Privacy Policy
DeeVec ("we", "our", or "us") is a Chrome extension that captures web pages you choose to save and lets you search them by meaning. This privacy policy describes what data DeeVec collects, why we collect it, how it is stored, who it is shared with, and how you can control or delete it.
This policy applies to the DeeVec Chrome extension and the DeeVec website at deevec.dev. The website sets no cookies and runs no analytics; standard hosting infrastructure logs are the only website data processed. DeeVec is offered to users in the United States, Canada, Australia, and New Zealand; we will update this policy before offering the Service in additional regions.
What data we collect
DeeVec collects the following categories of data. These categories match the data disclosures in the Chrome Web Store Developer Dashboard.
Web browsing activity
When you capture a page (manually or via auto-capture), DeeVec records the URL and page title of the captured page. We do not record or transmit URLs of pages you visit but do not capture. Auto-capture is opt-in, off by default, and can be disabled at any time in the extension settings. Access to browse-all-websites is an optional permission that the extension requests at runtime only when you enable features that need it; it is not required at install.
DeeVec includes a configurable capture blocklist that prevents sensitive domains (such as banking, healthcare, and password manager sites) from being captured, even accidentally via auto-capture. You can customize this blocklist at any time. Your custom blocklist rules (domains, page patterns, and content rules with their labels) are stored on our servers so they can be enforced across your capture activity, and they are deleted when your account is deleted.
Website content
DeeVec extracts the text content of pages you capture. This text is split into paragraph-level chunks, converted into numerical vectors (embeddings) for semantic search, and stored alongside the original text. We do not capture images, videos, cookies, form inputs, passwords, or any data beyond the text content of the page.
Content you create
Notes, highlights, collection names, and favorite/like markers you create in the extension are stored with your account so they can be shown back to you and searched. They are deleted when you delete them or your account.
Log data
Like most online services, our infrastructure records technical log data when the extension communicates with our servers, including IP addresses, user-agent strings, and request metadata. Application and infrastructure logs are retained for 90 days.
Personally identifiable information
When you create an account, we collect your email address through our authentication provider (AWS Cognito). We do not access your contacts, calendars, or any other data from your authentication provider.
Authentication information
DeeVec stores authentication tokens (JWT) locally in your browser's extension storage to keep you signed in. These tokens are not transmitted to any third party.
Payment information
If you subscribe to DeeVec Pro, payment processing is handled entirely by Stripe. We do not receive, store, or have access to your credit card number or payment method details. We receive only your subscription status and Stripe customer identifier.
Why we collect this data
Every category of data listed above is collected solely to provide DeeVec's core functionality: capturing web pages and letting you search them by meaning. Specifically:
- URLs and page titles are stored so you can identify and navigate back to your captured pages.
- Page text content is extracted and embedded so you can search your captured pages semantically.
- Your email address is used for account authentication and to send you service communications, including account verification codes, billing confirmations, security alerts, administrative messages, and notices of changes to our Terms of Service or this Privacy Policy.
- Authentication tokens keep you signed in to the extension.
- Subscription status determines whether you have access to Pro features.
- Notes, highlights, collection names, and markers you create are stored so they can be shown back to you and searched.
- Blocklist rules are stored so your capture preferences can be enforced.
- Log data is used for security and troubleshooting.
Service communications are part of operating DeeVec and you cannot opt out of them while you maintain an account. We do not currently send marketing email; if we ever do, marketing messages will be clearly separate and will include an option to unsubscribe.
We do not use your data for advertising, analytics profiling, AI model training, or any purpose other than providing the DeeVec service to you.
DeeVec does not include any analytics SDKs, telemetry, or tracking pixels. The semantic search embeddings used to power DeeVec's search are generated on our own infrastructure and are never sent to any third-party AI provider.
How we store and protect your data
Your captured pages, text content, and embeddings are stored in a database hosted on Amazon Web Services (AWS) in the United States. Data is encrypted at rest at the storage level using a customer-managed encryption key, and encrypted in transit using TLS. To make search work, your captured content is processed and stored in a form our systems can read; we do not use field-level or end-to-end encryption. Your database records are isolated by your user account and cannot be accessed by other users. DeeVec personnel are technically able to access stored content; that access is restricted to the limited purposes described in the Chrome Web Store section below.
Authentication tokens are stored locally in your browser's extension storage and are never sent to any server other than the DeeVec API and our authentication provider (AWS Cognito).
Our security controls include IAM-based database authentication with no static database passwords, per-user row isolation enforced in the database itself, encryption key rotation, and multi-factor authentication on all administrative access.
Security incidents
If a security incident affects your personal data, we will investigate and notify affected users consistent with applicable law, including the notification timelines required by Florida law.
Who we share your data with
We do not sell, rent, or trade your data to anyone.
Your data is shared only with the following service providers, solely to operate the DeeVec service:
- Amazon Web Services (AWS) - cloud infrastructure, database hosting, and authentication (Cognito). Subject to the AWS Privacy Policy.
- Stripe - payment processing for DeeVec Pro subscriptions. Subject to the Stripe Privacy Policy. Stripe receives only the data necessary to process your payment.
We do not share data with advertising platforms, data brokers, analytics providers, or any other third parties.
We may disclose data if we are legally compelled to do so, for example by a valid subpoena, court order, or other lawful process. Unless the law prohibits it, we will notify you before disclosing your data in response to legal process, or as soon as legally permitted afterward.
Data retention and deletion
You can delete individual captured pages or entire collections at any time from within the extension. Deleted content is removed from our live database promptly and ages out of encrypted backups within 7 days.
Buffer pool pages (auto-captured content) are eligible for removal after 7 days or when the buffer reaches capacity, whichever comes first. Pages are periodically cleaned up unless you explicitly save them to your persistent collection.
To delete your account and all associated data, use the Delete Account option in the extension's profile settings; self-serve deletion takes effect immediately. You can also contact us at [email protected] from the email address associated with your account; we may ask you to confirm the request inside the extension. We will delete all of your data from our live systems within 30 days of receiving your email request, and deleted data ages out of encrypted backups within 7 days after removal.
In summary: persistent pool content is kept until you delete it; buffer pool content is kept up to 7 days (or less, if trimmed for capacity); account information is kept until your account is deleted; application and infrastructure logs are kept for 90 days; payment records are retained by Stripe under its own policy. All deleted data is additionally subject to the encrypted-backup aging period above.
Your rights
All users
Regardless of where you are located, you can:
- View all data DeeVec has stored for you (your captured pages, collections, and account information are visible in the extension).
- Delete any or all of your captured content at any time.
- Request a copy of your stored data by emailing [email protected] from the email address associated with your account.
- Delete your account and all associated data from the extension's profile settings, or by emailing [email protected].
- Disable auto-capture at any time in the extension settings.
California (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your rights, contact [email protected].
Children's privacy
DeeVec is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
Chrome Web Store Limited Use disclosure
DeeVec's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:
- We only collect and transmit web browsing activity to the extent required for DeeVec's user-facing search functionality, which is described on our Chrome Web Store page and in the extension's user interface.
- We do not transfer or sell user data to third parties, including advertising platforms or data brokers.
- We do not use or transfer user data for personalized advertisements.
- We do not use or transfer user data to determine creditworthiness or for lending purposes.
- Human access to user data is restricted to security investigations and compliance with applicable law.
Changes to this policy
We may update this privacy policy from time to time. If we make material changes, we will notify you by email before they take effect and update the "Last updated" date at the top of this page. Continued use of DeeVec after changes take effect constitutes acceptance of the updated policy.
Contact
DeeVec is operated by Ricky Chen, doing business as DeeVec. If you have questions about this privacy policy or your data, contact us at [email protected] or by mail at:
Ricky Chen d/b/a DeeVec
924 N Magnolia Ave, Suite 202, Unit #5371
Orlando, FL 32803