Privacy Policy

At Deep Fathom, we believe transparency about data collection and use is fundamental to building trust. This policy explains how we collect, use, share, and protect your personal information when you interact with our website and services.

1. Information We Collect

Information You Provide to Us

We collect personal information you voluntarily provide when you:

• Join our waitlist: Email address, name (if provided)
• Contact us: Name, email, company information, and your message
• Subscribe to communications: Email address and communication preferences

Information We Collect Automatically

When you visit our website, we automatically collect:

• Device and browser information: Device type, browser type and version, operating system
• Usage information: Pages visited, time spent, clicks, scrolling behavior
• Technical data: IP address, referrer URL, general location (country/region)

2. How We Use Your Information

Core Business Purposes

• Product development: Understanding user needs and improving our compliance platform
• Communication: Sending updates about Deep Fathom, responding to inquiries
• Website improvement: Analyzing usage patterns to enhance user experience
• Legal compliance: Meeting regulatory requirements in the defense and compliance sectors

Legal Basis for Processing

We process your personal information based on:

• Legitimate interests: Improving our services and communicating about our platform
• Consent: When you explicitly opt-in to marketing communications or cookies
• Contract performance: When necessary to provide requested services

3. Information Sharing

We Do NOT Sell Your Information

Deep Fathom does not sell, rent, or trade your personal information to third parties for marketing purposes.

Limited Sharing

We only share your information in these specific circumstances:

• Service providers: Analytics platforms (Google Analytics, PostHog) that help us understand website usage
• Communication tools: Email platforms (Typeform) for waitlist and inquiry management
• Legal requirements: When required by law or to protect our legal rights
• Business transfers: In the event of a merger or acquisition (with continued privacy protection)

4. Cookies and Tracking Technologies

Essential Cookies (Always Active)

• Cookie consent preferences: Remembers your cookie choices
• Session management: Maintains functionality during your visit

Analytics Cookies (Your Choice)

With your consent, we use:

• Google Analytics 4: Website traffic and user behavior analysis
• PostHog: Product analytics and user experience insights

Managing Your Cookie Preferences

You can change your cookie preferences by:

• Clearing your browser's local storage for deepfathom.ai
• Using your browser's cookie management settings
• The cookie consent banner will reappear for new choices

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Access controls and authentication systems
• Regular security assessments and updates
• Employee training on data protection practices

6. Data Retention

We retain personal information only as long as necessary:

• Waitlist information: Until our platform launches or you unsubscribe
• Contact inquiries: 3 years from last interaction
• Analytics data: 26 months (Google Analytics default)
• Cookie consent: 1 year from your last choice

7. Your Privacy Rights

All Users

• Access: Request information about the personal data we hold about you
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from marketing communications

Additional Rights (EU/UK Residents - GDPR)

• Data portability: Receive your data in a machine-readable format
• Processing restriction: Limit how we process your information
• Object to processing: Object to processing based on legitimate interests
• Lodge complaints: Contact your local data protection authority

Additional Rights (California Residents - CCPA/CPRA)

• Know: Categories and specific pieces of personal information collected
• Delete: Request deletion of personal information
• Opt-out: Opt out of the "sale" of personal information (we don't sell)
• Non-discrimination: Equal service regardless of privacy choices

Exercising Your Rights

To exercise any of these rights, contact us at privacy@deepfathom.ai. We'll respond within 30 days and may need to verify your identity for security purposes.

8. Children's Privacy

Deep Fathom's services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it immediately.

9. International Data Transfers

We are based in the United States. If you are located outside the US, your information may be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction. We implement appropriate safeguards for international transfers.

10. Changes to This Policy

We may update this privacy policy periodically. Material changes will be communicated through:

• Email notification to waitlist subscribers
• Prominent notice on our website
• Updated "Last Modified" date below

11. Contact Us

For questions about this privacy policy or our data practices: