Privacy Policy

Last updated: 21 July 2026

This Privacy Policy describes how Gander ECommerce Technologies ("Gander", "we", "us"), Bengaluru, Karnataka, India, collects, uses, and protects information when you use the DeepWeb web application and API (the "Service").

1. Information we collect

Account information — when you sign in via our identity provider (Authentik SSO), we receive your name, email address, and a unique subject identifier.
Usage data — the search queries, URLs, and research prompts you submit, timestamps, response metadata, and API usage records needed to operate, meter, and bill the Service.
API credentials — API keys you create are stored only as one-way hashes; the full key is shown once at creation and never stored.
Technical data — IP address, browser type, and standard server logs for security and debugging.

2. How we use information

Provide, maintain, and meter the Service, including subscription billing.
Authenticate you and secure your account.
Show your personal activity history (audit log) back to you.
Detect abuse, enforce rate limits and plan quotas.
Improve result quality and reliability.

3. Cookies

We use a single first-party, HttpOnly session cookie to keep you signed in. We do not use advertising or third-party tracking cookies. A theme preference is stored in your browser's local storage and never sent to us.

4. Third-party processors

To return results, your queries are sent to third-party search and content providers (which may include DuckDuckGo, SearXNG, Serper, SerpAPI, Apify, and AI model providers for answers and research reports). These providers process queries under their own privacy policies. We do not sell your personal information.

5. Data retention

Account data is kept while your account is active. Usage and audit logs are retained for up to 12 months for billing, security, and abuse-prevention purposes, then deleted or anonymized. Cached results are retained briefly to improve performance.

6. Security

We use HTTPS, HttpOnly session cookies, hashed API keys, and access controls. No method of transmission or storage is 100% secure; if you suspect unauthorized access, contact us immediately.

7. Your rights

Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you may request access to, correction of, or deletion of your personal data, and may withdraw consent where processing is consent-based. Email us to exercise these rights.

8. Changes

We may update this policy; material changes will be announced on this page with a new "last updated" date.

9. Contact

Privacy questions or requests: [email protected]
Gander ECommerce Technologies, Bengaluru, Karnataka, India.