Privacy Policy

1. Introduction

DeepMemory AI Limited ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered admin dashboard platform ("Service").

2. Information We Collect

We collect information to provide and improve our Service. This includes:

• Account Information: When you register via Google OAuth, we collect your name, email address, and Google User ID.
• Usage Data: Information about how you use the Service, such as features accessed, time spent, and interactions.
• Content Data: Documents uploaded, meeting transcriptions, AI-generated images, and prompts used for AI features.
• Google API Data: Data accessed through your connected Google Calendar, Contacts, and Gmail (as authorized by you).
• WhatsApp Business Data: When you use our WhatsApp Business integration, we collect phone numbers, message content, profile names, and conversation metadata from WhatsApp users who interact with your chatbot.
• Technical Data: IP address, browser type, operating system, and device information.

3. How We Use Your Information

We use the collected information for the following purposes:

• To provide, operate, and maintain our Service
• To improve, personalize, and expand our Service
• To understand and analyze how you use our Service
• To develop new products, services, features, and functionality
• To communicate with you, including for customer service, updates, and marketing
• To process your transactions and manage your credit balance
• To detect and prevent fraud and abuse
• To comply with legal obligations

4. Google API Data Usage and Disclosure

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google Calendar: We access your calendar data to display, create, edit, and manage events within our Service. This data is used solely to provide calendar management features and is not shared with third parties for marketing or advertising.
• Google Contacts: We access your contacts data to facilitate contact management and integration within our Service. This data is used solely to provide contact management features and is not shared with third parties for marketing or advertising.
• Gmail: We may integrate with Gmail for email-related functionalities as authorized by you. Any data accessed from Gmail is used solely to provide the requested email features and is not shared with third parties for marketing or advertising.

We do not transfer Google API data to third parties unless necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.

You can revoke our access to your Google data at any time through your Google Account permissions page.

5. AI Services Data Handling (Gemini API)

When you use our AI image generation and editing features:

• Prompts and input images are sent to the Gemini API for processing.
• Generated images are returned to you and stored within your project on our Supabase storage.
• We do not use your prompts or generated content to train our AI models or for any purpose other than providing the requested service.
• Data handled by the Gemini API is subject to Google's privacy policies.

6. WhatsApp Business Platform Integration

We integrate with the Meta WhatsApp Business Platform to enable chatbot functionality for your business communications. When you use this feature:

• Data Collection: We collect and process messages, phone numbers, profile names, and conversation metadata from WhatsApp users who interact with your chatbot through the WhatsApp Business API.
• Message Processing: Incoming WhatsApp messages are processed by our AI assistant to generate automated responses. Messages and conversation history are stored in our secure database to maintain conversation context and improve service quality.
• Data Retention: WhatsApp conversation data is retained as outlined in Section 8 (Data Retention) unless you or the WhatsApp user requests deletion.
• User Consent: We only process WhatsApp messages from users who have initiated contact with your WhatsApp Business chatbot, in compliance with Meta's opt-in consent requirements.
• Meta Platform Terms: Our use of the WhatsApp Business Platform is subject to Meta's Platform Terms and WhatsApp's Business Terms.
• Data Deletion: WhatsApp users can request deletion of their data through Meta's data deletion process, which we honor through our automated data deletion callback. You can also request deletion of WhatsApp conversation data by contacting us.
• Third-Party Processing: WhatsApp messages are transmitted through Meta's WhatsApp Business Platform infrastructure and are subject to Meta's privacy practices. We do not share WhatsApp user data with third parties for marketing or advertising purposes.

7. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf, including:
  • Supabase for database and storage
  • Google for AI (Gemini API) and OAuth authentication
  • Meta for WhatsApp Business Platform messaging infrastructure
  • Other technical service providers necessary for platform operations
• Affiliates: Companies within our corporate group.
• Legal Requirements: If required by law or in response to valid requests by public authorities.
• Business Transfers: In connection with a merger, sale of assets, or acquisition.
• With Your Consent: For any other purpose with your explicit consent.

Important Note: We do not sell, rent, or trade your personal data or WhatsApp conversation data to third parties for their marketing purposes.

8. Data Security

We implement robust security measures to protect your data, including:

• Encryption of data in transit and at rest (where applicable)
• Row Level Security (RLS) on our Supabase database
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Secure coding practices

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

10. Your Data Protection Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request copies of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Request restriction of processing under certain conditions.
• Right to Object to Processing: Object to our processing of your personal data.
• Right to Data Portability: Request transfer of your data to another organization.
• Right to Withdraw Consent: Withdraw consent for data processing at any time.

To exercise any of these rights, please contact us using the details in Section 17 (Contact Us).

11. How to Delete Your Data

You can request deletion of your data through the following methods:

• Account Data: Contact us at [email protected] to request deletion of your account and associated data.
• Google Data: Revoke our access through your Google Account permissions page. You can also request deletion by contacting us directly.
• WhatsApp Data: WhatsApp users can request deletion of their conversation data in two ways:
  • Through Meta's data deletion request process (automatically processed by our system)
  • By contacting us directly at [email protected] with your WhatsApp phone number

Upon receiving a valid deletion request, we will delete your data within 30 days, unless we are required by law to retain certain information for a longer period.

12. International Data Transfers

Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ. By using our Service, you consent to such transfers.

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

14. Links to Other Websites

Our Service may contain links to other websites not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

15. Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personally identifiable information from children under 13.

16. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us: