Privacy Policy
At Deep Fathom, we believe transparency about data collection and use is fundamental to building trust. This policy explains how we collect, use, share, and protect your personal information when you interact with our website and services.
Quick Summary
- We collect minimal personal information, mainly for analytics and communication
- Analytics is first-party and self-hosted. We do not send your browsing to an advertising network
- We honor Global Privacy Control, and you can opt out at any time
- We don't sell your personal information to third parties
- You have rights to access, correct, or delete your information
1. Information We Collect
Information You Provide to Us
We collect personal information you voluntarily provide when you:
- Join our waitlist: Email address, name (if provided)
- Contact us: Name, email, company information, and your message
- Subscribe to communications: Email address and communication preferences
Information We Collect Automatically
When you visit our website, we automatically collect:
- Device and browser information: Device type, browser type and version, operating system
- Usage information: Pages visited, time spent, clicks, scrolling behavior
- Technical data: IP address, referrer URL, general location (country/region)
2. How We Use Your Information
Core Business Purposes
- Product development: Understanding user needs and improving our compliance platform
- Communication: Sending updates about Deep Fathom, responding to inquiries
- Website improvement: Analyzing usage patterns to enhance user experience
- Legal compliance: Meeting regulatory requirements in the defense and compliance sectors
Legal Basis for Processing
We process your personal information based on:
- Legitimate interests: Improving our services and communicating about our platform
- Consent: When you explicitly opt-in to marketing communications
- Contract performance: When necessary to provide requested services
3. Information Sharing
We Do NOT Sell Your Information
Deep Fathom does not sell, rent, or trade your personal information to third parties for marketing purposes.
Limited Sharing
We only share your information in these specific circumstances:
- Analytics: None. Our analytics platform, Matomo, is self-hosted on Deep Fathom infrastructure at echo.deepfathom.ai, so website usage data is not shared with an analytics vendor at all
- Communication tools: Email platforms for waitlist and inquiry management
- Legal requirements: When required by law or to protect our legal rights
- Business transfers: In the event of a merger or acquisition (with continued privacy protection)
4. Cookies and Tracking Technologies
Every cookie this site sets is first-party and belongs to Deep Fathom. There are no advertising or third-party tracking cookies, which is why there is no consent banner asking you to accept any.
- Matomo analytics: Distinguishes one visit from the next so we can count visitors rather than page loads. Self-hosted; the data never leaves our infrastructure. Set across the
www,go,rylee, andconsolesubdomains ofdeepfathom.ai, so moving between our own sites is recognized as one visit rather than several. Global Privacy Control switches this off entirely, described below - Attribution (
df_attr): Records approved campaign labels, the landing path, and the referring site origin so that if you later contact us we know which of our own efforts reached you. It does not retain full referring or landing URLs. Expires after 180 days - Session management: Maintains functionality during your visit
Your Privacy Choices
You can opt out of analytics in any of these ways:
- Global Privacy Control: If your browser or extension sends a GPC signal, we detect it automatically and switch analytics to a cookieless mode. Nothing to click. See globalprivacycontrol.org
- Do Not Track / browser settings: Use your browser's cookie management settings to block or clear cookies for deepfathom.ai
- Ask us: Email privacy@deepfathom.ai and we will action it
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS)
- Access controls and authentication systems
- Regular security assessments and updates
- Employee training on data protection practices
6. Data Retention
We retain personal information only as long as necessary:
- Waitlist information: Until our platform launches or you unsubscribe
- Contact inquiries: 3 years from last interaction
- Analytics data: 24 months
- Attribution cookie: 180 days from your first visit
7. Your Privacy Rights
All Users
- Access: Request information about the personal data we hold about you
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Opt-out: Unsubscribe from marketing communications
Additional Rights (EU/UK Residents - GDPR)
- Data portability: Receive your data in a machine-readable format
- Processing restriction: Limit how we process your information
- Object to processing: Object to processing based on legitimate interests
- Lodge complaints: Contact your local data protection authority
Additional Rights (California Residents - CCPA/CPRA)
- Know: Categories and specific pieces of personal information collected
- Delete: Request deletion of personal information
- Opt-out: Opt out of the "sale" of personal information (we don't sell)
- Non-discrimination: Equal service regardless of privacy choices
Exercising Your Rights
To exercise any of these rights, contact us at privacy@deepfathom.ai. We'll respond within 30 days and may need to verify your identity for security purposes.
8. Children's Privacy
Deep Fathom's services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it immediately.
9. International Data Transfers
We are based in the United States. If you are located outside the US, your information may be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction. We implement appropriate safeguards for international transfers.
10. Changes to This Policy
We may update this privacy policy periodically. Material changes will be communicated through:
- Email notification to waitlist subscribers
- Prominent notice on our website
- Updated "Last Modified" date below
11. Contact Us
For questions about this privacy policy or our data practices:
Email: privacy@deepfathom.ai
Response time: Within 48 hours for privacy inquiries
Business inquiries: hello@deepfathom.ai
Last updated: September 1, 2026
This privacy policy is effective immediately and applies to all information collected on or after this date.