Privacy Policy
Last Updated: September 21, 2025
Introduction
This Privacy Policy describes how dephekt.net and its subdomains (“we”, “our”, or “the Services”) handle information when you use our website and services.
Services and Data Collection
ai.dephekt.net (AI Dashboard)
- Service: Provides AI model access through OpenWebUI frontend
- Data Collected: Email address and prompts/conversations
- Data Storage: Your email and prompts are stored on our servers for service functionality
- Third-Party Processing: When using AI models, your prompts are sent to the respective model provider’s APIs:
- Anthropic (Claude models) - Subject to Anthropic’s Privacy Policy
- OpenAI (GPT models) - Subject to OpenAI’s Privacy Policy
- AWS Bedrock - Models with “bedrock” in the name are processed through Amazon Web Services in the US-East-2 (Ohio) region - Subject to Amazon’s Privacy Policy
- Data Sharing: Your data is not shared beyond what is necessary to fulfill your requests through the model APIs
auth.dephekt.net (Authentication Service)
- Service: Keycloak-based Single Sign-On (SSO) for the domain
- Data Collected:
- Email address (required)
- Name (if provided during signup)
- Third-party identity provider associations (e.g., Google account linkage)
- Purpose: Solely for account protection and identity service provision
- Third-Party Authentication: If you sign up using Google or other identity providers, we store the association between your email and that provider for authentication purposes only
dephekt.net (Main Site and Blog)
- Service: Landing page and blog hosted on Cloudflare Pages
- Data Collected: Request logs including:
- User agent
- Source IP address
- URLs visited
- Access timestamps
- Purpose: Basic site analytics (e.g., popular content, traffic sources)
- Processing: Cloudflare may collect additional information as described in their Privacy Policy
Email Communications
Transactional Emails: System-generated emails (password resets, notifications, alerts) are sent through Amazon Simple Email Service (SES) in the US-East-2 (Ohio) region. These emails contain only the minimum information necessary for their function.
How We Use Information
We use the information we collect to:
- Provide and maintain our services
- Enable authentication and access control
- Process AI model requests
- Send transactional emails related to your account
- Analyze site usage for improvement
- Respond to user support requests
- Comply with legal obligations
Data Sharing and Disclosure
We do not sell or provide your data to third parties except in the following circumstances:
- To fulfill service requests (e.g., sending prompts to AI model APIs)
- In response to valid legal process from US courts or authorized law enforcement
- With your explicit consent
No Advertising
We do not use your data for advertising purposes. No advertising networks or trackers are deployed on our services.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Data Retention
We retain personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Opt-out of certain uses of your information
Children’s Privacy
Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.
Contact Information
If you have any questions about this Privacy Policy, please contact us through GitHub or the contact information provided on this site.
Compliance
This Privacy Policy is designed to comply with applicable privacy laws and regulations, including GDPR where applicable.