Privacy Policy

What we collect

When you create a Deepwell account, our authentication provider (Clerk) collects your email address and sign-in credentials. We store a local record linked to that account, plus:

• Your Anthropic API key, encrypted at rest (AES-256-GCM) and only decrypted in memory to run your research — never logged, never sent to your browser.
• Your research queries, generated reports, and any documents you upload for a research run.
• Your subscription status and payment-provider customer/subscription IDs (we never see or store your card details — that's handled entirely by Dodo Payments).

Who we share it with

We use a small number of infrastructure providers to run Deepwell. Each only receives what it needs to do its job:

• Anthropic — your research query and gathered sources are sent using your own API key, directly from our server, when you run a research task.
• Tavily — receives search queries to find sources for your reports.
• Clerk — handles authentication and stores your email/credentials.
• Dodo Payments — handles subscription billing as our merchant of record; they receive your payment details, we don't.
• Neon — hosts our Postgres database (encrypted keys, reports, account data).

We do not sell your data, and we do not use your research content to train any model.

Your API key

Your Anthropic API key is encrypted before it ever touches our database, using a server-only encryption key that never leaves our infrastructure. It is decrypted only in memory, for the duration of a single research request, and is never written to logs.

Your rights

You can delete your stored API key at any time from Settings. To request deletion of your account and associated data, contact us at the address below — we'll remove your account, reports, and projects from our database.

Contact

Questions about this policy or your data: reach out via the contact details on your Deepwell account, or your account's registered support channel.