This Privacy Policy explains how Deepage FZ-LLC ("Deepage," "we," "us," or "our") collects, uses, and protects personal data when you use deepage.io and the Deepage service (the "Service"). It forms part of our Terms of Service. If you do not agree with this Policy, please do not use the Service.
01 Data we collect
Data you provide
- Account data — name, email address, password (stored hashed), company/brand name, and website URL.
- Billing data — processed by our payment processor, Stripe. We do not store full card numbers; we receive limited billing metadata (e.g., plan, payment status, last 4 digits, country).
- Integration credentials — credentials or tokens you provide to connect your website (e.g., WordPress application passwords, webhook endpoints) and your Google Search Console account. These are stored encrypted and used only to operate the Service for your account.
- Knowledge base inputs — facts about your business you confirm or edit (e.g., pricing, features, competitors, audience).
- Communications — messages you send us (support, email, feedback).
Data we collect automatically
- Usage data — pages viewed, features used, actions taken in the app, timestamps, and approximate location derived from IP address.
- Device data — browser type, operating system, device identifiers, and IP address.
- Attribution data — how you arrived at deepage.io: referrer URL, UTM parameters, landing page, and campaign identifiers — collected via our own internal tracking and via cookies described in our Cookies Policy.
Data we collect from other sources
- Your public website content — to build your brand profile, we crawl the publicly available pages of the website URL you provide. This is read-only and may incidentally include personal data your site displays publicly (e.g., team names, testimonials).
- Google Search Console — if you connect it, we retrieve search performance data (queries, rankings, clicks, impressions) for your site via Google's API, subject to Google's terms.
- AI answer engines — we submit business-related questions about your market to third-party AI services and store the answers to measure brand mentions. We do not submit your personal data in these queries beyond your brand and market context.
We do not knowingly collect data from anyone under 18. The Service is for business use.
02 How we use data
We use personal data to:
- Provide, operate, and maintain the Service (including generating content, publishing to your connected site, and producing your dashboard);
- Process payments and manage subscriptions, trials, and renewals;
- Communicate with you about the Service (transactional emails, support, important notices);
- Measure and improve the Service, including analytics on how features are used;
- Understand where our visitors and customers come from (marketing attribution);
- Send marketing communications where permitted — you can opt out at any time via the unsubscribe link;
- Detect, prevent, and address fraud, abuse, and security issues;
- Comply with legal obligations.
03 Legal bases (where GDPR or similar laws apply)
Where required, we process personal data on these bases: performance of a contract (providing the Service you signed up for), legitimate interests (analytics, attribution, security, improving the Service), consent (non-essential cookies, marketing emails where required), and legal obligation (tax, accounting, lawful requests).
04 Sharing and disclosure
We share personal data only with:
- Service providers (processors) who help us run the Service — e.g., cloud hosting, payment processing (Stripe), email delivery, analytics (Google Analytics), and AI model providers used to generate content and measure citations. Each is bound by contractual data-protection obligations and processes data only on our instructions.
- Third-party services you connect — e.g., your WordPress site, your webhook endpoint, Google Search Console — as directed by you.
- Legal and safety recipients — where required by law, legal process, or to protect the rights, safety, or property of Deepage, our users, or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
A current list of key subprocessors is available on request at hasan@deepage.io.
05 International transfers
We are based in Dubai, United Arab Emirates, and our service providers may process data in other countries (including the United States and the European Union). Where required, we use appropriate safeguards for cross-border transfers, such as standard contractual clauses or equivalent mechanisms.
06 Data retention
We retain personal data for as long as your account is active and as needed to provide the Service. After account termination, we delete or anonymize account data within 90 days, except where longer retention is required for legal, tax, accounting, security, or dispute purposes. Stored AI answers and measurement data associated with your account are deleted on the same schedule. Backups are purged on a rolling cycle.
07 Security
We apply technical and organizational measures appropriate to the risk, including: encryption of credentials at rest, encryption of data in transit (TLS), logical isolation of each customer's data, access controls, and monitoring. No system is perfectly secure; you are responsible for keeping your account credentials confidential.
08 Your rights
Depending on your location, you may have rights to: access the personal data we hold about you; correct inaccurate data; delete your data; receive a copy in a portable format; object to or restrict certain processing; and withdraw consent where processing is based on consent. UAE residents have rights under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021); EU/EEA and UK residents have rights under the GDPR/UK GDPR; other jurisdictions may provide similar rights.
To exercise any right, email hasan@deepage.io. We may need to verify your identity. If you are in the EU/EEA or UK, you may also lodge a complaint with your local supervisory authority.
09 Cookies and tracking
We use cookies and similar technologies as described in our Cookies Policy. In short: essential cookies to run the site and app, Google Analytics to understand usage, and first-party attribution tracking to know which channel or campaign brought you to us.
10 Marketing communications
If you sign up or request materials from us, we may send you product and marketing emails. Every marketing email contains an unsubscribe link. Transactional emails (billing, security, service notices) are sent regardless, as they are necessary to operate your account.
11 Third-party links and services
The Service links to and interoperates with third-party services (e.g., Google, WordPress, AI answer engines, community platforms). Their privacy practices are governed by their own policies, which we encourage you to review.
12 Changes to this Policy
We may update this Policy from time to time. Material changes will be notified by email or in-app notice before they take effect. The "Last updated" date at the top reflects the current version.
13 Contact
Deepage FZ-LLC
Dubai, United Arab Emirates
Email: hasan@deepage.io