Privacy Policy

1. Who We Are

DeepThread is developed by Algolog, a company dedicated to building AI-powered tools to enhance collaborative workflows. Our primary service analyzes issues and discussions on platforms like GitHub and Slack, with plans to support Google Chat and Microsoft Teams in the future. We prioritize user privacy and collect only the data necessary to provide our services.

2. Data We Collect

We collect minimal data to deliver DeepThread’s functionality, authenticate users, and improve our services. Below are the types of data we collect, categorized as per Chrome Web Store requirements:

2.1 Personally Identifiable Information (PII)

• What We Collect: Email address and user ID (obtained via GitHub, Google, or Slack OAuth authentication).
• Future Plans: User IDs from Google Chat and Microsoft Teams OAuth when these platforms are supported (Q3/Q4 2025). We may also collect usernames for display in collaborative features.
• Purpose: To authenticate users, link accounts to DeepThread, and personalize your experience (e.g., associating conversation history with your account).

2.2 Authentication Information

• What We Collect: OAuth access tokens and refresh tokens from GitHub, Google, and Slack to access platform data on your behalf.
• Future Plans: OAuth tokens for Google Chat and Microsoft Teams.
• Purpose: To securely fetch GitHub issues and Slack threads (and future platform data) for AI analysis.

2.3 Personal Communications

• What We Collect: Content of GitHub issues (e.g., title, body, comments) and Slack threads (e.g., messages, timestamps) that you explicitly request DeepThread to analyze.
• Future Plans: Messages/threads from Google Chat and Microsoft Teams.
• Purpose: To provide AI-driven summaries and solutions based on the content you request us to analyze.

2.4 User Activity

• What We Collect: API call counts (daily/monthly) to track usage quotas (e.g., 10 requests/day for Free tier users).
• Future Plans: Potentially aggregate interaction metrics (e.g., clicks on the “Upgrade” button) to improve user experience.
• Purpose: To enforce usage limits and ensure fair access to DeepThread’s services.

2.5 Website Content

• What We Collect: Specific content from GitHub issues and Slack threads (e.g., text content) that you request for analysis.
• Future Plans: Messages/threads from Google Chat and Microsoft Teams.
• Purpose: To enable AI analysis and deliver insights through the DeepThread interface.

2.6 Data We Do Not Collect

• Health information (e.g., heart rate, medical history)
• Location data (e.g., GPS, region), though we may collect IP addresses in the future for security purposes.
• Web history (e.g., browsing history outside GitHub/Slack).
• Invasive user activity (e.g., mouse position, keystrokes).
• Unrelated website content (e.g., images, videos, or hyperlinks not part of requested issues/threads).

3. How We Use Your Data

We use your data to provide, maintain, and improve DeepThread’s services, ensuring a seamless experience across platforms. Specifically:
Authentication: Email and user IDs are used to authenticate you via GitHub, Google, or Slack OAuth, enabling secure access to your accounts.
Platform Data Access: OAuth tokens allow us to fetch GitHub issues and Slack threads (and future platform data) for analysis.
AI Analysis: Issue/thread content is processed by AI models (Google Gemini, Anthropic, Cohere, OpenRouter) to generate summaries and recommendations.
Quota Management: API call counts ensure fair usage (e.g., 10 requests/day for Free tier).
Service Improvement: Aggregate metrics (e.g., API usage trends) help us optimize performance and user experience.
We do not use your data for advertising, profiling, or any purpose beyond delivering DeepThread’s core functionality.

4. Data Sharing and Third-Party Disclosure

We share your data only as necessary to provide DeepThread’s services, with strict safeguards in place:
Platform APIs: We share OAuth tokens with GitHub and Slack (and future platforms like Google Chat and Microsoft Teams) to fetch issues/threads on your behalf.
AI Models: Issue/thread content is sent to third-party AI providers (Google Gemini, Anthropic, Cohere, OpenRouter) for analysis. These providers do not retain your data post-processing, and we ensure they comply with privacy standards.
Email Notifications: We use Google Mailer to send notifications (e.g., quota warnings), sharing your email address with Gmail’s SMTP server.
No Unrelated Sharing: We do not sell, share, or disclose your data to third parties for marketing, advertising, or any purpose unrelated to DeepThread’s functionality.

5. Data Storage and Security

We take robust measures to protect your data:
Storage: Data (e.g., email, OAuth tokens, conversation history) is stored in a PostgreSQL database (hosted on Neon), encrypted at rest using AES-256.
Transmission: All data in transit is encrypted using TLS 1.3.
Retention:
- Conversation history: Retained for 90 days (Free tier) or indefinitely (Pro tier, unless deleted by you).
- Authentication tokens: Stored until you disconnect a platform or your account is deleted.
Backups: Daily backups are encrypted and stored securely with Neon or AWS S3, accessible only to authorized personnel.
Access Controls: Only authorized Algolog staff can access user data, and only for support or maintenance purposes.

6. Your Rights and Controls

We empower you to manage your data:
Access and Deletion: View or delete your conversation history via the Chrome extension or web dashboard (Settings > History).
Platform Disconnection: Disconnect GitHub, Slack, or other platforms at any time via the dashboard, revoking access tokens.
Account Deletion: Email info@algolog.co to delete your account and all associated data.
Opt-Out of AI Analysis: Disable AI analysis in the extension settings to prevent data from being sent to AI models.
Data Portability: Request a copy of your data (e.g., conversation history) by contacting info@algolog.co.

7. Cookies and Tracking

Cookies: DeepThread uses cookies for session management (e.g., via Firebase Auth and NextAuth) to maintain your login state across sessions. These cookies are strictly functional and not used for tracking or advertising.
No Tracking: We do not use cookies or other technologies to track your browsing activity outside DeepThread’s services.

8. Compliance with Laws

Algolog complies with applicable privacy laws, including
GDPR: For EU users, you have the right to access, rectify, or delete your data, and we process data under the lawful basis of contract (to provide DeepThread’s services).
CCPA: For California users, you can request disclosure of data collected and opt-out of data sharing (though we do not sell data).
COPPA: DeepThread is not intended for users under 13, and we do not knowingly collect data from children.

9. International Data Transfers

Algolog is based in Abuja, Nigeria, but your data may be processed in other regions (e.g., where our servers or AI providers are located, such as the US). We ensure all transfers comply with applicable laws (e.g., GDPR’s Standard Contractual Clauses) and use secure encryption to protect your data during transfer.

10. Third-Party Links

DeepThread may link to external sites (e.g., GitHub, Slack, or AI provider documentation). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before interacting with them.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. If we make significant changes (e.g., new data collection practices), we’ll notify you via email or in-app alerts at least 30 days before the changes take effect. The updated policy will be posted on this page with a new “Last Updated” date.

12. Contact Us

For questions or requests, contact us:
Email: info@algolog.co
Address: 5, Kwaji Close, Abuja, Nigeria
Website: https://www.deepthread.ai
We’ll respond to your inquiries within 30 days and work to address any concerns promptly.