1. Introduction
DeepCeutix ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Personal Information
When you register for an account, we collect:
- Account Information: Username, email address, full name, and password (encrypted)
- Profile Information: Optional professional information and preferences
- Contact Information: Email address for account verification and communications
2.2 Usage Information
When you use the Service, we automatically collect:
- Research Queries: Your search queries, research questions, and analysis requests
- Conversation History: Chat messages and AI agent interactions
- Usage Data: Pages visited, features used, time spent, and interaction patterns
- Device Information: Browser type, operating system, IP address, and device identifiers
- Log Data: Access times, error logs, and performance metrics
2.3 Uploaded Content
Any documents, data, or content you upload to the Service for analysis or research purposes.
3. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To provide, maintain, and improve the Service
- Personalization: To customize your experience and provide relevant research insights
- Authentication: To verify your identity and secure your account
- Communication: To send account verification emails, password resets, and service updates
- Research Improvement: To improve AI models and enhance research accuracy
- Analytics: To analyze usage patterns and optimize Service performance
- Security: To detect, prevent, and address technical issues and fraudulent activity
- Compliance: To comply with legal obligations and enforce our Terms of Service
4. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encryption: Data is encrypted in transit (TLS/SSL) and at rest
- Password Security: Passwords are hashed using bcrypt with salt
- Access Controls: Role-based access control (RBAC) and authentication tokens (JWT)
- Database Security: PostgreSQL with encrypted sensitive fields
- Infrastructure: Secure cloud infrastructure with regular backups
- Monitoring: Continuous security monitoring and error tracking (Sentry)
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
5. Data Sharing and Disclosure
We do NOT sell, trade, or rent your personal information to third parties.
We may share your information only in the following circumstances:
- Service Providers: With trusted third-party service providers who assist in operating our Service (e.g., cloud hosting, email delivery, analytics)
- Legal Compliance: When required by law, subpoena, or court order
- Protection of Rights: To protect our rights, property, or safety, or that of our users or the public
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly authorize us to share your information
6. Public Data Sources
The Service ingests data from global regulatory and scientific repositories (e.g., FDA, EMA, PubMed, ClinicalTrials.gov). This public data is:
- Sourced from official government and scientific repositories
- Already publicly accessible before integration into our Service
- Subject to the original source's terms and privacy policies
- Used solely for research and informational purposes
However, this data is transformed via our proprietary normalization engine into a distinct Knowledge Graph. While the raw inputs may be public, the structured ontology and derived relationships presented within the Service are proprietary to DeepCeutix.
7. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request access to your personal data we hold
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal obligations)
- Data Portability: Request a copy of your data in a machine-readable format
- Opt-Out: Opt out of marketing communications
- Restriction: Request restriction of processing in certain circumstances
- Objection: Object to processing of your personal data
To exercise these rights, please contact us at privacy@deepceutix.com.
9. Data Retention
We retain your personal information for as long as necessary to:
- Provide the Service and maintain your account
- Comply with legal, regulatory, tax, or accounting requirements
- Resolve disputes and enforce our agreements
When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
11. International Data Transfers
Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to such transfers.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page.
13. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@deepceutix.com
Data Protection Officer: dpo@deepceutix.com