Privacy Policy

1. About this policy

DeepSignal ("DeepSignal", "we", "us") designs, builds, and operates a portfolio of web applications. This Privacy Policy explains what personal information we collect, why we collect it, how we protect it, and how you can have it removed.

It applies to every product and service we operate, including this website. Where a particular product has additional practices of its own, those are disclosed inside that product. Nothing in a product-level notice overrides the commitments made here.

DeepSignal is an independent team. Questions about this policy, and requests about your information, go to support@deepsignalai.org.

2. Information we collect

Account information. If you create an account in one of our products, we collect your email address and display name. If you sign in through a third-party provider, we receive them from that provider instead; Section 3 sets out exactly what we receive and what we do with it.

Usage data. Which features you use, how often, and how you move through a product. We use it to see which parts are working and which are not.

Device and connection information. Browser type, operating system, screen size, and IP address. Used for compatibility, security, and abuse prevention.

Content you submit. Files, text, and settings you provide in order to use a product's features. We process it to deliver the feature you asked for.

Payment information. Handled entirely by third-party payment processors. We never receive or store full card numbers; we keep only a transaction record and the billing details needed for invoicing and support.

3. Third-party sign-in

Some of our products let you create an account through a third-party sign-in provider instead of choosing a password. That means one fewer password to invent and remember, and it is the whole of what it does.

The five disclosures below cover what we access, how we use it, who we share it with, how we protect it, and how long we keep it and how you can delete it. They apply to every provider we offer, now or in future.

3.1 What we access

We request only the provider's basic profile scopes:

• a unique identifier for your account with that provider
• your email address, and whether the provider has verified it
• your name and your profile picture

That is the entire list. We do not request, and cannot access, your mail, your files, your calendar, your contacts, or any other service the provider operates. The permission we hold is the minimum needed to know who you are.

3.2 How we use it

Solely to:

• create your DeepSignal account
• authenticate you when you return
• display your name and picture in the product interface
• send transactional messages such as receipts, security alerts, and support replies

We use data from a sign-in provider for no other purpose.

3.3 Who we share it with

We do not sell data received from a sign-in provider. We do not share it with advertisers or data brokers.

We share it only with service providers who process data on our behalf in order to run our products, such as hosting and email delivery, and only as far as is necessary for them to perform that service, under contractual confidentiality obligations.

We may also disclose it where the law requires it, or where it is necessary to investigate abuse, fraud, or a threat to the safety of our users.

3.4 How we protect it

Encrypted in transit using TLS, and encrypted at rest. Access by our people is restricted to what is necessary to operate the service, investigate a security issue, or answer a support request you have made.

3.5 How long we keep it, and how to delete it

We keep your account information for as long as your account remains active.

You can request deletion at any time by emailing support@deepsignalai.org from the address associated with your account. We will acknowledge the request, delete your account and the associated personal data from our production systems within 30 days, and confirm when it is done. You do not need to give a reason. Residual copies in encrypted backups are removed on our normal backup rotation, within 90 days.

You can also revoke our access at any time from your account settings with the sign-in provider itself, without asking us. That stops future sign-ins; it does not by itself delete your DeepSignal account, which the request above handles.

4. Limited use of sign-in data

Data we receive from a sign-in provider is subject to four limits. They hold for every provider, whether or not that provider requires them of us.

1. User-facing features only. We use sign-in data only to provide and improve user-facing features that are prominent in the product's interface, namely account creation, sign-in, and identity display.
2. No unauthorized transfers. We do not transfer sign-in data except as necessary to provide or improve those features, for security purposes, or to comply with applicable law. In the event of a merger or acquisition, we will obtain explicit prior consent before any transfer.
3. No human access. We do not allow our people to read sign-in data, except where you have given affirmative agreement for specific data, where it is necessary for security purposes or to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.
4. No advertising or lending use. We do not transfer or sell sign-in data to advertising platforms or data brokers, we do not use it to serve advertisements of any kind, including retargeting, personalized, or interest-based advertising, and we do not use it for lending or creditworthiness purposes.

Where a sign-in provider publishes its own requirements for handling the data it passes us, we comply with those as well.

5. Artificial intelligence and machine learning

Several DeepSignal products use AI and machine learning models to deliver their features.

We explicitly affirm that data obtained through third-party sign-in, or through any third-party productivity API, is not used to develop, improve, or train non-personalized AI and/or ML models.

More broadly, we do not use data received from any sign-in provider to train, develop, or improve generalized AI or machine learning models, whether our own or a third party's.

6. Uses we prohibit

We do not, under any circumstances, use personal information, including anything received from a sign-in provider, for:

• targeted, personalized, interest-based, or retargeted advertising
• sale or transfer to data brokers or advertising platforms
• credit assessment, credit scoring, or lending decisions
• training generalized AI or machine learning models

7. Cookies and local storage

We use cookies and browser local storage to keep you signed in, remember your preferences, and understand aggregate usage. We do not use advertising or cross-site tracking cookies. You can clear or block them in your browser at any time; blocking them entirely will stop sign-in from working, since a cookie is how a session is held.

8. Data security

Information is encrypted in transit using TLS, and encrypted at rest. Access to production systems is limited to the people who need it, and we update dependencies and security patches on a regular schedule. No system is perfectly secure. If a breach affects your personal information, we will notify you and any required authority without undue delay.

9. Children's privacy

Our products are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email support@deepsignalai.org and we will delete it.

10. International data transfers

Our products are available worldwide, and information may be processed in a country other than the one you live in. Wherever it is processed, it remains subject to this policy and to appropriate safeguards.

11. Changes to this policy

We may update this policy as our products change. We will update the "Last updated" date above, and for material changes affecting how we handle sign-in data we will give clearer notice. We will not begin using sign-in data in a new way, or for a new purpose, before updating this policy.

12. Contact us

Email support@deepsignalai.org with any question or request about this policy, including access, correction, or deletion of your information. We aim to reply within two business days.