Privacy Policy
Who we are
Deana is operated by DEANA.AI INC., an Illinois corporation, at 220 N Green St, 2nd Floor, Chicago, IL 60607. Questions about this policy or your information go to hello@deana.ai. This policy explains what we collect when you use the Deana service or this website, what we do with it, where it is kept, and the choices you have.
What we collect
Account and business details. Your name, business name, trade, email address, mobile number, business address, how you get paid, and the tax rates and registration numbers you want on your documents. If you give them to Deana, also your logo, licence number, insurance details, and your taxpayer identification number for W-9s.
What you send Deana. Your emails and, later, text messages, including photos of receipts, forwarded emails, and attachments. Deana reads them to do what you ask.
What Deana makes for you. Receipts as filed, estimates, invoices, payment records, job records, weekly summaries, and standing documents.
Your customers' details. The names, email addresses, and addresses of the people you ask Deana to bill, and the record of what was sent to them and when they approved, viewed, or paid. You are responsible for having the right to share that information with us.
Payment. When you pay for Deana, our payment processor collects your card details. We receive confirmation of payment and the last digits of the card; we never see or store the full card number.
Technical records. Delivery records from our email and text providers, the network address and browser type of visitors to our website and signup form, and operational logs that let us find and fix problems. We use a bot check on the signup form, provided by our hosting provider, which may set a cookie for that purpose only. We do not use advertising cookies or trackers.
How we use it
To run Deana for you: reading your messages, filing your records, preparing and sending documents in your name, reminding your customers, answering your questions, and sending you summaries. To keep the service safe: checking that a message really came from you, limiting abuse, and investigating problems. To bill you and to tell you about your account, your trial, and changes to the service. We do not sell your information, share it with advertisers, or use your documents to build profiles of you or your customers.
Automated processing and AI
Deana is software. To understand what you send and to write replies and documents, we use artificial-intelligence models provided by Anthropic, PBC, under commercial terms that prohibit using our data to train their models. The content of your messages and attachments is sent to that provider for processing and is not retained by them beyond what is needed to process the request and to enforce their usage policies. Decisions that matter, such as sending a document to one of your customers, happen only on your instruction, and you receive a copy of everything sent.
Where your information lives and how it is protected
Deana runs on Cloudflare, Inc. infrastructure in the United States. Your records and database are encrypted at rest with AES-256 and in transit with TLS. Cloudflare's platform is audited under SOC 2 Type II and ISO 27001; details are at cloudflare.com/trust-hub. On top of that, the most sensitive items, such as taxpayer identification numbers, are encrypted a second time with keys that only our application holds, and Deana never repeats them back in a message. Access to production systems is limited to the people who run the service, protected by multi-factor authentication, and logged.
Deana checks that instructions come from your registered email address, asks for a separate confirmation before sensitive actions, ignores mail that fails authentication checks, and limits how often anyone can attempt to sign up or send. Attachments that arrive by email are held in temporary storage only until they are read and filed, then removed; anything not filed is deleted within three days. No system is perfectly secure; if we learn of a breach affecting your information, we will tell you without undue delay and as the law requires.
Who we share it with
Service providers who process information on our behalf and under contract: Cloudflare (hosting, storage, and the signup bot check), Anthropic (AI processing), Resend (email delivery and receipt), Twilio (text messages and calls, when those features are on), and Stripe (payments). Each receives only what it needs for its part.
Your customers receive the documents and reminders you ask Deana to send, which carry your business name and contact details, not ours.
Authorities, when the law requires it, or to protect the rights or safety of you, us, or others; and a successor, if the business that operates Deana is sold or merged, under this policy.
How long we keep it
Your records are kept for as long as your account is open, because a receipt from three years ago is exactly what you will need at tax time. If you start signing up and stop, the partial account is deleted after 30 days. When you close your account, or it stays paused and unpaid for 90 days, we keep your records for a further 90 days so you can ask for a copy, then delete them from our live systems; backups roll off within 30 days after that. Records we must keep by law, such as billing records, are kept for the period the law requires.
Your choices and rights
You can ask Deana for a full copy of your records at any time, correct any detail by telling her, and ask us to delete your account and everything in it by emailing hello@deana.ai from your registered address. We will confirm when it is done. Depending on where you live, including under Canada's PIPEDA and provincial privacy laws, the EU and UK GDPR, and US state privacy laws, you may have further rights to access, correct, port, restrict, or object to our use of your information, and to complain to a privacy regulator. We honour those rights for everyone, wherever they live, and we will never treat you differently for exercising them.
Every email we send you about your account can be replied to. Marketing emails, if we ever send any, will carry an unsubscribe link.
Customers outside the United States
If you are in Canada or elsewhere, your information is transferred to and stored in the United States, where privacy laws may differ from your own. We protect it as described in this policy wherever it is. By using Deana you consent to that transfer.
Children
Deana is for businesses and is not directed to children. We do not knowingly collect information from anyone under 18.
Changes
If we change this policy, we will post the new version here with a new effective date and email account holders about changes that matter before they take effect.