Privacy Policy

1. Who We Are and What This Policy Covers

Howdy! We are the team behind Deep Web Technologies and the DEEP⌟ product (Deep Retrieval Infrastructure). We build and operate retrieval infrastructure API federations for enterprise AI applications. Our main website is located at deepwebtech.com.

This Privacy Policy applies to information that we collect about you when you use:

• Our website (deepwebtech.com);
• Our API endpoints and portal interfaces for the DEEP⌟ services;
• Our developer tools and connector libraries; and
• Your communications with us via email, support channels, and web forms.

Throughout this Privacy Policy, we'll refer to our website, APIs, and associated developer interfaces collectively as our "Services."

We've decided to make this Privacy Policy available under a Creative Commons Sharealike license, which means you are welcome to copy and repurpose it for your own use. Just make sure to revise the language to match your actual practices.

2. Information We Collect

We only collect information about you if we have a reason to do so — for example, to provide our Services, to communicate with you, or to make our Services better.

We collect this information from three sources: if and when you provide it to us, automatically through operating our Services, and from outside sources.

Information You Provide to Us

We collect information that you provide to us directly. For example:

• Contact Form Data: When you submit an enquiry through our contact form, we collect your name, email address, and the contents of your message.
• Developer Credentials and Configurations: If you build proprietary connector libraries or configure source connectors, you may provide connection credentials (such as API keys or access tokens) to authenticate against those federated sources.
• Communications with Us: When you email us, ask for support, or communicate with our engineering team, we store a copy of the communication.

Information We Collect Automatically

We also collect some information automatically when you visit our website or interact with our APIs:

• Log Information: Like most infrastructure providers, we log requests made to our servers. This includes the date/time of access, browser or client type, IP address (transiently for routing/security), and the requested endpoint.
• Aggregate Analytics: We collect anonymised metrics about how visitors navigate this website. We use a cookie-free, self-hosted analytics suite (Umami Analytics) that hashes IP addresses daily, meaning we store no personal identifiers or persistent tracking cookies on your device.

Information We Collect from Other Sources

If you connect your account or authenticate to external sources via our connectors, we may receive connection status codes and response schemas from those external directories or APIs as part of the query federation process.

3. How and Why We Use Information

We use the information we collect to operate and secure our Services. Specifically, we use your data:

• To respond to your messages and provide customer support;
• To monitor, secure, and maintain the performance of our federated search API; and
• To study aggregate, anonymised visitor behavior so we can optimize our website.

4. Sharing Information

We do not sell our users' or contacts' private personal information. We only share information in the limited circumstances spelled out below, with appropriate safeguards on your privacy:

• Subsidiaries and Independent Contractors: We may disclose information to our employees and contractors who need the information to help us run our Services. They are required to follow this Privacy Policy.
• Third-Party Vendors: We may share information with third-party vendors who need it to provide services to us (such as DigitalOcean for hosting infrastructure and Web3Forms for contact form intake). We ensure these processors commit to protecting your data.
• Legal Requests: We may disclose information in response to a subpoena, court order, or other governmental request, but only to the extent required to satisfy legal compliance.

5. How Long We Keep Information

We store personal information only for as long as we have a reason to keep it:

• Contact form submissions are kept for up to 24 months after our last communication, unless a continuing business relationship is established.
• Server log files are typically retained for 30 days to facilitate troubleshooting and security audits, after which they are deleted or anonymised.
• Anonymised analytics data contains no personal identifiers and is kept indefinitely.

6. Security

While no online service is 100% secure, we work hard to protect information about you against unauthorized access, use, alteration, or destruction. We monitor our Services for vulnerabilities, encrypt all communications via TLS, and host our systems in ISO 27001-certified data centres.

7. Choices

You can choose not to submit our contact form, in which case no personal contact details are collected. You can also contact us to request the deletion or correction of any communications we hold.

8. Your Rights (GDPR and CCPA)

If you are located in certain regions, such as the European Union (EEA), United Kingdom, or California, you have legal rights regarding your personal data. These include the right to access, rectify, delete, restrict processing, or obtain a portable copy of your data.

To exercise these rights, please email us at privacy@deepwebtech.com with the subject line "Data Subject Request". We will verify your identity and respond within 30 days.

9. Changes to This Policy

Although most changes are likely to be minor, we may change our Privacy Policy from time to time. We encourage visitors to check this page for any updates. Your continued use of this site after any change will constitute your acceptance of the new policy.