Privacy Policy

Last updated: 07.07.2026

This Privacy Policy describes what data the deephate.ai service (the “Service”) collects and processes, for what purposes such data is used, to whom it may be disclosed, how long it is retained, and what rights users may have.

By using the Service, you confirm that you have reviewed this Privacy Policy.

1. Who processes the data

The data controller in connection with the operation of the Service is the owner and operator of the deephate.ai project.

Email for all privacy-related requests, data deletion requests, complaints, and reports of violations: deephate@proton.me
Website: https://deephate.ai

2. What data we collect

2.1. Account and identification data

We may collect and store data related to your account, including:

email address;
name;
username;
profile image URL;
account sign-in method;
identifier assigned by the sign-in provider.

This data is collected when you sign in through third-party authentication services, via a one-time sign-in link, or when you create an account. It is used to provide access to the Service, maintain your account, and support personalized features.

2.2. Technical and device data

When you visit the Service and use its features, we may automatically collect:

IP address;
a string containing browser and device information;
browser language;
mobile device indicator;
platform or operating system type;
technical device or browser fingerprint.

This data is used for security, abuse prevention, limiting the creation of repeated guest accounts, error diagnosis, and protection of the Service.

2.3. Service usage data

As part of your use of chat features and access to artificial intelligence systems, we may collect and store:

chat list;
chat titles;
message history;
user message content and response content;
room, model, and settings parameters;
interface action type;
information about the selected model and model provider;
token usage information;
information about daily and plan-based limits.

If you submit text in chat, it may be stored in full in the chat history until the account is deleted or the relevant data is deleted.

2.4. Payment and subscription data

If you purchase a paid plan, we may process:

current plan;
subscription status;
paid period end date;
subscription transaction history;
data received through notifications from payment services;
amount, currency, transaction type, and related technical details.

We are not necessarily the direct processor of your bank card or other payment instrument data. Such data is typically processed by the relevant payment service under its own rules.

2.5. Pseudonymized analytics and technical events

We may collect data about interactions with the interface and use of the Service’s features, including:

hashed internal user and chat identifiers;
IP address;
browser language;
device type;
platform;
selected model;
action type;
message length;
information about plan and sign-in method;
page navigation information.

This data is used for statistics, stability, error detection, abuse prevention, product improvement, and the preparation of aggregated reports, overviews, research, informational, and marketing materials about the operation of the Service and trends in its use, provided that such materials are not intended to identify a specific user.

Some usage data is processed in the form of pseudonymized analytics. This means that internal identifiers may be replaced with hashed values, although such data may still, in certain cases, remain personal data until the end of the retention period.

2.6. Data from cookies and browser local storage

The Service may use cookies and browser local storage for:

signing in to an account and maintaining a session;
storing the selected interface language;
storing consent to the use of cookies;
storing age confirmation;
temporarily passing technical data between pages.

3. Where we get data from

We may receive data directly from you when you register, sign in, make a payment, send messages, and use the Service’s features. In some cases, data may also come from sign-in providers if you sign in through GitHub, Google, or another supported service, as well as automatically from your device and browser.

In addition, data may come from artificial intelligence system providers and other services involved in operating certain features, as well as from payment services and related notifications.

4. What purposes we process data for

We use data for the following purposes:

creating and maintaining an account;
user authentication and authorization;
providing access to the Service’s features;
generating responses using artificial intelligence systems;
storing chat history and user settings;
calculating and enforcing usage limits;
processing subscriptions and payments;
ensuring security and protection against abuse;
detecting fraud, spam, circumvention of limits, and suspicious activity;
providing technical support and handling inquiries;
diagnosing errors and improving the stability and quality of the Service;
usage statistics and analytics;
preparing aggregated reports, overviews, research, informational, and marketing materials about the operation of the Service and trends in its use;
complying with legal obligations and protecting the legitimate interests of the owner of the Service.

5. Legal bases for processing data

Depending on the circumstances, data may be processed on the following legal bases:

for performance of a contract — where processing is necessary for account registration, providing access to the Service’s features, managing subscriptions, and operating chats;
for compliance with a legal obligation — where data is needed to comply with legal requirements, accounting obligations, tax obligations, or lawful requests;
for legitimate interests — where data is needed for security, abuse prevention, diagnostics, statistics, protection of the Service, preparation of aggregated materials, and fraud prevention;
on the basis of consent — where this is required for analytics or advertising technologies, as well as other non-essential tracking tools.

6. Disclosure of data to third parties

We may disclose data to third parties only to the extent necessary for the operation of the Service, compliance with the law, or protection of our legitimate interests.

If you sign in through a third-party authentication service, your data may be processed by the relevant sign-in provider, such as GitHub, Google, or another supported service.

We may receive from such providers your identifier, name, profile image, username, and email address, if such data is provided and verified by that provider.

6.2. Artificial intelligence system providers

In order to generate responses, the Service may transmit to third-party artificial intelligence system providers:

the text of your messages;
message history within the current chat;
the system instruction of the relevant room;
parameters necessary to generate a response.

Such providers may include:

Anthropic;
OpenAI;
Google;
DeepSeek;
other providers connected to the Service at the relevant time.

We do not add your account data to the model request, such as your email address, internal user identifier, IP address, subscription status, or similar information, unless this is required for a specific technical integration. However, you should understand that the text of your prompts, messages, and uploaded materials may itself contain personal data if you choose to include it in the content of your request.

6.3. Payment services

If you use paid features, data related to payment and confirmation of subscription status may be processed by the relevant payment services.

6.4. Hosting and infrastructure

Data may be processed by hosting and infrastructure providers, including application hosting services, databases, and server infrastructure providers, such as AWS or similar providers.

6.5. Analytics and advertising tools

If the Service uses analytics tools or advertising technologies, such as Google Analytics, Google AdSense, or similar advertising networks, the relevant providers may receive technical data about visits, page navigation, device information, cookies, and interaction with the website to the extent necessary for statistics, advertising display, frequency capping, ad effectiveness measurement, and, where permitted by law and user settings, personalization of advertisements.

6.6. Government authorities and other authorized persons

We may disclose data where required by law, by a binding order of a competent authority, or where necessary to protect our rights, the security of the Service, investigate violations, or handle complaints.

7. Use of artificial intelligence systems and message content

The Service provides an interface for accessing third-party artificial intelligence models. We are not the developer or owner of most of the models used and do not control their underlying training, weights, or internal architecture.

If you use chat features, you understand and agree that your messages may be sent to external artificial intelligence system providers in order to generate a response, that responses are generated automatically, and that message history may be stored within the Service.

We do not recommend submitting sensitive personal data, payment details, passwords, government identifiers, medical information, or personal data of other persons in chat without a sufficient legal basis. If you knowingly include personal data in the content of a message, such data may be processed by the relevant artificial intelligence system provider as part of the prompt text.

If additional processing rules apply to a particular model or provider, they may apply alongside this Privacy Policy.

8. Do we use your data to train models

We do not use the content of your chats and messages to train our own models.

At the same time, we may use certain interaction data, technical data, usage statistics, and, in limited cases, the content of certain inquiries or fragments of interactions for:

error diagnosis;
abuse prevention;
improving the quality, resilience, and security of the Service;
manual review of disputed, problematic, or suspicious cases;
improving the operation of the Service.

9. International data transfers

Because the Service uses third-party artificial intelligence system providers, hosting services, sign-in providers, infrastructure, analytics, and advertising services, your data may be processed outside your country, including in countries where the level of data protection may differ.

By using the Service, you understand and accept that such cross-border processing may be necessary for the operation of certain features.

10. Data retention periods

We retain data no longer than necessary for the purposes for which it was collected, unless a longer period is required by law or necessary to protect legitimate interests.

As of the last updated date, the following approximate retention periods apply:

active account data — while the account remains active;
data of an account marked as deleted — up to 24 hours after deletion, unless otherwise required by law or for completion of technical deletion procedures;
one-time sign-in links and related tokens — until expiration or use;
chat and message history — until account deletion, user deletion, or another point provided for by the Service’s logic;
information about usage limits and related technical records — for the period necessary to calculate limits and control usage;
subscription and payment data — for the period necessary for accounting, fraud prevention, dispute resolution, and compliance with legal obligations;
technical security and abuse prevention data — for the period necessary for security and investigation of violations;
pseudonymized analytics data — 12 months;
aggregated statistical data that does not allow identification of a user — may be stored longer.

11. Deletion of an account and data

If you delete your account, data may be deleted in several stages. First, the account is marked as deleted. Then, during the technical deletion period, related data may be physically deleted or anonymized.

Some data may be retained longer where necessary for security, dispute resolution, fraud prevention, compliance with legal obligations, or maintenance of aggregated statistics.

If certain records are not technically linked directly to the account, they may be retained separately to the extent necessary for statistics, security, and stability of the Service.

12. Cookies, browser local storage, and advertising technologies

12.1. Strictly necessary cookies

These are required for account sign-in, session maintenance, and the basic functioning of the interface. Without them, the Service may not function properly.

12.2. Functional cookies

These may be used to remember the selected interface language and other user preferences.

12.3. Analytics technologies

The Service may use analytics technologies, including Google Analytics, to evaluate traffic, navigation, page performance, and interaction with the website.

12.4. Advertising technologies

The website may use advertising from third-party providers, including Google AdSense or similar advertising networks. Such providers may use cookies, pixels, tags, device identifiers, and other technologies for:

displaying advertisements;
limiting display frequency;
measuring advertising effectiveness;
fraud prevention;
personalizing advertisements, where permitted by law and user settings.

Where prior consent is required under applicable law for analytics or advertising technologies, such technologies must be enabled only after such consent has been obtained through a consent management mechanism.

12.6. Browser local storage

We may use browser local storage to store:

consent to the use of cookies;
age confirmation;
temporary technical data necessary for the correct functioning of certain features.

13. Public links to chats

If the Service allows you to create public links to a chat or part of a chat, you understand and agree that the contents of such chat may become accessible to any person who obtains the relevant link.

Please do not publish through such links:

personal data;
sensitive data;
payment data;
trade secrets;
passwords, tokens, and access keys;
information about third parties without a legal basis.

14. Your rights

Depending on applicable law, you may have the right to:

request access to your data;
correct inaccurate or outdated data;
request deletion of data;
restrict processing;
object to certain types of processing;
request data portability;
withdraw consent where processing is based on consent;
lodge a complaint with a competent data protection authority.

To exercise these rights, contact us at: deephate@proton.me.

We may request proof of your identity before fulfilling a request where necessary to protect your data.

15. Security

We apply reasonable technical and organizational measures to protect data against unauthorized access, loss, alteration, disclosure, or destruction.

However, no method of storing or transmitting data over the internet can guarantee absolute security. By using the Service, you understand this risk.

16. Age restrictions

The Service is intended only for individuals who are 18 years of age or older, unless expressly stated otherwise.

We do not knowingly seek to collect data from children. If you become aware that a minor has provided us with their data in violation of the Service’s rules, please contact us at deephate@proton.me, and we will try to take reasonable measures.

17. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always published on the deephate.ai website with the date of the latest update.

If changes materially affect your rights or the nature of data processing, we may additionally notify you by available means.

18. Contact

For privacy-related questions, data deletion requests, complaints, and inquiries related to the processing of information, contact us at:

deephate@proton.me