Privacy Policy for Underway

Effective Date: March 28, 2026

This Privacy Policy describes how the Dealflow by Underway Chrome Extension (the "Extension") collects, uses, and protects your information.

1. Information We Collect

The Extension does not track your general browsing activity. It is designed to operate seamlessly and securely within specific, authorized environments. When you interact with the Extension on supported real estate deal platforms (e.g., rcm1.com), the Extension explicitly collects and processes the following limited information:

Deal URLs: Links associated with virtual deal rooms, confidentiality agreements, or specific properties.
Deal Metadata: Property names and basic identification strings extracted directly from the deal list.
Progress State: Temporary status metadata (such as extraction progress, connection status, and error logs) relating to active Dealflow runs.

2. How We Use the Information

The information collected is used strictly to facilitate the automated real estate deal workflow. Specifically, it is used to:

Instruct the Dealflow Engine backend to securely retrieve documents from the specified Deal URL.
Automatically track your documents, format rent rolls, enrich financials, and push outputs to your RedIQ platform.
Provide a real-time progress dashboard directly within the browser interface.

We do not use your data for advertising, profiling, or direct marketing purposes.

3. Where Data is Sent

The Extension does not send your data to any centralized or public telemetry servers.

Data is only transmitted to your designated Dealflow Engine backend servers, which are configured via the Extension's settings (e.g., your local machine running at 127.0.0.1:5050 or your dedicated private Tailscale node). The Extension acts solely as an orchestrator and UX bridge between the supported deal websites and your dedicated Dealflow Engine backend.

4. Local Storage

The Extension uses local browser storage (chrome.storage.local) to save your configured backend connection preferences (e.g., Local vs Cloud/Tailscale server endpoints) and to track the real-time processing states of your active deals. This ensures you do not lose track of running tasks if you switch tabs or close the popup.

This data remains local to your browser profile.

5. Security and Sharing

Your data is directly sent from your browser to your specified backend server. We do not sell, rent, or trade your data. The extension relies on local connections and secure private routing (like Tailscale) as configured by your environment to ensure the transmitted URL and deal context remain secure.

6. Required Permissions

The Extension requires the following permissions to function:

activeTab: To safely access the current tab's URL (e.g., when manually kicking off a deal via the popup).
storage: To store dashboard states, active task logs, and server URL preferences.
host_permissions: To be able to monitor the DOM on rcm1.com to inject automated UX buttons, and to communicate with your specified backend APIs (localhost, tailscale networks, and supported private deployment URLs) without running into Cross-Origin Restrictions.

7. Contact Us

If you have any questions or concerns about this Privacy Policy or how the Dealflow Engine Runner extension handles your data, please contact the repository administrator or engineering team responsible for your Dealflow deployment.