Legal

This Privacy Policy describes how Deep Diligence Corporation ("Deep Diligence", "we", "us") collects, uses, discloses and protects information relating to identified or identifiable individuals ("personal data") when you visit our website, create an account, participate in a pilot or early-access program, or otherwise use our research platform (together, the "service"). It applies to prospective, current and former users. Where you use the service through a workspace administered by your employer or another organization, that organization is the controller of the personal data processed in its workspace and this policy applies to our processing on its behalf and to our own administrative processing, such as account and billing records. This policy does not cover third-party websites or services that we link to but do not operate.

Information we collect

We collect information in three ways. First, information you provide directly: when you create an account, request early access, join a pilot or contact us, we collect your name, work email address, firm, role, and, where you purchase a subscription, billing contact and payment details, which are processed by our payment provider and not stored in full on our systems. If you correspond with us for support or feedback, we retain that correspondence. Second, information generated by your use of the platform: the queries you run, the documents you upload, the report runs you commission, the exports you download and the feedback you submit. We treat this research content as your confidential material; it may incidentally contain personal data included in your own documents, which you remain responsible for having the right to process. Third, information collected automatically: log and device data such as browser type and version, operating system, IP address, referring pages, pages viewed, features used, session identifiers and timestamps, collected through server logs and the first-party cookies described in our Cookie Notice below.

How we use information

We use personal data to provide and administer the service, including authenticating you, maintaining your workspace, executing queries and report runs, delivering exports and providing customer support; to process billing and manage subscriptions, credits and invoicing; to secure the service, including detecting, investigating and preventing unauthorized access, abuse and violations of our Terms of Use; to communicate with you about service updates, security notices and, where you have not opted out, product announcements; to comply with legal obligations, including tax, accounting and lawful requests from authorities; and to understand aggregate usage so we can improve reliability and performance. Where the GDPR or similar laws apply, our legal bases are the performance of our contract with you or your organization, our legitimate interests in operating and securing a professional research service, compliance with legal obligations, and consent where we specifically request it.

Two commitments sit above everything in this section: we do not sell personal information and have not done so in the preceding twelve months, and your research content, meaning queries, uploads and outputs, is never shared across customers and never used to train models, ours or anyone else's.

How we share information

We disclose personal data only in limited circumstances. We share it with service providers acting on our instructions under written confidentiality and data-protection obligations, such as cloud hosting, payment processing, email delivery and support tooling, and only to the extent needed for them to perform their functions. We report usage of licensed content to the relevant data partners solely in aggregated or pseudonymized form sufficient to meter consumption under our licenses; data partners do not receive your identity, your queries or your uploads. We may disclose information where required by law, regulation, legal process or enforceable governmental request, and where reasonably necessary to protect the rights, property or safety of Deep Diligence, our customers or the public. If we are involved in a merger, acquisition, financing or sale of assets, personal data may be transferred as part of that transaction subject to this policy, and we will notify you of any resulting change in control or use.

When you create an account, we report that sign-up to LinkedIn so we can measure our LinkedIn ads. The report is sent from our servers, not through a cookie in your browser. It says only that a sign-up happened and when, and identifies you to LinkedIn by your email address and name, each hashed before it leaves us, plus LinkedIn's own click identifier if you arrived from one of our LinkedIn ads. In the European Union, the European Economic Area and the United Kingdom, and wherever we can't tell where you are, we send it only if you tick the box for it when you sign up, or turn it on later. Elsewhere it is on unless you turn it off. You can change it at any time in Settings > Preferences; turning it off stops a report that hasn't been sent yet. To tell which region you sign up from, we look up the country of your IP address in a database kept on our own servers; the address is not sent anywhere for this. IP geolocation by DB-IP

International transfers

We are headquartered in the United States and process data there and in other jurisdictions where our service providers operate. Where personal data originating in the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy determination, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent UK and Swiss mechanisms, together with supplementary technical measures including encryption in transit and at rest.

Retention

We retain personal data only as long as necessary for the purposes described in this policy. Account and billing records are kept for the life of the account and thereafter as required for tax, accounting and legal purposes. Research content is retained until you delete it or close your account, after which it is purged from production systems within 30 days and from encrypted backups within 90 days. Server logs are retained for a rolling period of no more than 13 months for security and capacity planning. Messages sent through the contact and newsletter forms on our website, including the name, email address, company and message you enter, are kept for 24 months and then deleted by a daily sweep. Where deletion is not immediately practicable, such as content held in litigation holds required by law, we isolate the data from further processing until deletion is possible.

Your rights and choices

Depending on your jurisdiction, you may have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to receive a portable copy, to request deletion, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. Under the CCPA, California residents additionally have the right to know the categories of personal information collected and disclosed, to request deletion, and not to be discriminated against for exercising these rights; because we do not sell personal information, no opt-out of sale is required. To exercise any right, write to info@deepdiligence.com from the email address associated with your account, or have your workspace administrator submit the request on your behalf where your organization controls the workspace. We verify requests, respond within 30 days, and may extend that period where permitted by law with notice to you. You may also lodge a complaint with your local supervisory authority, though we would appreciate the chance to address your concern first. You can opt out of product announcement emails at any time via the unsubscribe link in each message; service and security notices are sent as long as you hold an account.

Children

The service is intended for professional use by adults. We do not knowingly collect personal data from anyone under 18, and if we learn that we have done so we will delete it promptly.

Changes to this policy

We may update this policy from time to time as the service, law or our practices evolve. For material changes we will notify you by email or in-product notice at least 30 days before the change takes effect, and the "last updated" date at the top of this page will always reflect the current version. Your continued use of the service after the effective date constitutes acknowledgment of the updated policy.

These Terms of Use (the "Terms") constitute a binding agreement between Deep Diligence Corporation and the individual or entity accessing the platform ("you"). By creating an account, accepting an invitation to a workspace, or otherwise accessing or using the service, you accept these Terms on your own behalf and on behalf of the organization you represent, and you represent that you have the authority to do so. If your organization has executed a separate order form or master services agreement with us, that agreement controls to the extent it conflicts with these Terms. If you do not agree to these Terms, you may not access or use the service.

Access and eligibility

The service is offered for professional use by businesses, institutions and their personnel, and is not directed to consumers or to individuals under the age of 18. Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable right to access and use the platform for your internal business purposes and for the preparation of work product for your clients. Access credentials are issued per named user; you are responsible for maintaining the confidentiality of credentials associated with your account and for all activity occurring under them, and you agree to notify us promptly at info@deepdiligence.com upon becoming aware of any unauthorized access or use.

Your license to outputs

As between you and us, you own the reports, answers, exports and other outputs generated at your direction (collectively, "Outputs"), and we grant you a perpetual, worldwide, royalty-free license to reproduce and distribute any of our contributions embodied in them. You may use Outputs in your internal analyses and in client-facing deliverables, including redistribution of Outputs within such deliverables in the ordinary course of your business. Underlying source material retrieved from licensed databases and publications remains the property of its respective rights holders and is sublicensed to you solely as embedded in Outputs; excerpts must retain their citations, and nothing in these Terms grants you an independent license to any third-party database or publication.

Acceptable use

You agree not to, and not to permit any third party to: (a) resell, republish, syndicate or otherwise make available raw source data or substantial portions of the knowledgebase other than as embedded in Outputs; (b) scrape, crawl, bulk-download or systematically extract content from the service, whether manually or by automated means; (c) reverse engineer, decompile or otherwise attempt to derive the underlying models, prompts, retrieval logic or source compilations of the platform; (d) use the service or any Output to develop, train or improve a competing product, dataset or model; (e) probe, scan or test the vulnerability of the service, circumvent authentication or usage metering, or interfere with the integrity or performance of the platform; (f) share credentials outside your organization or permit concurrent use of a single seat by multiple individuals; or (g) upload material that you lack the right to process or that contains unlawful content. We may suspend access immediately where we reasonably believe a violation threatens the security of the service or our obligations to data partners, and will restore access promptly once the issue is resolved.

Accounts, fees and billing

Subscriptions are sold per named user seat and billed in advance on the cycle stated at purchase or in your order form. Report credits are consumed when a report run is confirmed; the credit cost of a run is always displayed before you confirm it, and confirmed runs are non-reversible once processing has begun. Unused credits expire as stated in your plan. Except where required by law or expressly agreed in an order form, fees are non-refundable and non-creditable. You are responsible for applicable taxes other than taxes on our income. We may change pricing with effect from your next renewal upon at least 30 days' notice. Amounts more than 30 days past due may result in suspension of access following notice, and you agree to reimburse reasonable costs of collection of amounts properly due.

Confidentiality and your content

Queries you run, documents you upload and Outputs generated for you are your confidential information. We use them solely to provide the service to you, do not disclose them to other customers, and do not use them to train models. Each party agrees to protect the other's confidential information with at least the degree of care it uses for its own similar information, and in no event less than reasonable care, and to use it only as necessary to perform under these Terms. This obligation does not apply to information that is or becomes public through no fault of the receiving party, was lawfully known prior to disclosure, is independently developed, or must be disclosed pursuant to law or court order, provided the receiving party gives prompt notice where legally permitted.

Intellectual property

We and our licensors retain all right, title and interest in and to the platform, including its software, models, retrieval architecture, interface designs, documentation and source compilations, and in all improvements thereto. No rights are granted to you by implication or estoppel. If you provide suggestions or feedback regarding the service, you grant us a perpetual, irrevocable, royalty-free license to use that feedback without restriction or obligation to you.

No professional advice

The service produces research syntheses drawn from licensed and public sources. Outputs are provided for informational purposes only and do not constitute investment, legal, accounting, tax or other professional advice, and no fiduciary, advisory or client relationship is created by your use of the service. You are solely responsible for independently evaluating the suitability of any Output for your purposes and for any decision, transaction or filing made in reliance on it.

Disclaimers

Except as expressly stated in these Terms, the service and all Outputs are provided "as is" and "as available" without warranties of any kind, whether express, implied, statutory or otherwise, including any implied warranties of merchantability, fitness for a particular purpose, title and non-infringement. Without limiting the foregoing, we do not warrant that the service will be uninterrupted or error-free, that Outputs will be complete or free of inaccuracies, or that source material will remain available. Some jurisdictions do not allow the exclusion of implied warranties, so portions of this section may not apply to you.

Indemnification

We will defend you against third-party claims alleging that the platform, as provided by us and used in accordance with these Terms, infringes a third party's intellectual property rights, and will pay damages finally awarded or amounts agreed in settlement of such claims, provided you give us prompt notice, sole control of the defense and reasonable cooperation. You will defend and indemnify us against third-party claims arising from content you upload, from your use of Outputs in violation of these Terms, or from your violation of applicable law. This section states each party's exclusive remedy for the claims it covers.

Limitation of liability

To the maximum extent permitted by law, neither party will be liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenues, goodwill or data, even if advised of the possibility of such damages. Except for your payment obligations, a party's indemnification obligations, or a party's breach of the confidentiality section, each party's aggregate liability arising out of or relating to these Terms will not exceed the fees paid or payable by you in the twelve months preceding the event giving rise to the claim.

Term, suspension and termination

These Terms apply from your first access to the service and continue until your subscription ends or is terminated. Either party may terminate for material breach if the breach remains uncured 30 days after written notice, and you may stop using the service at any time. Upon termination or expiration, your access ceases and you may export your content for 30 days, after which it is deleted in accordance with our retention schedule described in the Privacy Policy. Sections concerning ownership, confidentiality, disclaimers, indemnification, limitation of liability and governing law survive termination.

Changes to the service and these Terms

The platform is under active development, and features may be added, modified or withdrawn, provided that we will not materially degrade the core functionality of a paid plan during its current term. We may update these Terms from time to time; for material changes we will provide at least 30 days' notice by email or in-product notice, and your continued use of the service after the effective date constitutes acceptance. If you do not agree to a material change, you may terminate and receive a pro-rata refund of prepaid fees for the remainder of your term.

Governing law and general provisions

These Terms are governed by the laws of the Commonwealth of Massachusetts, without regard to its conflict-of-laws rules, and the parties consent to the exclusive jurisdiction of the state and federal courts located in Suffolk County, Boston for any dispute not subject to an agreed arbitration provision. Neither party is liable for delay or failure to perform due to causes beyond its reasonable control. You may not assign these Terms without our prior written consent, except to a successor in connection with a merger or sale of substantially all assets; we may assign to an affiliate or successor. If any provision is held unenforceable, it will be modified to the minimum extent necessary and the remainder will continue in effect. These Terms, together with any order form and policies referenced herein, constitute the entire agreement between the parties regarding the service and supersede all prior discussions. Notices to us must be sent to Deep Diligence Corporation, 50 Milk Street, Boston, MA 02109, USA or info@deepdiligence.com; notices to you may be given by email to the address on your account.

All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256.

Customer workspaces are logically isolated from one another: your uploads are never visible to other customers and never used to train models. Role-based permissions are available on team plans and single sign-on is coming, and production access by our own staff is limited, logged and reviewed.

If we confirm a security incident involving your data, we notify you without undue delay, and in any case within 72 hours.

Our knowledgebase draws on 500+ commercially licensed databases, brokerage research collections, industry trackers and benchmarks. Each source is under a written license that covers retrieval, citation and excerpting in customer outputs.

Excerpts in your outputs identify their source and, where available, the page or dataset they come from. Third-party trademarks and source names appear for identification only and do not imply endorsement.

Rights holders with questions about how their content appears in the platform can reach us at info@deepdiligence.com.

We use a small set of first-party cookies: session cookies to keep you signed in, preference cookies to remember workspace settings, and privacy-respecting analytics to understand aggregate usage. We do not set advertising or cross-site tracking cookies.

When you reach our site from a link that carries campaign tags or LinkedIn's click identifier, we keep those values in your browser's session storage, not a cookie, until you sign up or close the tab, so the sign-up records which campaign brought you. What we then report to LinkedIn, and how to stop it, is described in our Privacy Policy.

To prevent abuse and repeated registration after a suspension, we use a first-party security device identifier in a cookie and browser local storage. Local storage restores the identifier if only the cookie is cleared. We calculate a browser fingerprint from graphics rendering, screen, timezone, language, platform, processor and font characteristics; only its hash is sent to our service. Security records hold hashed device, network-prefix and browser identifiers for up to 400 days after their last use. A shared network alone does not block an account. These signals are used for security, not advertising or cross-site tracking. You can clear or block cookies and local storage in your browser; signed-in features require session cookies to function.

Deep Diligence Corporation

50 Milk Street

Boston, MA 02109, USA

Legal notices, privacy requests and licensing inquiries: info@deepdiligence.com