Legal

Privacy Policy

Effective date: June 19, 2026 · Last updated: November 9, 2026 · Deep Cognitive LLC

We built dcAI Workflow OS to help you automate your work — not to monetize your data. We don't sell your data to anyone. Ever.

1. Who We Are

Deep Cognitive LLC ("dcAI", "we", "our", "us") operates the dcAI Workflow OS platform accessible at deepcognitive.io and flows.deepcognitive.io. For questions about this policy, contact us at sales@deepcognitive.io.

2. Information We Collect

We collect only what is necessary to provide and improve the platform:

Account information — email address, company name, and password (hashed) when you register.
Workflow data — prompts you submit, workflow definitions, connector configurations, and run logs generated by your use of the platform.
Credential vault — API keys and OAuth tokens you connect to the platform, stored AES-256 encrypted and scoped to your tenant only.
Usage data — workflow run counts, connector activity, and feature usage for billing and product improvement.
Log data — IP addresses, browser type, and timestamps for security and debugging purposes.

3. How We Use Your Information

To operate and deliver the dcAI Workflow OS service.
To authenticate your account and enforce tenant isolation.
To calculate usage and apply your plan limits.
To detect and prevent abuse, fraud, and security incidents.
To improve AI models via anonymized, aggregated patterns (see HiveMind below).
To send transactional emails (e.g., account confirmations, billing alerts). We do not send marketing emails without your explicit consent.

4. HiveMind — Anonymized AI Learning

dcAI includes a HiveMind feature that improves healing and schema mapping accuracy across the platform. When your workflows run in Sandbox mode or trigger AI healing, anonymized pattern data (field names, schema structures, healing outcomes) may be contributed to a shared model. This data is:

Fully anonymized — no tenant ID, company name, or credential data is included.
Never used to reconstruct your specific workflows or data.
Used only to improve platform-wide AI accuracy.

Anonymised workflow intent patterns derived from voice interactions (such as connector usage, industry filters, and workflow structures — never raw transcripts or PII) may also be contributed to HiveMind, subject to the same anonymisation standards described above.

Builder, Scale, and Enterprise plan tenants can opt out of HiveMind contribution by contacting sales@deepcognitive.io.

4a. Voice Processing

dcAI includes an Intelligent Voice Advisor feature available on select plans. When you use voice features:

Speech-to-text is processed entirely in your browser using the Web Speech API — no audio is transmitted to or stored by dcAI.
Your spoken text is sent to our AI backend (Anthropic Claude) for workflow intelligence processing. This is ephemeral — not stored by dcAI.
AI responses are converted to speech using Google Cloud Text-to-Speech (Chirp3-HD). Your text is sent to Google transiently for audio synthesis only.
No audio recordings are stored by dcAI at any point in this pipeline.
Anonymised workflow intent patterns derived from voice interactions may be contributed to HiveMind (see Section 4) with your consent.
Do not share personally identifiable information, patient data, financial account details, or legally privileged information through voice interactions.

Voice features are not suitable for use with regulated personal data including but not limited to protected health information (HIPAA), financial account data (FINRA/SEC), or legally privileged communications. By using voice features you confirm your interactions comply with this restriction.

By activating voice features you consent to real-time processing as described above. You may disable voice at any time in your account Settings.

5. Data Sharing

We do not sell, rent, or trade your personal data. We share data only:

With infrastructure providers — Google Cloud Platform (compute, storage, database) under appropriate data processing agreements.
With AI providers — prompts and schema data may be processed by Anthropic Claude API to generate workflow logic. Anthropic is contractually prohibited from training on your data.
With voice processing providers — Google Cloud Text-to-Speech (Chirp3-HD) receives text transiently to generate audio responses. No personal data is retained by Google for this purpose beyond their standard API processing terms.
As required by law — if compelled by a valid legal process, we will notify you unless prohibited.

6. Data Retention

Account data is retained for the life of your account plus 90 days after deletion.
Workflow run logs are retained for 90 days by default.
Encrypted credentials are deleted immediately upon connector removal or account deletion.
Anonymized HiveMind patterns are retained indefinitely as they contain no personal data.

7. Security

We implement industry-standard safeguards including AES-256 encryption at rest for credentials, TLS 1.2+ encryption in transit, JWT-based authentication with 7-day token expiry, strict tenant isolation (no cross-tenant data access), and rate limiting on all API endpoints. SOC 2 Type II audit is in progress.

8. Your Rights

GDPR (EU/EEA users): You have the right to access, rectify, erase, restrict processing, data portability, and to object to processing. You may also withdraw consent at any time without affecting prior lawful processing.

CCPA (California residents): You have the right to know what personal information we collect, the right to delete it, the right to opt-out of sale (we do not sell data), and the right to non-discrimination for exercising these rights.

To exercise any of these rights, email sales@deepcognitive.io with the subject line "Privacy Request". We will respond within 30 days.

9. Cookies

We use only essential cookies required for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

10. Children's Privacy

dcAI Workflow OS is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe we have collected such data in error, contact us immediately.

11. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated via email to registered users at least 14 days before taking effect. The effective date at the top of this page will always reflect the current version.

12. Contact

For privacy questions, data requests, or concerns:

Email: sales@deepcognitive.io
Company: Deep Cognitive LLC
Website: deepcognitive.io

This policy was last reviewed on November 9, 2026. Previous versions are available upon request. Also see our Terms of Service.