Privacy Policy

This Privacy Policy explains what data DEEF.AI ("we", operated by an individual based in Shanghai, China) collects and how we use it. Our guiding principle: collect as little as possible.

1. Free scans never leave your device

The free browser-based forensic engine runs 100% locally in your browser. The images you scan for free are never uploaded to us or anyone else. We receive no copy of them.

2. What we collect

• Free local scans: nothing — no image, no account, no sign-up.
• Purchases: your email address, collected by our payment provider Creem at checkout, used to deliver your license key and to let you recover it later.
• License & usage: your license key, credit balance, and deep-scan usage count, stored on our servers to operate the credits system.
• Neural Deep Scan images: when you run a paid deep scan, the image is transmitted to our inference provider for analysis and processed transiently. We do not retain your deep-scan images after the result is returned.
• On your device: we store your license key, a daily free-scan counter, and your language preference in your browser's local storage. Clearing it removes them.
• Analytics: if enabled, we use privacy-friendly, cookieless analytics (e.g. Cloudflare Web Analytics or Plausible) that do not identify you personally.

3. Payment data

All payment and card data is handled entirely by Creem, our Merchant of Record. We never see or store your full card number. Creem's processing is governed by Creem's own privacy policy.

4. Service providers (subprocessors)

• Creem — payments, billing, tax, receipts (Merchant of Record).
• Cloudflare — website hosting, API (Workers), and license storage (KV).
• Hugging Face — neural inference for the deep scan.
• Resend — transactional email (license delivery and recovery).

5. How we use data

To deliver and operate the Service: issue and verify license keys, meter and deduct credits, send your key and recovery emails, prevent abuse, and improve the Service. We do not sell your personal data.

6. Retention

We retain your license record (key, balance, purchase email) while your wallet is active so you can use and recover your credits. You can ask us to delete it (subject to legal/financial record-keeping obligations).

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your data. To exercise them, email hello@deef.ai.

8. International transfers

Our providers may process data in countries other than yours. We rely on those providers' safeguards for such transfers.

9. Children

The Service is not directed to children and is intended for users who meet the age of majority in their jurisdiction.

10. Changes & contact

We may update this policy; the effective date above will change accordingly. Questions: hello@deef.ai.

隐私政策

本隐私政策说明 DEEF.AI（"我们"，由 一位常驻中国上海的个人开发者 运营）收集哪些数据以及如何使用。我们的原则是：尽可能少地收集。

1. 免费扫描绝不离开你的设备

免费的浏览器端取证引擎100% 在你的浏览器本地运行。你免费扫描的图像绝不会上传给我们或任何第三方，我们不会获得任何副本。

2. 我们收集什么

• 免费本地扫描：不收集任何信息——无图像、无账号、无需注册。
• 购买时：你的邮箱地址，由收款服务商 Creem 在结账时收集，用于发放卡密以及供你日后找回卡密。
• 卡密与用量：你的卡密、次数余额、深扫用量计数，存储在我们服务器上以运行按次计费系统。
• 神经深度扫描图像：运行付费深扫时，图像会传输至我们的推理服务商进行分析并即时处理。返回结果后我们不会保留你的深扫图像。
• 你的设备上：我们在浏览器本地存储中保存你的卡密、每日免费扫描计数和语言偏好。清除即删除。
• 统计分析：若启用，我们使用隐私友好、无 Cookie 的统计（如 Cloudflare Web Analytics 或 Plausible），不会对你进行个人身份识别。

3. 支付数据

所有支付与银行卡数据完全由我们的 Merchant of Record Creem 处理。我们绝不接触或存储你的完整卡号。Creem 的处理受其自身隐私政策约束。

4. 服务提供方（子处理者）

• Creem —— 支付、计费、税费、收据（Merchant of Record）。
• Cloudflare —— 网站托管、API（Workers）与卡密存储（KV）。
• Hugging Face —— 深度扫描的神经网络推理。
• Resend —— 事务性邮件（卡密发放与找回）。

5. 我们如何使用数据

用于交付与运营本服务：发放与校验卡密、计量与扣减次数、发送卡密及找回邮件、防止滥用以及改进服务。我们不出售你的个人数据。

6. 数据保留

在你的钱包处于有效期内，我们会保留卡密记录（卡密、余额、购买邮箱），以便你使用与找回次数。你可要求我们删除（受法律/财务记录留存义务限制）。

7. 你的权利

视你所在司法辖区，你可能享有访问、更正或删除数据的权利。如需行使，请发邮件至 hello@deef.ai。

8. 跨境传输

我们的服务商可能在你所在地以外的国家处理数据。对于此类传输，我们依赖这些服务商的保障措施。

9. 未成年人

本服务不面向儿童，仅供达到所在司法辖区法定成年年龄的用户使用。

10. 变更与联系

我们可能更新本政策，上方生效日期将相应变更。有疑问请联系 hello@deef.ai。