. These are business tools for beverage-alcohol suppliers and the independent sales agencies that work with them.
What we collect. Account details. The deals, contracts and signatures you create. Commission and depletion data a supplier loads. In SalesOS, the tax and bank details an agency provides so a supplier can pay it.
Who sees it. The other party to your deal, your teammates, a small number of Gadabout staff, and the service providers that run our apps. Nobody else, unless you send it or the law requires it.
What we don't do. We don't sell personal information or use it for targeted advertising. We don't use customer data to train AI models, and we don't allow our AI providers to do so.
Signed contracts are shared records. Both parties keep access. One party closing its account doesn't remove the other party's copy.
Your choices. You can see, correct, copy and ask us to delete your information, with limits for signed contracts and tax records.
Questions: privacy@gadabout.co

1. Who we are and what this policy covers

"Gadabout," "we," "us" and "our" mean Park Axis LLC, doing business as Gadabout.

This policy covers personal information we handle through:

DealMaker, where suppliers and agencies negotiate agent agreements and sign them electronically;
SalesOS, where a supplier imports signed terms and distributor depletion data, calculates commission statements, and runs an agency portal for tax details, bank details and Market Updates; and
our websites and emails.

Together these are the "Services."

The Services are for businesses. This policy is about the people who use them for a business, such as owners, employees and contractors of suppliers and agencies, and people named in the records they create.

Our Terms of Use govern your use of the Services. If the Terms and this policy conflict on how we handle personal information, this policy controls.

2. Our role

Data we decide how to use. We decide how to use account details, security and usage logs, support and feedback messages, website data, and the signing records we keep so signatures can be proven later.

Data we handle for customers. We handle other content on our customers' behalf and follow their instructions:

Deals, messages, contracts and retail account lists are handled for the parties to the deal.
Depletion data, commission statements and Market Updates are handled for the supplier, and for the agency as to what it submits.
An agency's W-9, tax ID and bank details are handled on behalf of the supplier the agency works with, so that supplier can pay the agency and meet its tax-reporting duties.

If your request is about content a customer controls, we may refer you to that customer and help it respond.

3. What we collect

Account information (both apps)

Work email address and password. Our authentication provider stores a hashed version of your password, never the plain text.
If you sign in to SalesOS with Google, your name and email address from Google.
Your name, job title, role (supplier or agency), company name, legal entity name and business address.
Your team membership and role, such as viewer, negotiator or signatory.

DealMaker

Deal terms: brand, market, territory, products and prices, commission, retainer, fees, bonuses, spend, every proposed version of those terms, and any note you attach.
Messages and notes: messages between the parties, and a supplier's internal notes and approvals. Internal notes and approvals are visible only on the supplier side.
Retail account lists: names, store IDs, addresses, license numbers, VIP numbers, chains and channels of retail accounts. These describe licensed businesses, not consumers.
Invitations: the invitee's email address, the brand, market, any note, and the proposed terms.
Contracts and signatures: the full contract text, both parties' legal names and addresses, and the signers. When you sign, we record the name you type, your title, the date and time, and your IP address. We don't collect drawn or image signatures.
Notices: termination or renewal notices, their dates and the reasons given.
Gigi conversations: what you type to Gigi, our in-app assistant, and its replies. See Section 7.
Feedback: your message, the page you were on, your browser details and, if you choose, a screenshot. A screenshot may show deal terms that were on your screen.
Connected AI assistants: if you connect an outside AI assistant to your account, a record of that authorization.
Email logs: which service emails we sent you and whether they were delivered.

SalesOS

Contracts from DealMaker: if a supplier connects the two apps, the signed contract, party names, signers' names, titles and signing times, all economic terms, retail account lists and the full contract text. This does not include email addresses, messages, internal notes or signers' IP addresses.
Depletion and sales data the supplier uploads or authorizes from distributors and other sources. It can include names of retail accounts and salespeople.
Commission statements we calculate, and the supplier's approvals and changes.
Agency profile: legal name, DBA, entity type, address, contact name, email and phone, and remit-to details.
W-9 and tax details, including the taxpayer identification number (SSN or EIN).
Bank details: bank name, account holder, account type, and routing and account numbers.
Other documents: proof of bank account and certificates of insurance.
Market Updates: reports an agency submits about its market, including account activity, numbers and photos, and who submitted or changed each one.
Sharing choices: which suppliers an agency has agreed to share its profile with.

Collected automatically

Technical data: IP address, browser and device details, collected as our hosting and authentication providers process requests.
Usage and error data: we may use basic, privacy-friendly usage and error analytics from our hosting provider. We don't use advertising trackers.

From other people

Others may give us information about you. A supplier may invite you or name your company in a deal. A teammate may add you to a team. A supplier may upload depletion data that names you. Whoever gives us information about someone else must have the right to do so. If you think someone shared your information when they shouldn't have, contact us.

What we don't collect

We don't knowingly collect information about consumers who buy beverages.
We don't collect payment card numbers. The Services are currently free.
DealMaker doesn't collect tax IDs or bank details. Only the SalesOS agency portal does.

4. How we use information

We use personal information to:

Run the Services: create accounts, support negotiation and signing, send signed contracts to SalesOS when a supplier connects it, calculate commission statements and run the agency portal.
Send service emails: sign-in, invitation, deal-activity, signature and notice emails. Deal-activity emails can include a summary of the latest terms and any note.
Keep reliable records: show who signed what and when, and preserve signed contracts for both parties.
Make payments possible: let a supplier pay an agency and meet its tax-reporting duties. We use tax IDs and bank details only for this and to meet legal requirements.
Power Gigi (Section 7).
Keep the Services secure: prevent fraud and misuse, investigate problems and log sensitive actions.
Support and improve the Services: answer support requests, read feedback, fix bugs, and study de-identified, aggregated usage data.
Comply with law and enforce our Terms.

We don't:

sell personal information;
share it for targeted or cross-context behavioral advertising;
use it for profiling that produces legal or similarly significant effects;
use customer data to train AI models; or
compare or benchmark one customer's depletion or commission data against other customers' data, unless that customer opts in.

5. Who can see your information

Inside a deal (DealMaker)

The other party. The supplier and the agency on a deal both see the deal terms, versions, messages and notices. The agency sees a contract once the supplier releases it for signature. Each party sees the other's name, company, the details on the contract, and how and when each side signed.
Your teammates. Everyone on a supplier's brand team, including viewers, can see that brand's deals. Supplier teammates also see internal notes and approvals. The agency never sees those.
Invitees. Anyone with an invitation link can see the invited email, the brand, market, any note, and the inviter's name and company.
People you send it to. A party, or a supplier's negotiator or signatory, can email a copy of a contract to any address. Once sent, it is outside our control, and the sender is responsible for that disclosure.
AI assistants you connect. An outside AI assistant you authorize can read your deals and profile. Its provider's terms then apply.

Inside SalesOS

From DealMaker. If a supplier connects SalesOS, signed contracts for its brands flow into its SalesOS account, as described in Section 3.
The supplier's team. Commission statements and Market Updates are visible to the supplier's users with the right access.
Agency tax and bank details are shared only with suppliers the agency has agreed to share with. Bank details are encrypted, with only the last four digits shown. Only authorized finance users at the supplier can view full details, and each view is logged.
Payouts. Gadabout doesn't pay anyone. The supplier pays agencies with its own tools. If a supplier exports a statement file into its own payroll or workforce tool, that tool is the supplier's own service.

Gadabout staff

A small number of authorized Gadabout administrators can see account, deal, contract, invitation and feedback data, including users' email addresses, and SalesOS company data, such as depletion data, statements and Market Updates. They use this access only to run, support and secure the Services. We log administrator access in DealMaker, and every reveal of full bank details.

Service providers

These are the companies that host and run the Services for us (Section 6).

Legal and safety reasons

We may share information when the law requires it, to respond to valid legal process, or to protect rights, safety or the Services. Where the law allows, we will tell the affected customer first.

Business changes

If Gadabout is part of a merger, acquisition or sale of assets, information may transfer to the new owner. The new owner must keep honoring this policy for that information.

6. Service providers

Each provider may use your information only to provide its service to us.

Database, authentication and file storage: Supabase, hosted on Amazon Web Services in the United States.
App hosting, email delivery and AI gateway: Lovable. Lovable hosts the apps, sends our service emails and routes Gigi requests to our AI model provider.
AI model provider for Gigi: OpenAI.
Web fonts: Google Fonts. When your browser loads our fonts, it sends your IP address and browser details to Google.

We will update this list before adding a provider that handles customer content.

7. Gigi and AI

What Gigi is. Gigi is an optional assistant in DealMaker. It answers questions about your deals and contracts.

What we send. When you use Gigi, we send your recent conversation, your name, role and company, the page you're on, and deal and contract details Gigi looks up for you. Gigi can only look up data you're already allowed to see.

How it's processed. Gigi requests go through our hosting provider's AI gateway to a third-party model provider, with provider-side storage turned off.

What we never send. SalesOS tax IDs, W-9s and bank details are never sent to Gigi or any AI model.

No training. We don't use customer data to train AI models, and we don't allow our AI providers to do so.

Your Gigi history. We store your Gigi conversations in your account so you can see past conversations. Only you can see them, apart from the administrator access described in Section 5.

Check the output. AI answers can be wrong. Gigi is not legal, tax or financial advice.

New AI uses. We will update this policy before adding new AI features or AI providers.

8. Cookies, local storage and Do Not Track

We don't use advertising cookies or cross-site tracking.
The apps use your browser's local storage to keep you signed in, save unsent drafts (such as a counter-proposal explanation) and remember simple settings. Clearing it signs you out and loses unsent drafts.
The only third-party content our pages load is Google Fonts (Section 6).
We don't track you across other websites, so there is nothing for a Do Not Track signal to switch off.

9. Security

We use reasonable safeguards suited to the sensitivity of the data, including:

database access rules, so users see only the records they are entitled to see;
encryption in transit (HTTPS);
encrypted bank details, with only the last four digits shown, viewable in full only by authorized finance users at the supplier, with each view logged; and
logging of administrator access in DealMaker.

No system is perfectly secure. If a security breach affects your personal information, we will notify you and regulators as the law requires.

Keep your password private. If you think your account has been misused, tell us right away at privacy@gadabout.co.

10. How long we keep information

Signed contracts and signing records: for the life of either party's account, plus 7 years. Both parties keep access. One party closing its account doesn't remove the other party's copy.
W-9s, tax IDs and bank details: 4 years after the last statement under the agency's relationship with that supplier, then deleted.
Everything else: deleted within 60 days after the account closes. This includes unsigned deals, messages, commission statements, depletion data, Market Updates, Gigi conversations and feedback.
Backups: purged within 90 days.
Security and access logs: kept only as long as needed to secure the Services and meet legal obligations.

We may keep information longer if the law requires it, or to resolve a dispute or enforce our agreements. When we no longer need information, we delete it or make it unreadable.

11. Your choices and rights

See and correct. You can see and update most account information in the app. Email us for anything you can't change yourself.

Get a copy. You can view, download or email a copy of each signed contract in the app. You can also ask us for a copy of the personal information we hold about you.

Delete. You can ask us to delete your account and personal information. We will, except for:

signed contracts and signing records, which the other party relies on. We keep them for the period in Section 10, use them only for record-keeping, legal and dispute purposes, and keep the other party's access;
tax records we keep for the period in Section 10; and
information we must keep by law or need to resolve disputes or prevent fraud.

Content a customer controls. If your request concerns content a supplier or agency controls (Section 2), we may pass it to that customer or ask you to contact them.

Emails. We send only service emails. We don't send marketing email without your agreement.

State privacy rights. Some US states give residents rights to access, correct, delete or port their data and to opt out of certain processing. We honor these rights where they apply. To appeal a decision, reply to it with the subject line "Privacy appeal." We won't treat you differently for using your rights.

How to make a request. Self-service export and deletion aren't available yet. Email privacy@gadabout.co from your account email address. We may need to verify your identity. We respond within 30 days.

This is our policy for protecting Social Security numbers, including as Connecticut law requires.

Why we collect them. SalesOS collects a taxpayer identification number, which may be a Social Security number, only through an agency's Form W-9. We use it only so the paying supplier can meet its tax-reporting duties, such as Form 1099.
Confidentiality. We protect the confidentiality of Social Security numbers, restrict access to them and never send them to AI services.
No unlawful disclosure. We don't sell, publish or display Social Security numbers, and we prohibit their unlawful disclosure. We share them only with the supplier the agency chose to share its W-9 with, and with service providers that host the data for us.
Limited access. Only authorized users at that supplier, and Gadabout staff who need access to run or secure the Services, can access W-9s.
Disposal. When we no longer need them, we delete them or make them unreadable.

13. Age and business use

The Services are for businesses in the beverage-alcohol trade. You must be at least 21 and using the Services for a business, not for personal, family or household purposes. The Services aren't directed to anyone under 21, and we don't knowingly collect information from anyone under 21. If we learn we have, we will delete it.

14. Changes to this policy

For a material change, we will notify account holders by email and in the app at least 30 days before it takes effect.
Minor changes, such as clarifications, take effect when posted, and we will update the "Last updated" date.
We will never apply a change retroactively to expand how we use information we have already collected.

15. Where we process information

We are a US company. We store and process information in the United States. The Services are meant for US businesses.

16. Contact us

Park Axis LLC, doing business as Gadabout 1825 Ponce de Leon Blvd, Suite 605 Coral Gables, FL 33134 Privacy requests: privacy@gadabout.co Legal notices: legal@gadabout.co