Deemerge Privacy Policy
1. Introduction
Deemerge ("we," "us," or "our") provides an AI-powered tool that reads business messages from services you connect — Slack and Gmail — and turns them into work items that need action. This Privacy Policy describes the data we collect when you use our website (deemerge.ai), our product (the Deemerge dashboard) and the services you connect; how we use it; who we share it with; and the rights you have over it.
This policy applies to:
- Visitors to deemerge.ai
- People who sign up for our waitlist or product
- Authorized users of the Deemerge product
- People whose messages or profile information appear in services connected to Deemerge (for example, members of a connected Slack workspace, or people who exchange email with a connected Gmail mailbox)
If you have questions about this policy, contact us using the details in Section 14.
2. Information We Collect
2.1 Information you provide directly
- Account and waitlist information. When you create an account or join our waitlist, we collect your name, work email address, company name, company size, role, and country.
- Authentication data. We use Clerk, a third-party authentication provider, to manage sign-in. Clerk may collect login identifiers, session tokens, and security signals on our behalf.
- Communications. When you contact us, we keep a record of the exchange to respond to you and improve our service.
2.1 Information you provide directly
- Account and waitlist information. When you create an account or join our waitlist, we collect your name, work email address, company name, company size, role, and country.
- Authentication data. We use Clerk, a third-party authentication provider, to manage sign-in. Clerk may collect login identifiers, session tokens, and security signals on our behalf.
- Communications. When you contact us, we keep a record of the exchange to respond to you.
2.2 Information we receive from connected services
When you connect Slack or Gmail, we receive data from that service based on the permissions you grant. Section 4 describes Slack and Section 4B describes Gmail.
2.3 Information collected automatically
- Technical data. Like any website, our servers receive your IP address and browser details when you use Deemerge.
- Cookies. Signing in uses cookies to keep you signed in. You can manage cookies through your browser settings.
3. How We Use Information
We use the information we collect to:
- Operate the product — read messages from the services you connect, analyze them, and show the resulting work items on your dashboard.
- Authenticate users and secure accounts.
- Communicate with you about your account and the product.
- Comply with legal obligations and enforce our terms.
We do not sell personal data. We do not use message content for advertising. We do not train AI models on your data.
4. Slack
4.1 What we receive from Slack
When you install the Deemerge Slack app and choose channels, we receive:
- The text of messages in the channels you choose in the Deemerge dashboard.
- Message details: timestamps, channel identifiers and thread context.
- The Slack user IDs of the people who send those messages.
- Profile information of members of the connected Slack workspace: name and display name, first and last name, email address, title, whether the member is a guest or from another organisation, phone number, pronouns, status text and profile-picture links. We use the name, email address and title to show who said what and who a work item belongs to.
- Channel details (name and members) for the channels you choose.
- Files shared in those channels (images, PDFs and spreadsheets): an AI describes them and we keep that description, which can include parts of the file's content.
4.2 What we do not receive from Slack
- Direct messages. The Slack app does not ask for permission to read direct messages.
- Voice or video calls.
4.3 How we use Slack data
Only to run Deemerge for your workspace: to find situations that need action and show them to the right person on your dashboard. We do not use Slack data for advertising and do not sell it.
4.4 How Slack data is processed
Message text is sent to the AI providers listed in Section 5 to find situations that need action.
4.5 Slack data retention
- We keep AI-written summaries of your messages and the work items built from them while your account is active. They can include names, contact details, reference numbers and some original wording. You can ask us to delete them at any time (Section 14). Workspace and member details are kept while your Slack connection is active. To disconnect Slack, remove the Deemerge app from your Slack workspace; we stop receiving messages at once.
4.6 Your rights regarding Slack data
You can remove the Deemerge app from your Slack workspace at any time. To have derived insights deleted, contact us (Section 14) or ask for account deletion (Section 11).
4B. Gmail
What we ask Google for
When you connect Gmail, we ask Google for permission to read your Gmail messages and settings, and to know your Google account's email address and basic profile. We do not ask for permission to send, change or delete your email.
What we read
- Mail from a start date shown to you before you connect (by default, 30 days before you connect): your inbox, the mail you sent, and archived mail.
- We never take in mail that is in your Spam, Trash or Drafts. An email we have already stored stays stored if you move it to Trash later. By default we also leave out your Promotions, Social and Forums tabs.
- In Settings you can leave out particular people, whole email domains, or your own Gmail labels; from then on we do not keep that mail.
- For each email we read the headers (sender, recipients, subject, dates), the text, and any attachments.
What we keep
- About you, from your Google account: your name (as Google gives it, including first and last name), your email address, the web address of your Google profile picture (not the picture itself), whether Google has verified your email address, your Google Workspace domain if you have one, your language setting if Google gives one, and Google's identifier for your account. We also use your name as your name in your Deemerge workspace.
- For each email: the names and email addresses of the sender and recipients, the subject, the dates and Gmail's own references.
- For each attachment: its name, type, size and a short AI-written description of its content. We do not keep the attachment file.
- We do not keep the full text of the email in our Gmail store.
- The access Google gives us is stored encrypted.
How AI is used
To analyse your email and describe its attachments, we send parts of the email (such as its subject, its sender and an extract) and text from attachments to Google's Gemini API (paid tier).
How long we keep it
We keep the email details listed above while your mailbox is connected, and after you disconnect until you ask us to delete them. When you disconnect, we stop reading at once and ask Google to cancel the access it gave us; we delete that access once Google confirms the cancellation. We keep your profile details, including your name in your Deemerge workspace, after you disconnect, until they are deleted at your request. To have the email details and the profile details deleted, contact us (Section 14).
Google API Services User Data Policy
Deemerge's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. AI Providers
Deemerge sends message content to AI models to analyze it. This is core to how the product works.
- Google (Gemini API).
- OpenRouter — which routes our requests to the model providers that serve them: DeepInfra, SambaNova and Microsoft Azure; OpenAI may also serve one of these models.
Anthropic (Claude), for part of the analysis of Slack messages . Anthropic does not train on what we send and deletes it within 30 days, unless it is flagged for abuse (then up to two years).
We do not send customer data to AI providers hosted in China. We send only the message content and context needed for the analysis, and nothing from channels or mail you have not connected.
6. Sub-Processors
- Amazon Web Services — Application servers and databases / United States, Virginia
- Hostinger — Copies of earlier data, until we retire that server / Jakarta, Indonesia
- Google (Gemini API) — AI analysis / Google's servers (may be outside the United States)
- OpenRouter —AI model access / United States
- Anthropic — AI analysis / Anthropic's servers (may be outside the United States)
- Clerk — Account sign-in and identity / United States
- Stripe — Payment processing / United States
- Resend —Transactional email delivery / United States
- Fastmail — Our own email inbox (support and privacy requests) / Australia
Sub-processor
Purpose
Location
EU data residency available on request for enterprise customers.
7. Data Retention
- Slack and Gmail data: as described in Sections 4.5 and 4B.
- Account information: for as long as your account exists.
- Marketing and waitlist data: until you unsubscribe or ask us to delete it.
- When you ask for your account to be deleted, see Section 11.
8. Data Security
- Slack sign-in tokens and incoming Slack messages are stored encrypted.
- Authorised Deemerge staff can see account information (your name, email address and sign-in status) to operate the service, secure accounts and answer requests.
- We are not SOC 2 certified.
- If we become aware of a breach affecting your data, we will notify you as required by law.
9. Where Your Data Is Processed
Our application and our databases are hosted by Amazon Web Services in the United States (Virginia). Part of our Gmail service still runs on a server hosted by Hostinger in Jakarta, Indonesia, where copies of earlier data are also kept until we retire that server. Your data is therefore processed in the United States and in Indonesia, and by the AI providers named in Section 5.
10. Your Rights
You can ask us to give you a copy of your personal data, correct it, delete it, restrict or object to its processing, or give it to you in a machine-readable format, and you can withdraw consent at any time. If you are in the EEA, the UK or California you may have further rights under the GDPR, UK GDPR or CCPA/CPRA. To exercise any right, contact us (Section 14). We answer verified requests within 30 days. You may also complain to your local data protection authority.
11. Account Deletion
You can ask for your account to be deleted at any time.
You can also disconnect Slack or Gmail on its own; see Sections 4.5 and 4B for what happens to the data.
12. Children
Deemerge is a business product and is not directed to children under 16. If you believe we have collected data from a child, contact us and we will delete it.
13. Changes to This Policy
When we make material changes we will tell you before they take effect, for example by email or in the product. The "Last updated" date at the top shows when this policy last changed.