Privacy Policy

Introduction

At Deplora Inc. ("Deplora", "we", "us", or "our"), we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use our website at deplora.io and our services (collectively, the "Service").

By using our Service, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. This policy should be read alongside our Terms of Service.

1. Personal Data We Collect

We collect personal data in the following categories:

A. Information You Provide Directly

• Account Information: Name, email address, and password when you create an account
• Organization Information: Organization name, role, and team member details when you set up team accounts
• Payment Information: Billing address and payment method details for subscription services
• Communication Data: Messages, feedback, and support requests you send to us
• Profile Information: Optional profile details you choose to provide

B. Information We Collect Automatically

• Device Information: Device type, operating system, browser type and version, IP address
• Usage Data: Pages visited, time spent on pages, clicks, and navigation patterns on our website
• Service Usage: Deployment statistics, API usage patterns, and performance metrics for your deployments
• Log Data: Server logs, error reports, and diagnostic information
• Cookies and Tracking: Cookies, pixels, and similar technologies for functionality and analytics

C. Information We Do NOT Collect

2. How We Use Your Personal Data

We use your personal data for the following purposes:

Service Provision

• Provide and maintain the Deplora platform and infrastructure
• Deploy, manage, and monitor your AI models
• Process payments and manage your subscription
• Provide customer support and respond to your inquiries
• Send important service notifications and updates

Platform Improvement

• Analyze platform usage to improve performance and reliability
• Debug technical issues and improve our infrastructure
• Develop new features and enhance existing ones
• Monitor system health and prevent service disruptions

Security and Compliance

• Protect against fraud, abuse, and security threats
• Comply with legal obligations and regulatory requirements
• Enforce our Terms of Service and platform policies
• Investigate and resolve disputes

3. How We Share Your Personal Data

We may share your personal data in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our platform:

• Cloud Infrastructure: AWS, Google Cloud, and other cloud providers for hosting and infrastructure
• Payment Processing: Stripe for secure payment processing
• Analytics: Privacy-focused analytics tools to understand platform usage
• Support Tools: Customer support and communication platforms

These providers are contractually bound to protect your data and use it only for the specific services they provide to us.

Legal Requirements

We may disclose personal data when required by law, such as in response to court orders, legal processes, or to protect the rights and safety of our users and the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business transaction, subject to equivalent privacy protections.

4. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Account Data: Retained while your account is active and for up to 90 days after account deletion
• Billing Information: Retained for 7 years for accounting and tax compliance purposes
• Service Logs: Automatically deleted after 90 days unless needed for security investigations
• Support Communications: Retained for 3 years to improve our service quality
• Marketing Data: Deleted within 30 days of unsubscribing from communications

When data is no longer needed, we securely delete or anonymize it in accordance with industry best practices.

5. Security Measures

We implement comprehensive security measures to protect your personal data:

Technical Safeguards

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• Automated threat detection and monitoring
• Secure network architecture with firewalls and VPNs

Organizational Measures

• Employee privacy and security training
• Strict access controls and the principle of least privilege
• Regular security awareness programs
• Incident response procedures

While we implement robust security measures, no system is completely secure. We encourage you to use strong passwords and keep your account credentials confidential.

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data. These may include:

Data Access and Portability

• Request access to personal data we hold about you
• Receive a copy of your personal data in a portable format
• Export your account data and deployment configurations

Data Correction and Deletion

• Correct inaccurate personal data in your account
• Request deletion of your personal data (right to be forgotten)
• Delete your account and associated data

Control and Consent

• Object to certain types of data processing
• Withdraw consent where processing is based on consent
• Opt out of marketing communications at any time
• Restrict processing of your personal data in certain circumstances

7. International Data Transfers

Deplora operates globally, and we may transfer your personal data to countries outside your home country, including the United States, for the purposes described in this policy.

Data Protection Safeguards

• We use Standard Contractual Clauses approved by the European Commission for transfers from the EU/EEA
• All data transfers are protected by appropriate technical and organizational measures
• We ensure adequate levels of protection regardless of the destination country
• You can request more information about our transfer mechanisms by contacting us

8. Jurisdiction-Specific Rights

For EU/EEA Residents (GDPR)

Under the General Data Protection Regulation (GDPR), you have additional rights including the right to lodge a complaint with your local data protection authority if you believe we have processed your data unlawfully.

For California Residents (CCPA/CPRA)

California residents have specific privacy rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• No Sale of Personal Information: We do not sell or share your personal information for advertising purposes
• No Automated Decision-Making: We do not use automated decision-making that significantly affects you
• Sensitive Data: We do not process sensitive personal information for inferring characteristics about you

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email if you have an account with us
• Display a prominent notice on our website
• Provide a summary of key changes when appropriate

Your continued use of our Service after the effective date of the updated policy constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving privacy concerns promptly and transparently. We typically respond to privacy inquiries within 5 business days.