Privacy

What we collect on this website

Site usage. The site uses Vercel Web Analytics, which Vercel describes as cookie-free, and a first-party event pipeline. Events carry pages viewed, content engagement, referring source and campaign parameters, device class, approximate region, an anonymous visitor and session identifier, and first-touch and last-touch attribution context. The cookies and storage page lists the browser storage behind this.

Request-access form. If you request access we collect your email address, your company, and an optional description of the agents you run. We may connect that submission with the attribution context above.

Email. If you write to us, we receive what you choose to send.

What we process in the product

For customers of app.deixic.com, DEIXIC processes account data for the people who use the workspace; agent and run metadata such as agent names, status, and run history; evidence records attached to approval decisions; spend data, meaning cost and token usage by agent; and data from tools the customer connects and authorizes agents to read.

Most of this is customer content that we process on the customer’s instructions. Our data processing addendum governs that processing.

Why, and on what basis

We use site data to understand which pages and channels bring visitors, to respond to requests, and to protect the site from abuse. We use product data to provide the product: showing spend, gating work on human approval, keeping the activity trail.

In legal-basis terms: providing the product to a customer rests on our contract with that customer; the request-access form rests on your submitting it; site analytics and abuse protection rest on our legitimate interest in running and improving the site.

Model providers

Customers can bring their own model API keys. Calls made under keys you bring go to the provider you configured, under your agreement with that provider. Model calls DEIXIC makes with its own keys route through OpenRouter.

Sharing and subprocessors

We do not sell personal information. We do not train models on customer content. The third parties that process data on our behalf, and what each one does, are listed on the subprocessors page; changes to that list are posted there.

Retention

We keep site telemetry and contact context as long as it is useful for the purposes above. Anonymous visitor and attribution storage in your browser expires after 180 days, and you can clear it sooner through browser settings.

Customer content in the product is kept for the duration of the customer relationship and handled at termination as the data processing addendum describes.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete it by emailing hello@deixic.com. If your data lives in a customer’s workspace, we may refer the request to that customer, since they control that data; we will tell you if we do.

Children

The site and product are for businesses and are not directed at children. We do not knowingly collect children’s data; if you believe we have, email us and we will delete it.

Changes

When this policy changes, we update this page and the date at the top.

Contact

Privacy questions and requests: hello@deixic.com. Security reports: security@deixic.com.