DeepVal
Start researching

DeepVal Privacy Policy

Last updated:

This Policy explains how DEEPVAL INTELLIGENCE LIMITED (“DeepVal,” “we,” “us,” or “our”) processes your personal data when you visit deepval.ai and use its related services. Our services are intended for users in Hong Kong, the United States, and Canada.

This Policy addresses the processing of personal data. The purchase, use, and refund rules for our services are set out in the DeepVal Terms of Service. This Policy does not limit your rights under applicable law or constitute your consent to all optional data processing activities.

1. Information We Collect and How We Use It

We process the following information according to the features you use and what is necessary:

We do not use data for purposes unrelated to those described above merely because it is technically available. You may choose not to provide optional information. If you do not provide information necessary to fulfill a request, we may be unable to provide the corresponding feature.

We process data in accordance with applicable law to provide the services you request, meet legal obligations, protect service security, and pursue other permitted purposes. Where consent is legally required, processing will take place after valid consent has been obtained. For new uses that are incompatible with the original purposes, we will meet applicable notice and authorization requirements.

You may refuse or withdraw consent to non-essential analytics without affecting core research features. Withdrawal does not affect processing lawfully carried out before withdrawal. We may still need to retain limited information to meet legal obligations or deal with outstanding transactions and disputes.

2. AI Model Processing and Third-Party Service Providers

We provide information to providers of authentication, payment, hosting and network security, email, AI models, market data, search, and analytics services only to the extent necessary for the relevant purposes. We apply necessary purpose limitations, confidentiality arrangements, and security safeguards according to their roles and applicable law. Certain providers may also process data for their own independent responsibilities where permitted by law.

These services include Google account authentication and GA4, Microsoft Clarity, Cloudflare network services, and Stripe payments. Depending on configuration, research services may access models through gateways such as DataEyes and use search services such as Exa. Other supported search integrations include Zhipu and Bocha. Email may be sent through SMTP providers or AWS SES. When enabled, operational notifications may use Feishu to process necessary account identifiers and service events. The particular recipients and scope of information depend on the features you use and their configuration.

To generate research results, the necessary research requests and context may be processed by model, search, or data services. Please do not include unnecessary personal data or confidential content in research requests. We do not add account or payment information unrelated to providing the service to model requests. Your use of research services does not, through this Policy, grant us unrestricted permission to use identifiable personal data to train general-purpose AI models. Any new use of that kind must separately meet applicable notice and authorization requirements.

Your account, personal tracking lists, and private research records will not be made public merely because the subject of the research is a listed company. Public examples or shared content must have appropriate sources and authorization. Necessary caching does not grant permission to disclose your inputs or identity arbitrarily. Data used for statistics remains protected as personal data if it can still reasonably be linked to an individual.

We do not sell your personal data to advertisers, data brokers, or securities marketing organizations, nor do we package and sell your identity together with your tracking lists. We may disclose limited information to competent authorities, professional advisers, or other necessary recipients where disclosure is legally required, to comply with valid legal process, or where permitted by law and necessary to prevent fraud, address security threats, or resolve disputes.

In a merger, acquisition, or business transfer, relevant information will be transferred only to the extent permitted by applicable law and with appropriate safeguards. We will meet necessary notice requirements and other legal obligations.

3. Cookies, Analytics, and Privacy Choices

We use cookies, local storage, or similar technologies to support login, security, website functionality, and the storage of privacy preferences. We also use Google Analytics 4 (GA4) and Microsoft Clarity to understand website usage and improve the user experience.

Analytics services may receive IP addresses, browser and device information, cookies or other identifiers, access times, and a limited set of event data. Refusing or withdrawing consent affects subsequent non-essential analytics. It does not automatically delete records previously received lawfully by providers. You may submit related deletion requests using the methods described in this Policy.

Necessary security and service operational records do not stop being collected because you reject non-essential analytics. Browser history, browser caches, and device settings are also not entirely within our control.

4. Data Retention, Account Closure, and Anti-Abuse Exceptions

We retain personal data only for as long as necessary to provide services, complete transactions, and fulfill the purposes described in this Policy, taking into account the nature of the data, usage needs, legal retention obligations, and dispute risks. Account and research history are retained to maintain the service, but this is not a promise of permanent hosting. Arrangements for access to historical research when a paid plan expires naturally are governed by the Terms of Service.

After account closure or fulfillment of the relevant purposes, we will delete or anonymize information that is no longer needed, in accordance with applicable law. Limited order, refund, security, and dispute records may continue to be retained for necessary periods to meet financial obligations, prevent fraud, enforce lawful service rules, and respond to legal requests. Hashing information or removing names does not necessarily make it anonymous. Records that can reasonably be linked to an individual remain subject to this Policy. Deletion from backups may be completed through backup rotation; access to and use of that information will be restricted in the meantime.

5. Cross-Border Data Transfers and Data Security

Data may be processed by systems in Hong Kong, the United States, and locations where relevant service providers operate. Data protection rules in those locations may differ from those where you live, and the data may be subject to lawful access requirements under local laws. We will implement necessary contractual, security, and other safeguards in accordance with applicable law and complete cross-border assessments, provide notices, or obtain consent where legally required.

We take reasonable technical and organizational measures based on the nature of the data and the risks involved, including transmission safeguards, access controls, and limits on unnecessary disclosure. Please protect your login methods and do not share access to your account with others.

No method of internet transmission or storage can guarantee absolute security. If a security incident occurs, we will take necessary investigative and remedial measures and meet applicable notification and reporting obligations. This paragraph does not relieve us of our data security responsibilities under applicable law.

Independent third-party websites or services that you choose to visit may have their own privacy rules. This does not relieve us of our legal responsibilities for service providers we engage to process data on our behalf.

6. Your Privacy Rights

Depending on applicable law, you may have rights to access, obtain copies of, correct, or delete data; withdraw consent; object to or restrict processing; obtain data portability; and exercise other rights. You may also lodge a complaint with a competent privacy regulator in accordance with applicable law. We will not subject you to legally prohibited adverse treatment for lawfully exercising your rights.

Please contact [email protected] to submit a request. To prevent unauthorized disclosure or deletion, we may verify your registered email address, order information, or other reasonably necessary information. We will not ask for information unrelated to your request.

We will handle requests within the periods required by applicable law. Where lawful retention obligations, the rights of others, or other legal restrictions apply, we will explain the reasons to the extent permitted by law. Closing an account or deleting data is separate from requesting a monetary refund. If you also need a refund, please submit a request under the Terms of Service.

7. Protection of Minors

The service is intended for adults. You must be at least 18 years old and meet the requirements for contractual capacity where you live. We do not offer the service to minors and do not knowingly collect their personal data. If you believe we hold personal data relating to a minor, please contact [email protected]. We will investigate and handle the matter in accordance with applicable law.

8. Policy Updates and Contact Details

We will publish updated versions of this Policy and the date of the update on this page. For material changes involving processing purposes, the scope of sharing, or users' rights, we will provide appropriate notice. Where renewed consent is required by law, we will obtain it.

For privacy questions, complaints, or requests, please contact:

DEEPVAL INTELLIGENCE LIMITED
Privacy contact email: [email protected]
Business registration address: RM11, 13/F, BLK C WONG KING IND. BLD., 192-198 CHOI HUNG RD SAN PO KONG HONG KONG