Privacy Policy
This policy explains how DeepRit ("DeepRit", "we", "us") handles personal data when you use deeprit.com and app.deeprit.com. For the purposes of data protection law, we're the controller of your account data and the content you store in DeepRit. If you add other people's details to DeepRit, you're responsible for having the right to do so.
What we collect
Account details. Your email address, your name, and a securely hashed password. If you sign in with Google, we receive your name, email address and Google account identifier.
Your content. What you add and create: your profile, writers, data groups, files' text, web pages you import, notes, requests, documents, signatures, logos and generated images. Your profile can include details about you and your company, so please only add what you're comfortable storing.
Your AI key. On paid plans, the API key you add so that your requests can run on your own provider account. We use it only to send your requests to that provider.
Usage details. Token counts and estimated AI costs for your requests, shown to you in the app.
Technical details. Our servers and providers process IP addresses, browser details and request logs to deliver the Service, keep it secure and limit abuse.
Purchase details. If you buy a paid plan, Paddle collects your payment details as Merchant of Record. We never see your full card number. We receive details such as your name, email address, country, plan, order and subscription status.
What we don't do
We don't sell your personal data. We don't show ads. We don't use your content to train AI models of our own.
Why we use your data
| Purpose | Legal basis |
|---|---|
| Creating your account and running the Service you asked for | Performing our contract with you |
| Sending your request and relevant content to AI providers to generate results | Performing our contract with you |
| Keeping the Service secure, preventing abuse, and fixing faults | Our legitimate interest in a safe, working Service |
| Sending essential emails, such as confirming your address or resetting your password | Performing our contract with you |
| Billing, tax and accounting records | Legal obligation and our contract with you |
| Responding to you when you write to us | Our legitimate interest in giving support, or our contract with you |
Who processes your data
We share data only with the providers needed to run DeepRit:
| Provider | What it does | Data involved |
|---|---|---|
| Supabase | Sign-in, database and file storage | Account details and your stored content |
| OpenRouter | Routes AI requests to the model providers | Your request, and the relevant passages and profile facts |
| Generates text (through OpenRouter) | The same AI request data | |
| Black Forest Labs | Generates images (through OpenRouter) | An image description, which can include part of your post, your image preferences and brand colors. Your logo isn't sent. |
| Google Sign-In | Lets you sign in with Google, if you choose to | Your Google account details |
| Paddle | Merchant of Record for payments, tax and refunds | Purchase details, under Paddle's privacy policy |
| Our hosting providers | Serve the website and the application | Technical details |
When you use your own AI key, your requests also fall under your own agreement with that provider. These providers handle data under their own terms, and AI providers' policies on keeping data may differ from ours. Don't put highly sensitive information, such as health records or government ID numbers, into DeepRit.
If you turn on Web in the editor, your request text is sent as a search query to DuckDuckGo and Wikipedia, and our server requests the pages they return. If you import a web page, our server requests that address. Those requests come from our server, not from your browser.
We may also disclose data if the law requires it, to protect people's rights or safety, or as part of a business sale, in which case this policy continues to protect your data.
What goes to the AI
DeepRit searches your data and picks what's relevant to a request. Only those passages and profile facts go to the AI, along with your request and the writer's settings. You can switch your profile and data off for a section, a writer or a single document. Files are read in your browser. We store their extracted text, not the original file.
Cookies and browser storage
The deeprit.com website uses no analytics, advertising cookies or tracking.
The app at app.deeprit.com uses your browser's local storage to keep you signed in, and browser storage to save repeated AI answers so they cost nothing to repeat. These are necessary for the app to work. Signing out removes them. If we add analytics later, we'll update this policy first and ask for consent where the law requires it.
International transfers
Our providers may process data in countries other than yours, including the United States, where privacy laws can differ. Where the law requires it, we rely on safeguards such as standard contractual clauses.
How long we keep data
| Data | How long |
|---|---|
| Your content | Until you delete it, or until your account is closed |
| Account details | While your account is open, and for up to 30 days afterwards to complete deletion |
| Server and security logs | Generally up to 90 days |
| Purchase records | As long as tax and accounting law requires, which is often several years |
You can delete all of your content yourself at any time from Settings. To close your account completely, email us.
Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, receive a copy, restrict or object to how we use it, and withdraw consent. You can also complain to your local data protection authority. California residents have similar rights, and we don't sell or share personal information as defined in California law.
Much of this you can do yourself: edit your details in the app, use Settings > Export backup for a copy, and delete your data in Settings. For anything else, email support@deeprit.com from your account's address. We'll reply within 30 days.
Security
Connections are encrypted, database rules let each account reach only its own rows and files, and access to AI features requires a verified sign-in. No system is perfectly secure. Use a strong, unique password. If a breach affects your data, we'll tell you as the law requires.
Children
DeepRit isn't for anyone under 16, and we don't knowingly collect their data. If you think a child has given us data, please contact us and we'll delete it.
Changes to this policy
We'll post any change here and update the date at the top. If a change is significant, we'll also tell you by email or in the app.
Contact
DeepRit. Email: support@deeprit.com.