Privacy notice

What we collect, why, where it is kept, for how long, and how to see, fix or delete it. In short: this site sets no cookies. We keep what you type into a form, what Dodo Payments tells us about an order, and a short record of each license check.

Who we are

Deedglass is run by Arjun Prabhakaran in India. Postal address: available on request at hello@deedglass.com. Write to hello@deedglass.com about anything on this page.

This website

This site sets no cookies and loads nothing from other domains. We count visits to our own short links (deedglass.com/r/…) by link, referring site, country and time, without cookies, IP addresses or anything that identifies you.

When you send a form, we keep what you typed: your email address, and, if you give them, your name, company, role, what your agent does, what it can touch, your agent stack, where you first heard about Deedglass, the page the form was on and the short link code you arrived with (ref).

To stop floods of sign-ups and license checks we keep a one-way hash of your network address, salted with a secret, as an hourly rate-limit counter. Counters older than 48 hours are deleted the next time the clean-up runs, which happens as forms are sent. We never store the address itself, your browser's user agent, or a cookie.

A form refuses text that looks like an API key, token or password before anything is stored, and the text you sent is not logged or kept.

Orders and licenses

Dodo Payments sells the founding place and Pro as the merchant of record. It collects your payment and billing details on its own pages; we never see card numbers.

What our database keeps for orders. When Dodo tells us about an order, we keep in Cloudflare D1: what you bought, the price, when, its status, Dodo's order and customer ids, the short link code you came with, whether you asked for onboarding emails, and your email address. We keep a one-way hash of your license key, never the key itself. Each license check records that hash, a random id your copy of Deedglass made for the machine, the plan and the time. Your email address is held only in the order, in the queue of emails about it and in setup requests; every other table holds only a hash of it. We delete the addresses 24 months after your last order. No network address is stored.

Setup requests. When you ask for an AI Agent Safety Setup quote, we keep your email, company, the number of agents, what they touch, the tier you picked and what you wrote, until 12 months after the quote is closed. The form refuses keys and passwords.

Setup payments. When you pay a Safety Setup quote through a Razorpay payment link, Razorpay tells our site about the payment. We keep in Cloudflare D1: Razorpay's event, payment and link ids, the quote reference on the link, the amount, the currency, the tier, whether it was a test payment, when it was paid and when we heard about it, and a one-way hash (SHA-256) of the email address Razorpay sends, never the address itself. Our own order records copy the tier, the amount and the time, keyed by that hash hashed once more. We keep these rows with our order records.

The newsletter. If you subscribe on the Resources page, we keep your email address and where you heard about us. We send at most two emails a month, and each one says how to leave. To leave or be deleted at any time, write to hello@deedglass.com.

Buyer emails. Dodo Payments sends your invoice and license key. We send no order email of our own yet. Before we start, this page will say so with a new date: email about your order and license, a short onboarding series only if you asked for it at checkout, sent by Resend, each onboarding email with an unsubscribe link.

Founding partners. If you hold a founding place and answer our weekly questions, we keep your answers with a hash of your email address, one set a week.

Outreach

We may write one relevant business note to people at companies that build with AI agents, with at most three messages in total. We find business addresses on company websites, job posts, YC company pages, public Hacker News and dev.to profiles, and through single lookups at professional data providers. We never collect addresses from GitHub.

Our lawful basis is legitimate interest in contacting business contacts about a relevant product; automated outreach is limited to the United States in its first phase. We keep outreach records until 12 months after the last contact. If you ask us to stop, we keep a one-way hash of your address permanently so we never write again. Reply "no" to any message, or write to hello@deedglass.com. Every outreach email says where we found your address, and it comes from the separate outreach domain trydeedglass.com.

Why, and on what basis

We use form data to answer you: to send the cloud beta invite, reply to a setup request, send the newsletter you asked for, and learn which channels bring people here. The basis is your consent, given when you send the form, under India's Digital Personal Data Protection Act 2023. Order and license data is used to deliver what you bought, check licenses and handle refunds, which you asked for by buying. For visitors in the EU and the UK, the basis is consent, the contract for orders, and our legitimate interest in answering requests. Each sign-up records the version of this notice you saw (currently privacy-2026-10-13).

Where it's stored and for how long

Form data is stored in Cloudflare D1, with Cloudflare as our processor. We keep it until 12 months after our last contact with you, or until you ask us to delete it, whichever comes first. Order data follows the 24-month rule above. Short link counts are kept by Cloudflare Workers Analytics Engine, which holds them for three months.

Self-hosted Deedglass sends us nothing

There's no telemetry. deedglass scan reads only your machine and the database you name. deedglass version --check contacts GitHub only when you run it. With Pro, the license check contacts Dodo Payments and deedglass.com at most once a day and only when a Pro feature runs; DEEDGLASS_NO_NETWORK=1 stops it.

Payments

Dodo Payments sells the founding place and Pro on its own pages. If you accept a quote for the AI Agent Safety Setup, you pay through a Razorpay payment link on Razorpay's pages, or by bank transfer through Wise on an invoice from Zoho Invoice. We never see card numbers.

Processors

Cloudflare

Hosting this site, storing form and order data, and counting short links.

Dodo Payments

Merchant of record and payment processor for the founding place and Pro; it also checks license keys.

Razorpay and Wise

Payments for the AI Agent Safety Setup.

Zoho

Our mailbox at hello@deedglass.com, and setup invoices.

Google Workspace

The outreach mailbox on trydeedglass.com.

Resend

Sign-in email for the cloud beta, and order emails once we turn them on.

Hetzner

Servers for the cloud beta, if you join it.

Anthropic

Help drafting outreach notes and sorting replies. Names, email addresses and links are replaced with placeholders before any text is sent.

The cloud beta

If you join the cloud beta, we hold your account email, your org's data, actions and records, and connector credentials, which are encrypted with the vault key. The hosting region is stated in your invite.

Security

Access to form and order data is limited to the founder. Data travels over HTTPS. Exports are written only to files readable by their owner, outside the code repositories. The security page covers the product.

Incidents

If personal data is exposed, we tell the people affected without undue delay and inform the Data Protection Board of India as the Rules require.

Your rights

You can ask to see, correct or erase what we hold about you, to withdraw consent, to nominate someone to act for you, and to have a grievance heard. Write to hello@deedglass.com; we reply within 7 days and act within 30. Order records that tax law requires are kept by Dodo Payments as the merchant of record.

Children

Deedglass is not for anyone under 18.

Changes

We date every version of this page and keep the version each sign-up saw.