Privacy Policy

Who is the controller

For the purposes of this policy, the operation of the Deep Agents platform acts as controller of the personal data processed in its own signup, authentication, support, billing, security and service operation flows.

Controller / privacy channel contact: privacidade@deepagents.local

What data is collected

• Registration data, such as name, corporate email, company, role and access credentials.
• Platform usage data, such as authentication logs, credits consumed, permissions, interactions and operational events.
• Content submitted by the customer to operate the agents, including documents, prompts, messages and visual attachments.
• Basic technical data, such as IP address, session identifiers, browser, date and time of actions and security telemetry.
• Billing data when applicable, such as the contracted plan, payment history and checkout references processed by partners.

Purpose of collection

Data is only used for legitimate, specific purposes compatible with the operation of the platform. In particular, we use information to:

• create and manage accounts, companies, users and access profiles
• run agents, process documents and maintain the platform's operational context
• protect the environment against fraud, abuse, unauthorized access and security incidents
• comply with contractual, legal, regulatory and tax obligations
• provide support, handle requests and improve the product's stability, performance and governance

How long data is stored

The retention period varies according to the nature of the data, the contractual relationship and applicable legal obligations. In summary:

• Registration and account data: kept while the account is active and, after closure, for the period necessary to comply with legal obligations or safeguard rights.
• Authentication logs, audit trails and operational events: kept for the period necessary for security, fraud prevention, incident investigation and compliance.
• Documents, prompts, messages and files submitted by the customer: kept according to the retention of the account, collections and settings defined while using the platform.
• Billing and transaction records: kept for the periods required by applicable law and by accounting and tax obligations.

Who data may be shared with

Deep Agents may only share personal data when necessary for platform execution, legal compliance or legitimate service protection. The main recipient categories are:

• infrastructure, hosting, database, storage and observability providers that support the platform's technical operation
• payment and billing processing partners, when plans or credits are purchased
• email delivery, authentication, security and abuse-prevention providers
• AI providers and integrated services triggered by the platform itself, always within the scope contracted by the customer
• public authorities and competent bodies, when there is a legal or regulatory obligation or a valid order

Data subject rights

The data subject may request, when applicable, confirmation of processing, access, correction, anonymization, deletion, portability, information about sharing and review of decisions based exclusively on automated processing under applicable privacy law.

How to reach the responsible team

Requests related to privacy, data protection or exercise of rights may be sent to privacidade@deepagents.local.

This channel may also be used for questions about this policy, retention, data sharing and security measures adopted in platform operations.