Privacy Policy

Account and contact information. We collect the limited information needed to operate your account, such as your email address, authentication details, current plan, usage or credit balance, support messages, and any information you send when contacting us. If you use Google sign-in, we receive the account information needed to authenticate you, subject to your Google settings.

Payment information. Paddle, our merchant of record for eligible purchases, collects payment and billing details. We receive limited transaction data such as the product, amount, currency, payment status, customer identifier, and subscription status. We do not receive or store full payment-card numbers.

Investigation information. During an investigation session, we temporarily process the platform and username or profile link you submit, public-source material reviewed for the investigation, and the resulting entities, relationships, activities, inferences, evidence, and source references. Public-source material may include names, usernames, profile details, posts, public interactions, organizations, approximate locations, and timestamps made publicly available by a person or a third party. We do not write this investigation information to our database.

Technical information. We may collect IP address, browser and device type, request timestamps, authentication and security events, referral pages, and diagnostic information needed to operate and secure the Service. We design retained technical records not to contain investigation inputs, source material, or results.

• Directly from you when you create an account, submit an investigation, purchase access, or contact support.
• From publicly accessible webpages, social platforms, search results, and other open sources reviewed during an investigation.
• From service providers, including authentication providers and Paddle, when they help deliver the Service.
• Automatically from your browser or device when you use the Service.

• Provide and stream investigations, organize public evidence, and display profiles, networks, and activity.
• Create and secure accounts, authenticate users, and maintain sessions.
• Process entitlements, subscriptions, receipts, refunds, and related customer support.
• Respond to questions, rights requests, correction requests, and reports of misuse.
• Protect the Service, prevent fraud and abuse, debug failures, and enforce our policies.
• Comply with law and protect the rights, safety, and integrity of users, subjects, Ques, and others.
• Measure plan usage and understand aggregate Service performance without retaining investigation targets, source material, results, or a search history.

Where data-protection law requires a legal basis, we process information as needed to perform our contract with you, pursue legitimate interests such as operating and securing the Service and organizing lawfully available public information, comply with legal obligations, or act with consent. We assess and balance legitimate interests against the rights of affected people.

You may withdraw consent where processing relies on consent. Withdrawal does not affect earlier lawful processing.

We do not sell personal information or use investigation data for targeted advertising. We may share information only as follows:

• Service providers. Vendors supporting hosting, temporary public-source retrieval and processing, authentication, security, customer support, and technical operations, subject to appropriate confidentiality, security, and deletion obligations.
• Paddle. Transaction and account details needed for Paddle to act as merchant of record, process payments and taxes, prevent fraud, and handle billing support or refunds.
• At your direction. When you intentionally export, disclose, or otherwise direct us to transmit a result.
• Legal and safety reasons. To comply with valid legal process or protect rights, safety, security, and the integrity of the Service.
• Business transfers. In connection with a financing, reorganization, merger, acquisition, or sale of assets, subject to applicable law and continued protection of the data.

An investigation result is shown to the user who requested it during that investigation session. We do not retain it for later retrieval. You are responsible for any copy you choose to export or disclose and for its further use.

Investigation data is session-only. DeepTrail does not store investigation inputs, public-source material, browser snapshots, partial results, completed results, evidence, or source references in our database. We hold this information only in temporary, session-scoped systems while the investigation runs and while you inspect the result.

When the investigation session ends, we delete that investigation data. Completed investigations do not appear as saved history and cannot be reopened or recovered from your account after deletion. We do not keep investigation data in database backups.

Account data is separate. We retain only the account and operational information needed to provide and administer the Service, such as your account identifier, current plan, credit or usage totals, subscription status, transaction records, support correspondence, and limited security or diagnostic records. Usage records track entitlement and consumption, not the submitted account, people investigated, source material, or findings. We retain these records only for as long as needed for the account, billing, tax, accounting, fraud prevention, security, support, and legal-compliance purposes described in this policy.

DeepTrail uses administrative, technical, and organizational safeguards designed to protect information. Investigation data is encrypted in transit, isolated to temporary session-scoped processing, and deleted when the investigation session ends. Retained account and operational information is protected with access controls and encryption where appropriate. Access is limited to people and providers with an operational need.

No service can guarantee absolute security. Please use a unique password, protect your account, and report suspected compromise to [email protected].

Depending on your location and relationship with the data, you may have rights to access, correct, delete, restrict, or object to processing; receive portable data; withdraw consent; opt out of certain sharing; or appeal our response. You may also have the right to complain to a data-protection authority.

These rights may apply if you are the subject of public information shown by DeepTrail, even if you do not have an account. While an investigation session remains active, you may request review, correction, or removal of inaccurate or unlawfully processed personal information by contacting us. Once the session has ended, we cannot retrieve its deleted investigation data, but we can still address concerns about our processing practices or information that remains in account or operational records. We may need to verify your identity before acting on a request.

Submit a request to [email protected]. We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.

We use essential cookies and similar browser storage for authentication, security, session continuity, and short-lived interface state. Paddle and an authentication provider may use their own technologies when you interact with them. DeepTrail does not use cookies for targeted advertising. See our Cookie Policy for details and controls.

Ques is based in China, and the Service and its providers may process information in China and other countries. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers and provide information about those safeguards on request.

DeepTrail is not directed to anyone under 18, and users may not investigate or process information about children in ways that exploit, endanger, profile, or unlawfully monitor them. If you believe a child’s information has been processed improperly, contact us so we can review it promptly.

DeepTrail may link to public sources and integrate services operated by others, including Google and Paddle. Their privacy practices are governed by their own notices. We encourage you to review those notices, including Paddle’s Privacy Policy.

We may update this policy as DeepTrail, our data practices, or applicable laws change. We will post the revised policy and update the date above. We will provide additional notice before a material change takes effect where required by law.

The data controller for DeepTrail is Shenzhen Ques Technology Co., Ltd. For privacy questions, subject requests, or complaints, email [email protected] or visit quesx.com.