Privacy Policy

Account and contact information. We collect the limited information needed to operate your account, such as your email address, authentication details, current plan, usage or credit balance, support messages, and any information you send when contacting us. If you use Google sign-in, we receive the account information needed to authenticate you, subject to your Google settings.

Payment information. Waffo Pancake, our merchant of record, and its payment processors collect checkout and billing details. We share account identifiers and the email needed to associate a purchase with your account. Waffo processes payment data under its own privacy notice. Investigation inputs and results are not sent to Waffo for billing. We receive limited transaction data such as the product, amount, currency, payment status, customer identifier, and subscription status. We do not receive or store full payment-card numbers.

Investigation information. During an investigation session, we temporarily process the starting information and investigation mode you submit, public-source material reviewed for the investigation, and the resulting entities, relationships, activities, inferences, evidence, and source references. Public-source material may include names, usernames, profile details, posts, public interactions, organizations, approximate locations, and timestamps made publicly available by a person or a third party. We do not persist this investigation information unless you explicitly save a completed snapshot using a sharing or public publishing action.

Technical information. We may collect IP address, browser and device type, request timestamps, authentication and security events, referral pages, and diagnostic information needed to operate and secure the Service. We design retained technical records not to contain investigation inputs, source material, or results.

• Directly from you when you create an account, submit an investigation, purchase access, or contact support.
• From publicly accessible webpages, social platforms, search results, and other open sources reviewed during an investigation.
• From service providers, including authentication providers and Waffo Pancake, when they help deliver the Service.
• Automatically from your browser or device when you use the Service.

• Provide and stream investigations, organize public evidence, and display profiles, networks, and activity.
• Create and secure accounts, authenticate users, and maintain sessions.
• Process entitlements, subscriptions, receipts, refunds, and related customer support.
• Respond to questions, rights requests, correction requests, and reports of misuse.
• Protect the Service, prevent fraud and abuse, debug failures, and enforce our policies.
• Comply with law and protect the rights, safety, and integrity of users, subjects, Ques, and others.
• Measure plan usage and understand aggregate Service performance without retaining investigation targets, source material, results, or a search history.

Where data-protection law requires a legal basis, we process information as needed to perform our contract with you, pursue legitimate interests such as operating and securing the Service and organizing lawfully available public information, comply with legal obligations, or act with consent. We assess and balance legitimate interests against the rights of affected people.

You may withdraw consent where processing relies on consent. Withdrawal does not affect earlier lawful processing.

We do not sell personal information or use investigation data for targeted advertising. We may share information only as follows:

• Service providers. Vendors supporting hosting, temporary public-source retrieval and processing, authentication, security, customer support, and technical operations, subject to appropriate confidentiality, security, and deletion obligations.
• Waffo Pancake. Transaction and account details needed for Waffo Pancake to act as merchant of record, process payments and taxes, prevent fraud, and handle billing support or refunds.
• At your direction. When you intentionally export, disclose, or otherwise direct us to transmit a result.
• Legal and safety reasons. To comply with valid legal process or protect rights, safety, security, and the integrity of the Service.
• Business transfers. In connection with a financing, reorganization, merger, acquisition, or sale of assets, subject to applicable law and continued protection of the data.

An investigation result is shown to the user who requested it during that investigation session. If you choose to share it, we retain a separate completed snapshot and supporting evidence for later retrieval only because you deliberately chose that sharing action. Unlisted copies are accessible to anyone with the link; public copies also appear in the public gallery and may be indexed by search engines. Recipients can explore the map, download its report, and ask DeepTrail Agent about the saved evidence without your account. You are responsible for any copy you choose to export or disclose and for its further use.

Investigations are session-only by default. DeepTrail does not save ordinary investigation sessions, inputs, findings, evidence, or source material in our backend database or persistent investigation history. Temporary backend processing is needed to run an investigation and show its result; that session data is deleted when the investigation session ends. Starting an investigation, viewing its map, opening a report, or downloading a report does not by itself authorize us to save the investigation.

Saving requires a deliberate sharing action. Only when you choose to create a share link or publish a public page do we persist a separate completed snapshot in the backend for later retrieval. This saved copy includes the completed result, supporting evidence, sources and media, investigation mode, available process history, and information needed to associate the sharing action with its account. It remains available beyond the original session. The original raw starting clue, private account information, and the owner’s Agent conversation are not part of the shared copy. Shared snapshots are retained to provide ongoing access, subject to applicable operational retention, deletion, and rights-request processes.

Public and unlisted sharing are different. Anyone with an unlisted link can view that saved copy without signing in, but it is excluded from our public gallery and search indexing. Public publishing makes a separate copy discoverable in the gallery of investigations shared by everyone. Public content may be included in prerendered website files and indexed by search engines. Unlisted does not mean password protected, and recipients may forward either type of link. Search results, external caches, downloads, and recipients’ copies may outlast the original page. Account creation, ordinary usage records, and aggregate analytics do not create a saved investigation session.

Account data is separate. We retain only the account and operational information needed to provide and administer the Service, such as your account identifier, current plan, credit or usage totals, subscription status, transaction records, support correspondence, and limited security or diagnostic records. Usage records track entitlement and consumption, not the submitted account, people investigated, source material, or findings. We retain these records only for as long as needed for the account, billing, tax, accounting, fraud prevention, security, support, and legal-compliance purposes described in this policy.

DeepTrail uses administrative, technical, and organizational safeguards designed to protect information. Investigation data is encrypted in transit. Unshared investigation data is isolated to temporary session-scoped processing and deleted when the investigation session ends; explicitly saved shared copies use separate access controls and retention. Retained account and operational information is protected with access controls and encryption where appropriate. Access is limited to people and providers with an operational need.

No service can guarantee absolute security. Please use a unique password, protect your account, and report suspected compromise to [email protected].

Depending on your location and relationship with the data, you may have rights to access, correct, delete, restrict, or object to processing; receive portable data; withdraw consent; opt out of certain sharing; or appeal our response. You may also have the right to complain to a data-protection authority.

These rights may apply if you are the subject of public information shown by DeepTrail, even if you do not have an account. While an investigation session remains active, you may request review, correction, or removal of inaccurate or unlawfully processed personal information by contacting us. For a saved shared copy, include its page link when requesting review or removal. Once an unshared session has ended, we cannot retrieve its deleted investigation data, but we can still address concerns about our processing practices or information that remains in account or operational records. We may need to verify your identity before acting on a request.

Submit a request to [email protected]. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.

We use essential cookies and similar browser storage for authentication, security, session continuity, and short-lived interface state. Waffo Pancake and an authentication provider may use their own technologies when you interact with them. DeepTrail does not use cookies for targeted advertising. See our Cookie Policy for details and controls.

Ques is based in China, and the Service and its providers may process information in China and other countries. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers and provide information about those safeguards on request.

DeepTrail is not directed to anyone under 18, and users may not investigate or process information about children in ways that exploit, endanger, profile, or unlawfully monitor them. If you believe a child’s information has been processed improperly, contact us so we can review it promptly.

DeepTrail may link to public sources and integrate services operated by others, including Google and Waffo Pancake. Their privacy practices are governed by their own notices. We encourage you to review those notices, including Waffo Pancake’s Privacy Policy.

We may update this policy as DeepTrail, our data practices, or applicable laws change. We will post the revised policy and update the date above. We will provide additional notice before a material change takes effect where required by law.

The data controller for DeepTrail is Shenzhen Ques Technology Co., Ltd. For privacy questions, subject requests, or complaints, email [email protected] or visit quesx.com.