How Shield handles information

Controller and contact

Dealport operates Shield and is responsible for deciding how Shield information is used. For privacy questions or requests, contact support@dealport.com.

Information we publish

Public profiles may show business name, location, industry, website, public business phone, business summary, and source dates. We do not intentionally publish private owner contact information, Dealport scores, customer identities, internal notes, or financial estimates.

Information we collect

We collect the information needed to verify owners and senders, process profile corrections or removals, apply message preferences, prevent abuse, and operate the service. Provider events and security logs are retained only for documented operational, compliance, and dispute purposes.

If a verified owner enrolls in Shield by Text, Shield stores the mobile number in encrypted form, a keyed lookup hash, consent and opt-out history, transactional text content, delivery state, and limited provider identifiers needed to operate and secure the program. Shield does not sell or share a mobile number or SMS consent with third parties for their marketing, and does not use the number for invitation or promotional campaigns.

Developer billing

For developer subscriptions, Shield stores the account name and email address, opaque Stripe customer and subscription identifiers, entitlement state, API-key hashes, and metered usage. Stripe processes payment-card details, invoices, and billing changes. Shield does not store full payment-card numbers or raw Stripe webhook payloads.

For x402 agent messages, Shield stores the submitted agent identity and reply address, message, owner-directed routing result, opaque receipt, Base network and amount, transaction identifier, and cryptographic hashes needed for idempotency and reconciliation. Shield does not expose the owner’s private email to the payer and does not store wallet private keys.

Where business information comes from

Profile facts come from approved public records, public business websites and directories, and other business-information sources reviewed by Dealport. Shield receives only the limited, provenance-bearing projection approved for the public profile; it does not read Dealport customer, buyer, scoring, financial-estimate, or internal-note data at request time.

Retention

Unclaimed messages expire after 90 days. Message content and sender identity are deleted 180 days after a terminal delivery, digest, rejection, or expiry. Processed raw provider payloads are redacted after 90 days. Resolved ownership, correction, and takedown evidence is deleted after 730 days unless it remains tied to an active ownership link, dispute, or documented legal hold. Expired one-time tokens and encrypted sign-in destinations are deleted seven days after expiry.

Shield by Text message content and encrypted delivery destinations are removed after 90 days, expired verification challenges after seven days, and revoked phone bindings after 730 days, unless a documented legal hold or active dispute requires limited preservation. Consent and suppression evidence may be retained as needed to prove that messaging stopped.

Service providers and choices

Shield may use hosting, database, email, identity, payment, abuse-prevention, outreach, classification, and telecommunications providers, including Telnyx for owner-requested SMS. Information is limited to what each approved function requires. Verified owners can correct or remove a profile, manage Shield message preferences, disconnect a phone, or reply STOP at any time. Developer subscribers can manage billing through Stripe’s customer portal.

Security and your requests

Shield uses encryption in transit and at rest, access controls, least-privilege credentials, and audited administrative actions. You may request access to, correction of, or deletion of information associated with you. Use the correction or removal link on the relevant business profile, contact the address above, or visit Support. Shield may retain limited records when needed for an active dispute, security incident, legal hold, or other obligation approved during compliance review.