Privacy Policy

1. Who We Are

This Privacy Policy explains how New Negotiator LLC, a California limited liability company (“New Negotiator,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you visit newnegotiator.com, use our companion tools for The New Negotiator: Reaching Better Deals in the Age of AI, or otherwise interact with us (together, the “Services”).

The Services include our deal workspace and negotiation tools, such as Deal Overview, Deal Elements, the BATNA Evaluator, the SWOT Board, Calendar, Deal Brief, Adversary Mode, the Advisor and Adversary chats, the Copilot assistant, voice practice, and Ask Lew, offered on Free, Pro, and Ultra plans. By using the Services, you acknowledge the practices described in this policy. If you do not agree, please do not use the Services.

This policy does not cover third-party websites or services that we link to, which are governed by their own privacy policies.

2. Information We Collect

We collect what you give us, what you enter about your deals, information from services you choose to connect, and limited technical information needed to run the Services. Our own systems do not collect your device or browser details, precise location, phone number, or date of birth. They do not keep your IP address, except that when you redeem a book access code, we use it for about an hour to limit repeated guessing of codes. Our sign-in and hosting providers also see IP addresses as part of providing their services.

Account information

• Account details: your email address, your name, and your password, or your Google identity if you sign in with Google. Your password and full name are held by Clerk, our sign-in provider; we store only your first name, and never your password. We also keep a member number and record when you confirmed that you are 18 or older and agreed to our Terms and acknowledged this policy, and which versions.
• Optional profile: your firm, your role, and your own DISC personality self-assessment if you choose to complete it.
• Subscription information: payments are processed by Stripe, LLC (“Stripe”). Your card number and other payment details are entered directly into Stripe’s secure payment form embedded on our site and go to Stripe, not to us. We keep only your Stripe customer and subscription IDs, your plan, its status and renewal date, and a record of changes to your subscription. You manage your subscription, invoices, and saved payment methods through Stripe’s secure customer portal, linked from your account page.
• Book access codes: if you redeem a code from the book, we record that you redeemed it and when.
• Communications: messages, feedback, and requests you send us.

Deal content

• Deal details: such as the deal title, counterparty name, counterparty website and LinkedIn profile link, location, context, goals, deadlines, each side’s terms and positions, walk-away points, negotiation rounds and notes, interests, outcome, deal value, reflections, report cards, and lessons.
• Tool work: what you enter into each tool (such as SWOT, BATNA, power analysis, bad-faith flags, deal briefs, market and macro briefs, proposal evaluations, and drafts) and the output the tools generate.
• Uploaded files: stored privately and available only to you. For documents, we extract the text on our own servers. The first time an AI feature uses a document, we also create and keep an AI-generated summary of it. Images, such as maps, are stored and shown back to you only; we do not read text from them or send them to AI providers.
• AI conversations: Advisor and Adversary chats are saved word for word with your deal. Chats with the in-app Copilot assistant are kept only in your browser tab and are cleared when you close it.
• Voice practice: your microphone is used only during a live practice session. The audio is sent to our AI provider to run the session and is not stored. A transcript is saved only if you choose “Save to my files.”

We treat your deal content as confidential. Even so, please enter only information you have the right to use, and we recommend that you do not enter attorney-client privileged material, information you are contractually barred from sharing with service providers, or sensitive personal information about yourself or others (such as government identification numbers, financial account numbers, or health information).

Information about other people

Deal content often includes information about people who do not use the Services, such as a counterparty’s name, LinkedIn profile, role, priorities, constraints, past behavior, and your DISC read of their personality. When you run counterparty research, our AI provider searches the public web and returns news, people, and roles with source links, which we save with your deal. Proposal review, the Advisor chat, and the Copilot assistant can also search the public web using deal details. We use this information only to provide the Services to you, we do not use it for any other purpose, and we do not contact the people involved. You are responsible for entering information about others lawfully, as our Terms of Service require.

Calendar information

If you connect Google Calendar or Microsoft Outlook:

• What we receive: your Google or Microsoft account ID, the permissions you granted, and access tokens. We store the tokens encrypted. For Google we request only the openid, email, and calendar.events permissions. For Microsoft we request openid, email, profile, offline_access, and Calendars.ReadWrite.
• What we read: only the ID, title, and start time of events on your primary calendar for the month you are viewing, so we can show them in the app’s calendar. These events are not stored in our database and are never sent to AI providers. Your browser holds them for up to 5 minutes.
• What we write: only events you ask for. When you choose “Add to Google Calendar” or “Add to Microsoft Outlook” on a deal’s deadline, we create an all-day event and update or remove it when the deadline changes. When you schedule a checkpoint from the app’s calendar, we create, update, and delete that event (title, time, location, and notes) as you change it. The Copilot assistant can create, change, or delete an event only after you approve each change.
• Disconnecting: you can disconnect in Account Settings under Calendars. For Google, this revokes our access at Google and deletes your tokens. For Outlook, it deletes your tokens and links you to your Microsoft account’s app permissions, where you can remove our access. You can also revoke access from your Google or Microsoft account at any time. Events we already wrote stay on your calendar.
• Staying connected: while you are connected, we refresh access in the background so the connection keeps working, and remove the connection if you revoke access.

Google user data. New Negotiator’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to provide the calendar features described above. We do not sell it, use it for advertising, send it to AI providers, or use it to train AI models. No person at New Negotiator reads it except with your consent, when needed for security, or as required by law.

Usage information

• Usage counters: weekly AI usage and monthly download volume, tied to an internal user ID with no email or content, used to apply your plan’s limits. They expire automatically after 10 and 40 days.
• Server logs: our hosting provider keeps server logs, for a short time, that mainly contain internal IDs. When an AI step fails, the logs can also include excerpts of the AI output, details of the Copilot action, or file names, so we can fix the problem.

3. How We Use Information

We use personal information to provide, improve, and protect the Services. Specifically, we use it to:

• Operate the Services, including generating briefs, analyses, simulations, and other output from your deal content.
• Create and manage accounts, apply plan limits, and process subscriptions.
• Sync deadlines and checkpoints with a calendar you connect.
• Respond to inquiries and provide customer support.
• Send service messages, such as sign-up verification, new-device sign-in alerts, password resets, and notices about your subscription. We do not currently send marketing email; if we start, you will be able to opt out at any time.
• Fix problems and improve features.
• Detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms.
• Comply with legal obligations and enforce our rights.

How AI processing works. Our AI features send information to our AI provider, OpenAI, only when you run an AI feature: a tool, an Advisor or Adversary chat, the Copilot assistant, or voice practice. Nothing is sent automatically, and no background job, upload, or scheduled task calls the AI provider. Depending on the feature, we send deal details (including counterparty names, links, location, and, in some tools, your DISC read of the counterparty), the text of uploaded documents (never uploaded images), chat messages, proposals and drafts, and voice audio during practice. Some features (counterparty and market research, proposal review, the Advisor chat, and the Copilot assistant) let our AI provider search the public web using deal details such as counterparty names and links. We never send your own email, name, firm, role, or self-assessment, or events from your Google or Microsoft calendar. The Copilot assistant can read the checkpoints and deadlines you create in the app. OpenAI processes this content on our behalf under its API business terms. It does not use that content to train its models, and it may keep it for up to 30 days to monitor for abuse before deleting it. If we change or add AI providers, we will update this policy first.

We never sell your deal content, and we never use it to train AI models, ours or anyone else’s. We may review aggregated or de-identified usage information to improve the Services.

Ask Lew and lawyer confidentiality. Ask Lew answers are generated by AI, and Lewis G. Feldman does not personally read Ask Lew questions. New Negotiator LLC is not a law firm. Mr. Feldman and Feldman Law Group LLP will have no duty, as lawyers, to keep confidential what you submit through the Services, though New Negotiator LLC protects it as described in this policy. See Section 6 of our Terms of Service.

4. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only as described below.

• Service providers. Companies that help us run the Services, listed in the table below. They may use personal information only to perform services for us.
• Contractors. Individuals and entities who develop and maintain the Services for us, bound by confidentiality obligations.
• Legal and safety reasons. When we believe disclosure is required by law, subpoena, or court order, or is needed to protect the rights, property, or safety of New Negotiator, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred to the successor, subject to this policy.
• At your direction. For example, when you connect your calendar. Documents you download as PDFs are yours to send wherever you choose.

We also download public market data from sources such as Kalshi, Polymarket, Yahoo Finance, and FRED. Those sources receive no information about you.

Payment processing by Stripe. When you make a purchase, Stripe collects your payment information and related transaction data on our behalf, which can include your name, email address, billing address, payment card or bank details, purchase amount and date, and information about your device and browser. Stripe processes this information as our service provider to complete your transaction, authenticate you, handle refunds and disputes, and meet its legal obligations. As part of that process, Stripe may share fraud risk signals, such as your IP address and email address, with your card-issuing bank. Stripe also uses payment data across its network for its own purposes, including preventing fraud, verifying identity, and complying with financial laws. Stripe’s handling of your information is governed by the Stripe Privacy Policy, with more detail in the Stripe Privacy Center. If you choose to save your payment details with Link, Stripe’s optional checkout service, that service is provided to you directly under the Link Privacy Policy.

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. Cookies and Browser Storage

We use only what the Services need to work. We do not use analytics, advertising, tracking pixels, or cross-site tracking cookies. If we ever add analytics, we will update this policy before they go live.

• Sign-in cookies from Clerk keep you signed in. They are strictly necessary.
• Security cookies: two short-lived cookies (10 minutes) protect the process of connecting a calendar.
• Local storage in your browser holds interface preferences only, such as theme, last tab, dismissed banners, panel layout, and voice choice.
• Session storage, cleared when you close the tab, holds your Copilot chat (up to 50 messages) and short caches of your calendar and dashboard (up to 5 minutes).

Payment cookies. Stripe sets its own cookies and collects device signals on our payment pages to process payments securely and detect fraud, as described in the Stripe Cookie Policy.

You can block or delete cookies through your browser settings, though the Services will not work without the sign-in cookies.

Do Not Track and Global Privacy Control. Browsers do not share a common standard for Do Not Track signals, so we do not respond to them. We honor Global Privacy Control (GPC) signals as a valid request to opt out of any sale or sharing of personal information, as required by California law.

6. Retention, Security, Children, and International Users

Retention. We keep your account and deal content until you delete it or close your account; deal content has no automatic expiry. If no one signs in to a free account for 12 consecutive months, we may close it and delete its data after emailing you at least 30 days in advance. Usage counters expire automatically after 10 or 40 days.

Deleting your account. The Delete account button in Account Settings cancels your Stripe subscription, deletes your uploaded files, deletes your calendar connections and every record tied to your account (deals, tool work, chats, documents, billing records, and report cards), and deletes your sign-in account at Clerk. Backup copies expire within 7 days. A few records remain after deletion:

• Stripe: Stripe keeps your customer record, payment history, and saved payment methods for tax, accounting, and dispute purposes under its own policy.
• Your calendar: events we created stay on your Google or Outlook calendar until you remove them.
• Access codes: the record that a book access code was redeemed remains, with the link to you removed.
• Provider logs: Clerk, Vercel, and OpenAI may keep logs under their own policies; OpenAI keeps AI content for up to 30 days.
• Legal holds: we keep records longer when the law requires it.

Security. We use reasonable administrative, technical, and physical safeguards. Data is encrypted in transit (HTTPS) and stored with providers that encrypt it at rest, and we add our own encryption (AES-256-GCM) to calendar access tokens. Uploaded files are stored privately and can be downloaded only by their owner, every request checks that you own the record you are accessing, and sign-in is protected by bot checks, email codes for new devices, and lockout after failed attempts. No method of transmission or storage is completely secure. Please use a strong, unique password and tell us promptly if you suspect unauthorized access to your account.

Children. The Services are intended for adults 18 and older and are not directed to children. Everyone confirms at sign-up that they are 18 or older; we do not collect dates of birth. If we learn that someone under 18 has given us personal information, we will delete it. If you believe this has happened, please contact us.

International users. New Negotiator is based in the United States, and we process and store information in the United States. If you use the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

7. Your Privacy Rights

You can update your account information, unsubscribe from marketing email, or delete saved tool content at any time. Residents of California and certain other states have additional rights, described below. We extend these rights to all users regardless of where they live.

Categories of personal information. In the past 12 months, we have collected the following categories of personal information, as defined by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”):

The only sensitive personal information we collect is your account login credentials, which Clerk holds to sign you in. We use them only for purposes the CCPA permits, and we do not use any information to infer characteristics about you beyond the personality assessments you choose to record.

Your rights. Subject to legal exceptions, you may:

1. Know and access the personal information we have collected about you and how we use and disclose it.
2. Delete personal information we collected from you.
3. Correct inaccurate personal information.
4. Opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, but GPC signals will be honored if that ever changes.
5. Limit use of sensitive personal information. We do not use sensitive personal information beyond what the CCPA permits.
6. Not be discriminated against for exercising any of these rights.

How to make a request. Email us at privacy@newnegotiator.com with the subject line “Privacy Request.” We will confirm receipt within 10 business days and respond within 45 days, which we may extend once by another 45 days with notice. We will verify your identity by matching information you provide with information in our records, typically your account email. You may use an authorized agent, who must provide your signed written permission; we may still ask you to verify your identity directly.

Shine the Light. California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

8. Changes and Contact

We may update this Privacy Policy at any time by posting the revised policy on the Services with a new effective date. Changes take effect when posted, and your continued use of the Services after that means you accept the updated policy. If we ever want to use personal information we have already collected in a materially different way, we will ask for your consent where the law requires it.

If you have questions about this policy or our privacy practices, contact us at: