Privacy Policy

Information we collect

• Account information. If you create an account, we collect your email address and authentication details through our authentication provider (Supabase). Passwords are stored hashed; we never see them in plain text.
• Usage and analytics. We record first-party, privacy-respecting product events (for example, which articles are viewed, charts expanded, tables or context files downloaded, and searches run) to improve the Site. Logged-out visitors are attributed to a randomly generated session identifier stored in a first-party cookie (ds_sid), not to your identity.
• Newsletter. If you subscribe, we store the email address you provide to send you updates. You can unsubscribe at any time.
• New-dataset notifications. If you tick the notification box during onboarding or when downloading a context file, we store your email address, the sectors you follow, and the date, page, and wording of the consent you gave. We use this only to email you — at most once a week — when a new dataset matching those sectors is published. If nothing relevant is published, we send nothing.
• Technical data. Standard server and CDN logs (IP address, browser type, pages requested) are processed by our hosting provider (Netlify) for security and reliability.

Cookies

We use cookies that are strictly necessary to operate the Site (such as the session cookie and, when you log in, authentication cookies) and a first-party analytics cookie. If and when we display advertising (see below), our advertising partner may set additional cookies. You can control cookies through your browser settings; disabling necessary cookies may affect Site functionality.

Advertising

We may display advertising provided by Google AdSense. Google and its partners use cookies and similar technologies to serve ads based on your prior visits to this and other websites, and to measure ad performance. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our Site and/or other sites. You can opt out of personalized advertising by visiting Google Ads Settings. For visitors in the EEA, UK, and Switzerland, we present a consent banner via a Google-certified consent management platform before any non-essential or advertising cookies are set, and serve non-personalized ads where consent is not given. See Google's advertising policies for details.

Onboarding & personalization

If you complete our onboarding questionnaire, we collect only what we use to personalize your experience — every field is optional and declared by you, never inferred:

• Sectors you pick. Used to match and prioritize research in your feed, and to pre-check relevant datasets.
• Persona (student / professional / entrepreneur) and its follow-up answers (field of study, industry & function, or stage & sector). Used for cold-start recommendations and to pre-fill the context-file builder.
• Your goal (e.g. market research, feeding an AI assistant, building decks). Used to rank what we surface and to default the context-file format.
• AI tools you use. Used only for product copy and suggested-prompt examples — never for recommendations.
• Missing-dataset feedback. Free text describing a dataset or visualization you expected but didn't find. Used to prioritize what we build next — not used to personalize your own feed.
• Behavior (views, saves, downloads, return visits). Blended with the above daily to keep your recommendations current.

You can review or change your sectors and persona anytime from Edit interests, and clear everything we've learned from your behavior with Reset personalization in Settings — your account, saves, and sectors are kept.

Email consents

The weekly newsletter and new-dataset notifications are two separate consents. Neither is ever pre-ticked, opting into one never opts you into the other, and each can be withdrawn on its own — the unsubscribe link in a notification email stops notifications and leaves the newsletter untouched, and vice versa. Unsubscribing takes effect immediately, needs one click, and does not require you to log in.

To decide whether a new dataset is relevant to you we use the sectors you declared and, if you have an account, the interest weights described above. If a notification email includes a "because" line, it only ever cites something you told us yourself.

How we use your information

To provide and secure the Site, deliver content and downloads you request, personalize recommendations, send newsletters you opt into, measure and improve the product, and comply with legal obligations. We do not sell your personal information.

Service providers

We share data only with providers that help us run the Site, under agreements that limit their use of it: Supabase (database and authentication), Netlify (hosting and CDN), and — where advertising is enabled — Google (advertising and, optionally, analytics). These providers process data on our behalf.

Data retention

We keep account data for as long as your account is active and analytics data for as long as needed to understand and improve the Site. You can ask us to delete your account and associated personal data at any time.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email us at contact@deepstory.co.

Children

The Site is not directed to children under 16, and we do not knowingly collect personal data from them.

Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.

Contact

Questions about this policy? Email contact@deepstory.co.