Privacy Policy

At Deep Fathom, we believe transparency about data collection and use is fundamental to building trust. This policy explains how we collect, use, share, and protect your personal information when you interact with our website and services.

Quick Summary

  • We collect minimal personal information, mainly for analytics and communication
  • Analytics is first-party and self-hosted. We do not send your browsing to an advertising network
  • We honor Global Privacy Control, and you can opt out at any time
  • We don't sell your personal information to third parties
  • You have rights to access, correct, or delete your information

1. Information We Collect

Information You Provide to Us

We collect personal information you voluntarily provide when you:

  • Join our waitlist: Email address, name (if provided)
  • Contact us: Name, email, company information, and your message
  • Subscribe to communications: Email address and communication preferences

Information We Collect Automatically

When you visit our website, we automatically collect:

  • Device and browser information: Device type, browser type and version, operating system
  • Usage information: Pages visited, time spent, clicks, scrolling behavior
  • Technical data: IP address, referrer URL, general location (country/region)

2. How We Use Your Information

Core Business Purposes

  • Product development: Understanding user needs and improving our compliance platform
  • Communication: Sending updates about Deep Fathom, responding to inquiries
  • Website improvement: Analyzing usage patterns to enhance user experience
  • Legal compliance: Meeting regulatory requirements in the defense and compliance sectors

Legal Basis for Processing

We process your personal information based on:

  • Legitimate interests: Improving our services and communicating about our platform
  • Consent: When you explicitly opt-in to marketing communications
  • Contract performance: When necessary to provide requested services

3. Information Sharing

We Do NOT Sell Your Information

Deep Fathom does not sell, rent, or trade your personal information to third parties for marketing purposes.

Limited Sharing

We only share your information in these specific circumstances:

  • Analytics: None. Our analytics platform, Matomo, is self-hosted on Deep Fathom infrastructure at echo.deepfathom.ai, so website usage data is not shared with an analytics vendor at all
  • Communication tools: Email platforms for waitlist and inquiry management
  • Legal requirements: When required by law or to protect our legal rights
  • Business transfers: In the event of a merger or acquisition (with continued privacy protection)

4. Cookies and Tracking Technologies

Every cookie this site sets is first-party and belongs to Deep Fathom. There are no advertising or third-party tracking cookies, which is why there is no consent banner asking you to accept any.

  • Matomo analytics: Distinguishes one visit from the next so we can count visitors rather than page loads. Self-hosted; the data never leaves our infrastructure. Set across the www, go, rylee, and console subdomains of deepfathom.ai, so moving between our own sites is recognized as one visit rather than several. Global Privacy Control switches this off entirely, described below
  • Attribution (df_attr): Records approved campaign labels, the landing path, and the referring site origin so that if you later contact us we know which of our own efforts reached you. It does not retain full referring or landing URLs. Expires after 180 days
  • Session management: Maintains functionality during your visit

Your Privacy Choices

You can opt out of analytics in any of these ways:

  • Global Privacy Control: If your browser or extension sends a GPC signal, we detect it automatically and switch analytics to a cookieless mode. Nothing to click. See globalprivacycontrol.org
  • Do Not Track / browser settings: Use your browser's cookie management settings to block or clear cookies for deepfathom.ai
  • Ask us: Email privacy@deepfathom.ai and we will action it

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Access controls and authentication systems
  • Regular security assessments and updates
  • Employee training on data protection practices

6. Data Retention

We retain personal information only as long as necessary:

  • Waitlist information: Until our platform launches or you unsubscribe
  • Contact inquiries: 3 years from last interaction
  • Analytics data: 24 months
  • Attribution cookie: 180 days from your first visit

7. Your Privacy Rights

All Users

  • Access: Request information about the personal data we hold about you
  • Correction: Update inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Opt-out: Unsubscribe from marketing communications

Additional Rights (EU/UK Residents - GDPR)

  • Data portability: Receive your data in a machine-readable format
  • Processing restriction: Limit how we process your information
  • Object to processing: Object to processing based on legitimate interests
  • Lodge complaints: Contact your local data protection authority

Additional Rights (California Residents - CCPA/CPRA)

  • Know: Categories and specific pieces of personal information collected
  • Delete: Request deletion of personal information
  • Opt-out: Opt out of the "sale" of personal information (we don't sell)
  • Non-discrimination: Equal service regardless of privacy choices

Exercising Your Rights

To exercise any of these rights, contact us at privacy@deepfathom.ai. We'll respond within 30 days and may need to verify your identity for security purposes.

8. Children's Privacy

Deep Fathom's services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it immediately.

9. International Data Transfers

We are based in the United States. If you are located outside the US, your information may be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction. We implement appropriate safeguards for international transfers.

10. Changes to This Policy

We may update this privacy policy periodically. Material changes will be communicated through:

  • Email notification to waitlist subscribers
  • Prominent notice on our website
  • Updated "Last Modified" date below

11. Contact Us

For questions about this privacy policy or our data practices:

Email: privacy@deepfathom.ai

Response time: Within 48 hours for privacy inquiries

Business inquiries: hello@deepfathom.ai

Last updated: September 1, 2026

This privacy policy is effective immediately and applies to all information collected on or after this date.