1.Who We Are
DeepQ AI is operated by DEEPQAI BUSINESS SOLUTIONS PRIVATE LIMITED, a company incorporated in India.
For the purposes of India's Digital Personal Data Protection Act, 2023, we act as the Data Fiduciary in respect of personal data we process. For the purposes of UK GDPR and EU GDPR, we act as the Data Controller.
2.What Data We Collect
We collect personal data in three ways: data you provide, data we collect automatically, and data from third parties.
2.1 Data you provide
When you register or interact with the Platform, you may provide:
- Name
- Business email address
- Organisation name
- Job title or role
- Industry and function
- Information you submit through forms (e.g., a Bootcamp request, a contact form, a careers application)
- Any other information you choose to share with us
2.2 Data we collect automatically
When you visit the Platform, we automatically collect:
- IP address and approximate location (country/city level)
- Browser type and version
- Device information (type, operating system)
- Pages visited, time spent, and navigation patterns
- Referring URL
- Cookie identifiers (see our Cookie Policy)
2.3 Data from third parties
We may receive data about you from:
- Authentication providers if you sign in via SSO (limited to your name, email, and profile identifier)
- Marketing and analytics providers
- Publicly available sources, where permitted by law
3.How We Use Your Data
We use your personal data for the following purposes:
3.1 To provide the Platform
- Creating and managing your account
- Authenticating you and securing your access
- Delivering the features you request (e.g., starting a session, running a demo)
- Responding to your enquiries and support requests
3.2 To improve the Platform
- Analysing how the Platform is used
- Diagnosing technical issues
- Developing new features and improving existing ones
3.3 To communicate with you
- Sending transactional emails about your account
- Sending product updates, case studies, and announcements (with your consent, where required)
- Contacting you regarding evaluation and engagement opportunities
- Notifying you of changes to our Terms or this Privacy Policy
3.4 To comply with legal obligations
- Responding to lawful requests from authorities
- Enforcing our Terms of Use
- Protecting our rights, property, and safety, and that of our users and third parties
4.Legal Basis for Processing
The legal basis on which we process your personal data depends on your location and the activity.
India (DPDP Act 2023): We process your personal data based on your consent at registration and for the purposes notified to you. We process data only for lawful purposes for which you have given consent or for certain legitimate uses permitted by the DPDP Act.
United Kingdom and European Economic Area (UK GDPR / EU GDPR): We process your personal data on one or more of the following bases:
- Consent: When you opt in to marketing communications or non-essential cookies
- Contract: When processing is necessary to deliver the Platform you have requested
- Legitimate interests: Improving the Platform, ensuring security, and developing our services — balanced against your rights and interests
- Legal obligation: When we are required by law to process your data
You have the right to withdraw consent at any time where consent is the legal basis.
5.How We Share Your Data
We do not sell your personal data. We share your data only in the limited circumstances described below.
5.1 Service providers
We share data with trusted third parties who help us operate the Platform — including hosting, analytics, customer support, email delivery, and authentication services. These providers are contractually bound to confidentiality and data protection obligations.
5.2 Cloud and infrastructure providers
DeepQ AI runs on cloud infrastructure provided by AWS, Google Cloud, and Microsoft Azure. Your data may be stored and processed on these providers' systems, subject to the deployment option chosen for your engagement.
5.3 Legal and regulatory disclosures
We may disclose your data when required by law, court order, or regulatory authority, or to protect our rights, property, or safety, or that of our users or third parties.
5.4 Business transfers
If DeepQ AI is involved in a merger, acquisition, financing, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.
6.International Data Transfers
DeepQ AI is based in India. Depending on the cloud region selected for your engagement and the location of our service providers, your personal data may be transferred to, stored in, or processed in countries other than your own.
Where we transfer data outside India, the United Kingdom, or the European Economic Area, we do so using lawful transfer mechanisms — including standard contractual clauses, adequacy decisions, or your explicit consent, as applicable to your jurisdiction.
7.Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements.
- Account data: retained while your account is active and for a reasonable period thereafter for legitimate business purposes.
- Usage and analytics data: retained for up to 24 months from collection.
- Marketing communications data: retained until you opt out or for 24 months of inactivity, whichever is earlier.
- Backup data: retained according to our standard backup and disaster recovery schedules.
You may request deletion of your data at any time by contacting info@deepq-ai.com.
8.Your Rights
Depending on your jurisdiction, you have certain rights with respect to your personal data.
8.1 Rights under India's DPDP Act 2023
- Right to access information about the personal data we process
- Right to correction and erasure of your personal data
- Right to grievance redressal (see Section 13 below)
- Right to nominate another individual to exercise rights in the event of your death or incapacity
- Right to withdraw consent where consent is the basis of processing
8.2 Rights under UK GDPR and EU GDPR
- Right of access to your personal data
- Right to rectification of inaccurate or incomplete data
- Right to erasure ("right to be forgotten")
- Right to restrict processing in certain circumstances
- Right to data portability — to receive your data in a structured, commonly used format
- Right to object to processing based on legitimate interests or for direct marketing
- Right not to be subject to automated decision-making that produces legal or similarly significant effects
- Right to withdraw consent where consent is the basis of processing
- Right to lodge a complaint with a supervisory authority
8.3 How to exercise your rights
To exercise any of these rights, contact us at info@deepq-ai.com. We will respond within the timeframes required by applicable law.
We may need to verify your identity before processing certain requests. There is no fee for exercising your rights, except in cases permitted by law.
9.How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Role-based access controls and workspace-level isolation
- Multi-factor authentication and SSO support for paid engagements
- Audit trails of access and administrative actions
- Regular vulnerability monitoring and penetration testing
- Documented incident response and breach notification procedures
No system is completely secure. While we work to protect your data, we cannot guarantee absolute security. In the event of a personal data breach affecting your data, we will notify you and the relevant authorities as required by applicable law.
10.Children's Data
The Platform is intended for business professionals aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact info@deepq-ai.com and we will take appropriate action.
11.Cookies
We use cookies and similar technologies on the Platform. Detailed information is available in our Cookie Policy.
12.Changes to This Policy
We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by a notice on the Platform before the changes take effect. Your continued use of the Platform after the effective date of any change constitutes your acceptance of the updated policy.
The "Last Updated" date at the top of this page reflects the most recent revision.
13.Grievance Redressal
In accordance with India's Digital Personal Data Protection Act 2023, we provide a grievance redressal mechanism for questions and complaints regarding the processing of your personal data.
We will acknowledge grievances within the timeframes required by the DPDP Act and respond as promptly as practicable.
14.Contact Us
For any questions about this Privacy Policy or how we handle your personal data, contact:
This Privacy Policy was last updated on 1 May 2026.