Privacy Policy

Last updated: April 20, 2026

1. Who We Are

This Privacy Policy explains how DeepVal, through the website and related services at deepval.ai (“DeepVal,” “we,” “us,” or “our”), collects, uses, stores, shares, and protects personal information when you access or use our website, products, and related services.

If you have questions about this Privacy Policy or our privacy practices, you may contact us at:
Email: support@deepval.ai

2. Scope of This Policy

This Privacy Policy applies to personal information we collect through:

• the DeepVal website;
• account registration and login;
• AI-assisted investment research, company analysis, and content generation features;
• subscription, billing, and payment-related functions;
• customer support, security, and service communications.

This Privacy Policy does not apply to third-party websites, products, or services that are linked from DeepVal but operated by others. Those third parties have their own privacy policies.

3. Information We Collect

We may collect the following categories of personal information:

A. Information You Provide Directly

• name, email address, login credentials, and account profile information;
• information you submit when you contact us for support;
• information you provide when participating in surveys, waitlists, promotions, or feedback requests.

B. Google Sign-In Information

If you choose to register or log in using Google Sign-In, we may receive certain information from Google, subject to the permissions you grant, such as:

• your Google account identifier;
• email address;
• name;
• profile image;
• basic profile information used for authentication.

DeepVal currently requests the following basic Google OAuth scopes for sign-in: openid, email, and profile.

C. Analysis Inputs and Generated Content

When you use DeepVal’s AI features, we may collect and process:

• stock tickers, company names, keywords, prompts, and search queries you submit;
• contextual information you include in your requests;
• generated reports, research outputs, summaries, watchlists, or related content;
• report history, saved outputs, and usage records associated with your account.

D. Usage, Device, and Log Information

We may automatically collect:

• IP address;
• browser type and version;
• device type, operating system, language, and time zone;
• referring URLs, pages visited, clickstream data, session activity, and timestamps;
• crash logs, diagnostic data, error reports, and performance data.

E. Subscription, Order, and Payment Information

If you purchase a paid plan or subscription, we may collect:

• subscription status, plan type, order history, invoices, and billing-related records;
• limited payment-related information made available to us by our payment processor;
• we do not store your full bank card number on our own servers.

F. Notification and Preference Information

We may collect:

• your email communication preferences;
• notification preferences and delivery status;
• other settings associated with your account and service usage.

G. Cookies and Similar Technologies

We may collect information through cookies, pixels, local storage, SDKs, or similar technologies, as described in the “Cookies and Similar Technologies” section below.

4. How We Use Your Information

We may use your personal information to:

• create, maintain, and secure your DeepVal account;
• authenticate users and support sign-in methods such as Google Sign-In;
• provide AI-assisted investment research, company analysis, summaries, and related outputs;
• operate, maintain, troubleshoot, and improve our website and services;
• process subscriptions, payments, billing, and related customer service requests;
• send service-related notices, support messages, security alerts, and operational communications;
• measure usage, analyze performance, monitor errors, and improve product quality;
• detect, investigate, and prevent fraud, abuse, unauthorized access, and other harmful activity;
• comply with legal obligations, enforce our terms, and protect our rights and users.

5. Legal Bases for Processing (for EEA / UK Users)

If you are located in the European Economic Area (“EEA”) or the United Kingdom, we rely on one or more of the following legal bases to process your personal information:

• Performance of a contract: to create and manage your account, provide the services you request, generate reports and outputs, process subscriptions, and deliver customer support.
• Legitimate interests: to secure our platform, prevent abuse, maintain logs, troubleshoot issues, improve product performance, and conduct internal analytics that are reasonably necessary for operating our services.
• Consent: where required by applicable law, including for certain cookies, tracking technologies, or specific optional communications.
• Legal obligation: where we need to process information to comply with applicable law, lawful requests, tax, accounting, regulatory, or enforcement requirements.

Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may have the right to object.

6. AI Processing and Model Providers

When you submit analysis requests, prompts, stock tickers, company names, or related context through DeepVal, we may transmit that information to our contracted AI model, cloud, and infrastructure providers as necessary to generate and return the requested outputs.

Our current providers may include: OpenAI / Anthropic / Google Cloud / AWS / Azure / Alibaba Cloud / Volcano Engine / Zhipu AI. We use these providers to operate and support the core functionality of DeepVal. We require such providers to handle data in accordance with applicable contractual, security, and data protection obligations.

AI training statement: As of the effective date of this Privacy Policy, we do not use your personal data, submitted analysis queries, or generated reports to train our own general-purpose AI models or third-party general-purpose AI models, unless we clearly notify you and obtain any consent required by applicable law beforehand.

7. Cookies and Similar Technologies

We may use cookies and similar technologies to:

• keep you logged in and maintain session security;
• remember your preferences and settings;
• understand website usage and performance;
• measure and improve product quality;
• support essential website functionality.

We may use the following categories of cookies or similar technologies:

• Strictly necessary cookies – required for core website and security functions;
• Preference cookies – used to remember settings and improve convenience;
• Analytics cookies – used to understand traffic, usage, and performance;
• We do not currently use advertising cookies for cross-context behavioral advertising.

Where required by applicable law, we will request your consent before placing non-essential cookies or similar technologies on your device. You may manage cookies through our cookie banner or your browser settings, subject to the limits of browser controls.

8. How We Share Your Information

We do not sell your personal information.

We may share personal information with the following categories of recipients where necessary:

• hosting, cloud, database, and infrastructure providers;
• AI model and processing providers;
• authentication providers, including Google Sign-In;
• payment processors and billing service providers;
• analytics, monitoring, logging, and security service providers;
• professional advisers, auditors, insurers, and legal counsel;
• regulators, law enforcement, courts, or other third parties where required by law or necessary to protect rights, safety, or security;
• a buyer, investor, successor, or other relevant party in connection with a merger, financing, acquisition, restructuring, sale of assets, or similar transaction.

If California law applies to our processing, DeepVal does not currently sell or share personal information for cross-context behavioral advertising.

9. International Data Transfers

Your personal information may be processed in countries or regions other than the one in which you reside, including where our service providers or infrastructure are located.

Where required by applicable law, we will take appropriate steps to ensure that international transfers are subject to lawful transfer mechanisms and appropriate safeguards, such as contractual protections or other recognized legal mechanisms.

If you would like more information about applicable transfer safeguards, you may contact us using the contact details provided below.

10. Data Retention

We retain personal information for no longer than reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Our general retention approach is as follows:

• Account information: for the duration of your account and up to 30 days after account deletion, unless retention is required for legal or security reasons;
• Analysis inputs, generated reports, and usage history: for the duration of your account, or longer if needed to provide service continuity, resolve disputes, or enforce our terms;
• Customer support communications: typically up to 24 months after closure of the relevant support matter;
• Usage logs, diagnostics, and security records: typically up to 12 months, unless longer retention is needed for security, fraud prevention, or legal compliance;
• Subscription, billing, and tax-related records: for the period required by applicable accounting, tax, and legal obligations, typically 7 years;
• Cookie consent records: for as long as necessary to demonstrate compliance and manage your preferences;
• Backups: backup copies may remain in secure backup systems for up to 90 additional days before being overwritten in the ordinary course of operations.

11. Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include encryption in transit, access controls, secure infrastructure practices, logging, monitoring, and vendor management controls.

However, no security system is completely secure, and we cannot guarantee absolute security.

12. Your Privacy Rights

Depending on where you are located, you may have certain privacy rights.

A. Rights Available to All Users

You may request access to, correction of, or deletion of certain account information by contacting us or, where available, through your account settings.

B. EEA / UK Rights

If you are located in the EEA or UK, you may have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing;
• object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent;
• lodge a complaint with your local supervisory authority.

We generally respond to valid privacy rights requests within one month, and may extend this period where permitted by law for complex requests.

C. California Rights

If California privacy law applies to our processing of your personal information, you may have the right to:

• know the categories of personal information we collect and how we use them;
• request access to specific pieces of personal information, subject to applicable exceptions;
• request deletion of personal information, subject to applicable exceptions;
• request correction of inaccurate personal information;
• receive equal service and pricing even if you exercise your privacy rights, subject to applicable law;
• Because DeepVal does not currently sell or share personal information for cross-context behavioral advertising, there is currently no need to opt out of such activities through the service; however, if our practices change, you will be notified and offered any rights required by applicable law to opt out of the sale or sharing of personal information.

To exercise your rights, please contact us at support@deepval.ai. We may need to verify your identity before processing certain requests.

13. Children’s Privacy

DeepVal is not directed to children under the age of 18, and we do not knowingly collect personal information from individuals under 18.

If we become aware that we have collected personal information from a person under 18 in violation of applicable law, we will take reasonable steps to delete that information.

If you believe that a minor has provided personal information to us, please contact us at support@deepval.ai.

14. Third-Party Services

Our services may contain links to, integrations with, or embedded features from third-party services, such as authentication services, payment providers, analytics tools, or AI service providers. Those third parties may process information under their own privacy policies and terms.

We encourage you to review the privacy policies of those third parties before using their services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data practices.

If we make material changes, we will provide notice by appropriate means, such as posting a prominent notice on our website or, where appropriate, sending you an email or other direct communication before the changes take effect.

The “Last Updated” date at the top of this Privacy Policy indicates when this Privacy Policy was most recently revised.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact us at:
Email / Privacy contact: support@deepval.ai