Privacy Policy

Deeluge is provided by Jemjay, LLC d/b/a Automation Consulting Services ("we", "us"). This policy explains what information Deeluge collects, how it is used and shared, how long it is kept, and the choices you have. It covers the Deeluge web app and the data it receives from Google and Microsoft when you connect your account.

• Your account: your name, email address, password (stored only as a one-way hash), the firm you belong to and your role.
• What you and your firm add: deals, teasers and CIMs you upload or forward, CRM records such as companies and contacts, notes, tasks, lists, email templates, signatures and files you attach to emails.
• Data from a mailbox or calendar you connect, described in detail below.
• Technical data: server logs of requests to Deeluge (such as time, address requested and IP address), kept to run and secure the service. We use a sign-in cookie and a cookie that remembers your light or dark theme. We do not use advertising or third-party analytics cookies.

Connecting your Gmail, Google Calendar, Outlook mailbox or Outlook calendar is optional. You choose to do it yourself, for your own account, under Settings → Email, and Google or Microsoft asks for your consent first. With your permission, Deeluge accesses:

• Your email messages (Gmail "read" access, Microsoft Mail.Read). Deeluge reads the messages you send and receive from the time you connect, and from the previous 12 months only if you choose to import them. From each message it uses the sender and recipients, the date, the subject, the message text (up to 20,000 characters), the names of any attachments, and the headers needed to keep replies in the same conversation. It uses them to add the people you correspond with to your firm's CRM, to show your emails with each contact on that contact's record, to let you reply from Deeluge, to confirm that an email sent from Deeluge was delivered to your Sent folder, and to keep the stage of your firm's deals up to date (see AI features). Attachment files in your mailbox are not downloaded. Spam, trash, drafts and messages matching your firm's filters are skipped.
• Sending email as you (Gmail send access, Microsoft Mail.Send). Deeluge sends an email from your address only when you press Send in Deeluge, or for a mass send you have scheduled, which you can cancel until it goes.
• Your calendar events (Google Calendar events access, Microsoft Calendars.ReadWrite). Deeluge reads the time, title and attendees of your events to log meetings with your contacts on their records and add attendees to your firm's CRM, and adds or removes events in your calendar for meetings you book or cancel in Deeluge.
• Your basic profile (name and email address), to know which account you connected.

Who at your firm can see what was read is set by your firm's owners and admins, as one of: who an email was with and when; that plus its subject; or the full email. You can always see your own email in full. People at your firm can see that your mailbox is connected and when it was last checked.

Deeluge's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In particular, for data from Google and Microsoft accounts:

• We use it only to provide and improve the features described above, which you can see in Deeluge.
• We do not sell it, and we do not use it for advertising, including retargeting or interest-based advertising.
• We do not use it to develop, improve or train artificial intelligence or machine learning models, ours or anyone else's. Where an AI feature reads it, as described under AI features, our AI provider processes it only to return a result to Deeluge and does not use it to train its models.
• We do not allow people to read it, except with your explicit permission (for example, when you ask us to look into a problem), where it is needed for security purposes such as investigating abuse, to comply with the law, or in aggregated, anonymised form for our internal operations.
• We transfer it to others only as described in "Who we share information with" below.

Deeluge uses large language models from Anthropic, reached directly or through Amazon Web Services, for two features:

• Deal documents. Teasers and CIMs you upload or forward are read by the model to pull out their key facts and score the deal against your firm's criteria.
• Deal stages. When someone your firm has a deal with emails a connected mailbox, the model reads that email to see whether the deal has moved on (for example, an offer made or a document signed), and either moves the deal's stage or suggests a move for someone to review. It reads only emails received in the last 3 days that are logged on a contact with a deal in your CRM, and from each one only the sender's name and address, the date, the subject and the first 8,000 characters of the text. Emails you send are never read for this. Notes, calls and meetings that people log on CRM records are read the same way. Calendar data is never sent to the model.

The model's reasons and the line it quoted are stored encrypted, and are shown only to people at your firm who are allowed to read that email. Every stage it moves can be undone. The AI provider processes this data only to return a result to Deeluge; it is not used to train any AI model.

• To provide Deeluge: screening deals, running your firm's CRM, keeping deal stages up to date, sending and logging email, and syncing meetings.
• To keep Deeluge secure, prevent abuse, and fix problems.
• To send you messages about your account, such as sign-in links, password resets and reminders you set up.
• To comply with the law.

We do not sell personal information. We share it only:

• Within your firm, under the visibility settings your firm's owners and admins choose.
• With apps you connect yourself. If you connect another app, such as an AI assistant, to Deeluge under Settings → MCP, it can read the Deeluge data you allow on its consent screen. It can read your logged emails only if you tick Emails there, and only those you could see in Deeluge yourself. You can disconnect it at any time.
• With the service providers that run Deeluge for us, under contracts that let them use the data only to provide their service: Google Cloud (hosting, database and file storage), Anthropic, directly or through Amazon Web Services (the AI features above), Amazon Web Services (sending Deeluge's own emails, such as sign-in links), and Postmark (receiving deal emails forwarded to your firm's Deeluge address). Data from your mailbox and calendar is stored on Google Cloud. The AI provider receives only the parts of received emails described under AI features, and never calendar data.
• When the law requires it, or to protect the rights and safety of our users or the public.
• If our business is sold or merged, to the new owner, who must keep honouring this policy.

• All traffic to Deeluge is encrypted (HTTPS).
• Email messages, deal documents, attached files and the access tokens for connected accounts are stored encrypted (AES-256-GCM), in addition to the encryption of the underlying storage.
• Each firm's data is kept apart from every other firm's by the database itself, and a person's drafts, outbox and private files are kept from their colleagues the same way.
• Access to production systems is limited to the people who need it to run Deeluge.

• Disconnecting a mailbox or calendar (Settings → Email → Disconnect) stops all access straight away, and revokes and deletes our access tokens. You can also remove Deeluge's access from your Google Account or Microsoft account.
• Contacts already added and emails and meetings already logged stay part of your firm's CRM records after you disconnect, so your firm keeps its history with its contacts. To have the emails read from your mailbox deleted, ask your firm's admin or write to us at privacy@deeluge.com.
• Drafts are kept until you send or discard them. Files you attach to an email are deleted once no draft, template, signature or unsent email uses them.
• When a firm closes its account, or you ask us to delete your account, we delete the data within 30 days, except where the law requires us to keep it. Copies in backups are overwritten on their normal schedule.

You can see and correct your account details in Deeluge, disconnect any mailbox, calendar or connected app at any time, and ask us for a copy of your personal information or for it to be deleted. Depending on where you live, you may have further rights under local law. To make a request, write to privacy@deeluge.com. If your firm manages your account, we may pass your request to your firm.

Deeluge is for businesses and is not meant for anyone under 18.

We will post any change here with a new effective date, and tell account holders in advance of any change to how we use data from Google or Microsoft accounts.

Jemjay, LLC d/b/a Automation Consulting Services
971 US Highway 202N Ste A, Branchburg, NJ 08876
privacy@deeluge.com