Last Updated: March 10, 2023
We reserve the right to change this Policy at any time. We will notify you of any changes to this Policy by posting a new Policy to this page, and/or by sending notice to the primary email address specified in your account. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically reviewing this Policy to check for any changes. Changes to this Policy are effective when they are posted on this page. You acknowledge that your continued use of our Services after we publish or send a notice about our changes to this Policy means that the collection, use and sharing of your Personal Information is subject to the updated Policy.
Scope and Applicability
The Policy applies to your information when you visit our website or otherwise use the Services. If legally applicable, we may collect and process your information upon the following lawful bases: consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you (e.g. to deliver the Services you have requested)), and, in some instances, for “legitimate interests” in the applicable jurisdiction. This Policy does not apply to websites, apps, products, or services that we do not own or control, including the websites, apps, products, and/or services of our Customers (defined below). This means that this Policy does not explain what our Customers do with your information that we provide to them or any information they collect directly from you and submit to us. Information provided by or to third parties, such as our Customers, are controlled by their respective privacy policies, which we encourage you to review for more information about their practices.
What Information Do We Collect?
Information We Collect Directly
When you use the Services or otherwise communicate with us, we collect information that you provide to us directly. For example, we collect information in the following circumstances: you (i) use or visit the Services, (ii) register your account to access the Services behalf (an “Account”), (iii) subscribe to newsletters; (iv) purchase a paid subscription to the Services; (vi) request technical or other customer support; (vii) otherwise use the Service where Personal Information is required for such use and/or participation, and (viii) when you contact us via the Services or when you otherwise communicate with us. You can choose not to provide information that is requested of you by us; however, this may limit your ability to use or access the Services.
The information you provide to us directly may include, without limitation, the following information that may, alone or in combination with other data, constitute Personal Information:
- Your account login information that are shared with us by the applicable third party account partner.
- Please see section title “Information Collected from Third-Party Sources” below for more details.
- Your responses to surveys that we may ask you to complete for research purposes or to help direct Company activities.
- Details of any financial transactions you participate in on the Services, including the amount, currency, and method of payment.
- Information you provide in order to subscribe to our marketing communications.
- Information you provide when communicating with us or that you otherwise voluntarily provide to us.
Information Automatically Collected
Furthermore, we may automatically collect in and through the Services the following “Technical Information”:
- Device data: including, but not limited to, the type of device you use, data on device advertising ID’s and similar hardware qualifiers, the browser you use, your operating system, and approximate geographic location data.
- Usage data: including, but not limited to, search terms entered, pages viewed, and other usage behavior identified by analytics events.
- Network and internet information: including, but not limited to, URLs, Internet Protocol addresses, bounce rates, use of spoofing, active (TCP/IP) ports, number of sessions initiated, click streams, location information and network/Wi-Fi access points.
- If you download and use the Software, DeepSource automatically collects information on the type of device You use, and the operating system version.
- Information we collect on the use of the Services via cookies and other tracking technologies: please see the “How Do We Use Tracking Technologies” section below for more information.
Information From Third Party Sources
DeepSource may also receive your Personal Information indirectly as follows: a) from third party account partners such as GitHub, GitLab, Bitbucket, Azure DevOps, our third party service provider with respect to financial transactions or your version control service provider, provided that you have authorized such disclosure or they are otherwise legally permitted or required to disclose share personal information with us; b) from other third party services where you have authorized DeepSource to connect with such third party services. DeepSource will access and store your username, name, email address(es), and other Information that the third-party service makes available to DeepSource, and use and disclose it in accordance with this Policy.
How Do We Use The Information We Collect?
We use the information we collect:
- To deliver and improve the Services and your overall user experience.
- To protect, investigate, and deter against fraudulent, unauthorized, or illegal activity.
- To link or combine user information with other Personal Information.
- To compare and verify information for accuracy and update our records.
- To email, message, or otherwise contact you with information and updates about us and the Services.
- To respond to your comments and questions and provide customer service.
- To send you information including confirmations, invoices, technical notices, updates, security alerts, and support and administrative messages.
- To analyze how you use the Services with tools such as Google Analytics, PostHog and other tools to help us understand traffic patterns and know if there are problems with the Services.
- Create targeted advertising to promote the Services and engage our users.
- In connection with a merger, acquisition, reorganization or similar transaction.
- When required by law or to respond to legal process.
- To protect our users, other individual lives, and/or the rights or property of Company.
- To maintain the security of the Services.
- For any other purpose with your consent.
Do We Share Your Personal Information?
- With our corporate affiliates and subsidiaries.
- With third parties that perform services to support our core business functions and internal operations, which may include database administrators, cloud computing services, payment processors, analytics providers, advertising services, and application services providers.
- With third parties that we have partnered with, such as to jointly create and offer a product, service or joint promotion.
- To support our audit, compliance, and corporate governance functions.
- In connection with a change of ownership or control of all or part of our business (such as a merger, acquisition, reorganization, or bankruptcy).
- If we have a good-faith belief that access, use, preservation, or disclosure of such information is reasonably necessary to detect or protect against fraud or security issues.
- If required or permitted by applicable law or regulation, including laws and regulations of the United States and other countries, or in the good faith belief that such action is necessary to: (a) comply with a legal obligation or in response to a request from law enforcement or other public authorities wherever Company may do business; (b) protect and defend the rights or property of Company; (c) act in urgent circumstances to protect the personal safety of users, customers, and contractors/employees of Company or others; or (d) enforce our Terms of Service or otherwise protect against any legal liability.
- With your consent or at your direction.
How Do We Use Tracking Technologies?
Some of the features on the Services may require the use of “cookies” - small text files that are stored on your device’s hard drive. You may delete and block all cookies from our Services, but parts of the Services may not work. We want to be open about our cookie use. The following sets out how we may use different categories of cookies and your options for managing cookie settings:
How Do We Secure Your Personal Information?
We are dedicated to safeguarding the personal data of our customers and employees. In accordance with this commitment, we comply with the principles of the General Data Protection Regulation (GDPR) when collecting, utilizing, and handling personal data. This includes adherence to principles of legality, fairness, and transparency; limiting data collection to specific purposes; minimizing the amount of data collected; ensuring accuracy; limiting data storage; maintaining integrity and confidentiality; and being accountable for data protection.
We take reasonable steps to protect your Personal Information against unauthorized access, alteration, disclosure, misuse, or destruction. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. The safety and security of your Personal Information also depends on you. For your account used to access the Services, you are responsible for keeping your membership details confidential. We urge you to take steps to keep your Personal Information safe by not disclosing your password and by logging out of your account after each use. We further protect your Personal Information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your Personal Information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using the Services, you acknowledge that you understand and agree to assume these risks.
We retain your Personal Information while your account is in existence or as needed to provide the Services to you. This includes data you or others provided to us and data generated or inferred from your use of the Services. Please note that we may retain information that is otherwise deleted in anonymized and aggregated form, in archived or backup copies as required pursuant to records retention obligations, or otherwise as required by law. We may retain an archived copy of your records as required by law or for legitimate business purposes.
Managing Your Privacy
Links to Third Party Websites
By using the Services, you agree that we will not be liable for any damage or loss caused by your use of or reliance on any content, advertising, products, or other materials on or available from these third party websites.
How We Respond to Do Not Track Signals
Your browser settings may allow you to automatically transmit a Do Not Track signal to websites and other online services you visit. We do not alter our practices when we receive a Do Not Track signal from a visitor’s browser because we do not track our visitors to provide targeted advertising. To find out more about Do Not Track, please visit http://www.allaboutdnt.com.
Children Under 16
The Services are not directed to individuals who are under age of sixteen (16) and we do not solicit nor knowingly collect Personal Information from children under the age of sixteen (16). If you believe that we have unknowingly collected any Personal Information from someone under the age of sixteen (16), please contact us immediately at email@example.com and the information will be deleted.
Third Party Direct Marketing
We currently do not share Personal Information with third parties for their direct marketing purposes without your consent.
A Note to Users Outside the United States
Our Company is based in the United States. The Services are controlled and operated by us from the United States and are not intended to subject us to the laws or jurisdiction of any state, country or territory other than that of the laws of the country(ies) where the Services are controlled. Your Personal Information may be stored and processed in any country where we have facilities or in which we engage service providers, and by using the Services you consent to the transfer of information to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Information.
Under Article 27 of the GDPR, we have appointed an EU Representative to act as our data protection agent. Our nominated EU Representative is: Instant EU GDPR Representative Ltd.
- Name: Adam Brogden
- E-mail: firstname.lastname@example.org
- Tel: +35 315 549 700
- Address: INSTANT EU GDPR REPRESENTATIVE LTD Office 2, 12A Lower Main Street, Lucan Co. Dublin K78 X5P8, Ireland
Under Article 27 of the UK Data Privacy Act, we have appointed a UK Representative to act as our data protection agent. Our nominated UK Representative is: GDPR Local Ltd.
- Name: Adam Brogden
- E-mail: email@example.com
- Tel: +44 1772 217800
- Address: 1st Floor Front Suite 27-29 North Street, Brighton England, BN1 1EB
If you have any questions about this Policy, your Personal Information, or the Services, you can contact firstname.lastname@example.org.