Privacy Policy

Last updated: October 3, 2026

This Privacy Policy describes how Aero AI Labs, Inc., d/b/a Deepline ("we", "us", or "our") handles personal information that we collect in connection with our business, including through our websites on which a link to this Privacy Policy is displayed, including https://deepline.com/, through our marketing initiatives, when you apply for a job with us, and in connection with other interactions with you (collectively, the "Service" or "Services").

This Privacy Policy applies where we determine the purposes and means of processing personal information. It does not apply to personal information that we process on behalf of our enterprise or business customers in accordance with such customers’ instructions. Our processing of such information is governed by our agreements with the customer. If you have a question or request concerning personal information that we process on behalf of a customer, please contact that customer directly.

Personal information we collect

Information you submit to us

  • Contact information, such as your first and last name, email address and phone number you may provide when you contact us or when you sign up for a demo or a newsletter.
  • Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
  • Marketing information, such as your preferences for receiving our communications, and details about how you engage with our communications.
  • Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Information we obtain from third parties

We may maintain pages on social media platforms, such as LinkedIn, and other third-party platforms. When you visit or interact with our pages on those platforms, the platform provider’s privacy policy will apply to your interactions and their collection, use, and processing of your personal information.

Automatic data collection

We and our service providers may automatically log information about you, your computer or mobile device, and your interactions over time with our website, our communications and other online services, such as:

  • Device data, such as your computer’s or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type, IP address, unique identifiers, language settings, mobile device carrier, radio/network information, and general location information such as city, state or geographic area.
  • Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, browsing history, navigation paths between pages or screens, information about your activity on a page or screen, access times, duration of access, and whether you have opened our marketing emails or clicked links within them.

We use the following tools for automatic data collection:

  • Cookies, which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand website user activity and patterns. For example, Google Analytics collects information about how users use our website, which we then use to compile reports that disclose trends without identifying individual visitors, and help us improve our website.
  • Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.
  • Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

CLI diagnostic reporting

When you run the Deepline CLI, we may send a limited diagnostic report if the CLI crashes or hits a hard local failure. This report is failure-triggered only, not continuous activity tracking.

  • We collect operational metadata such as CLI version, operating system, runtime version, exit code, exception type, scrubbed stack traces, and bounded excerpts from Deepline-owned local log files when those logs are directly relevant to the failure.
  • We do not intentionally collect your CSV contents, prospect data, full command arguments with values, environment variables, shell history, clipboard contents, or unrelated local files.
  • Diagnostic reporting can be disabled by setting DEEPLINE_DISABLE_FAILURE_REPORTING=1 before running the CLI.

How we use your personal information

  • To provide, operate, maintain, and secure our website and services.
  • To communicate with you, including to respond to your requests, provide support, and otherwise communicate with you about our services, including by sending announcements, surveys, updates, security alerts, and support and administrative messages.
  • To improve, monitor, and personalize our website, including by understanding your needs and interests, and personalizing your experience with the website and our communications.
  • For research and development. We may use your personal information for research and development purposes, including to analyze and improve our services and our business. As part of these activities, we may create aggregated, de-identified, or other anonymous data from personal information we collect. We may use this data and disclose it to third parties for our lawful business purposes, including to analyze and improve our services and promote our business.
  • Direct marketing. We may from time-to-time send you direct marketing communications as permitted by law, including, but not limited to, newsletters, and updates on news and events. You may opt out of our marketing emails as described in the "Opt out of marketing communications" section below.

Compliance and protection. We may use personal information to:

  • Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
  • Protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims).
  • Audit our internal processes for compliance with legal and contractual requirements and internal policies.
  • Enforce the terms and conditions that govern our website.
  • Prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

How we disclose your personal information

  • Affiliates. We may disclose your personal information to our subsidiaries and affiliates for purposes consistent with this Privacy Policy.
  • Service providers. We may disclose your personal information to third party companies and individuals that provide services on our behalf or help us operate our services (such as lawyers, bankers, auditors, insurers, customer support, hosting, analytics, email delivery, marketing, and database management).
  • Authorities and others. We may disclose your personal information to law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
  • Business transfers. We may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution. In such a case, we will make reasonable efforts to require the recipient to honor this Privacy Policy.

Advertising platform integrations (Google Ads, Meta, and LinkedIn)

Deepline lets you connect your Google Ads, Meta (Facebook and Instagram), and LinkedIn advertising accounts so you can create and update customer-list audiences from your own first-party data. This section describes how we handle the information we receive from those platforms ("Platform Data"). It applies in addition to the rest of this Privacy Policy and controls if anything else in this Privacy Policy conflicts with it.

Platform Data we access

  • Google Ads (OAuth scopes for sign-in, adwords, and datamanager): the email address and account identifier of the Google account you connect; the IDs, names, and basic settings of the Google Ads accounts that account can access, including manager-account relationships; and the IDs, names, sizes, membership status, and match statistics of Customer Match audiences in the accounts you enable.
  • Meta (the ads_management and ads_read permissions and, where you grant it, read access to Pages connected to your ad accounts, through a token you generate in your own Meta Business Manager or through Meta login): the IDs and names of the ad accounts and Business Manager the token can access; the IDs, names, approximate sizes, and delivery status of Custom Audiences in the ad accounts you enable; and read-only metadata (name, link, category, and follower counts) of Facebook Pages connected to those accounts.
  • LinkedIn (sign-in scopes, r_ads, rw_ads, and rw_dmp_segments): the name, email address, and member identifier of the LinkedIn account you connect; the IDs and names of the ad accounts that member can access; and the IDs, names, sizes, and status of Matched Audience segments in the ad accounts you enable.

We do not access the content of your ads or campaigns, your billing or payment information, or data about the people who see or interact with your ads, and we do not request access to Gmail, Google Drive, or other Google Workspace data through these integrations.

How we use Platform Data

We use Platform Data only to provide and improve the audience features you use: connecting your account, listing the ad accounts you can choose from, creating, updating, and deleting the audiences you request, and showing you their status. We do not use Platform Data, or any aggregated or de-identified data derived from it, to serve or target our own advertising, to build profiles of individuals, for credit, lending, insurance, or employment eligibility decisions, or to develop, improve, or train generalized artificial-intelligence or machine-learning models. Deepline staff do not read Platform Data except with your permission, to investigate security issues or abuse, to comply with law, or in aggregated form for internal operations.

Audience lists you upload

The contact lists you upload to build an audience are your data, and we process them on your behalf and on your instructions under our agreement with you. Before identifiers such as email addresses and phone numbers are sent to Google, Meta, or LinkedIn, Deepline normalizes them and converts them to one-way SHA-256 hashes. We use these lists only to build and update the audiences you request. You are responsible for having the rights and any consents needed to use the list for advertising and for complying with each platform's customer-list terms.

How we share Platform Data

We do not sell Platform Data, and we do not transfer it to data brokers, advertising networks, or other third parties for their own purposes. We share it only (a) with the platform it came from, to carry out an action you request; (b) with service providers, such as cloud hosting and database providers, that process it on our behalf under confidentiality and security obligations; (c) when required by law or to protect rights, safety, and security, as described above; and (d) as part of a merger, acquisition, or sale of assets, in which case the recipient must continue to protect it as described in this section.

How we protect Platform Data

Platform Data is transmitted over encrypted connections (TLS). The access tokens and refresh tokens that let Deepline act on your behalf are encrypted at rest and are never shown back to you or other users after they are saved. Access to production systems is restricted to personnel who need it to operate the service.

Retention and deletion

  • We keep access tokens only while the integration is connected. When you disconnect an integration in the Deepline dashboard, we delete its stored tokens immediately.
  • We keep account and audience metadata (such as account IDs, names, and audience status) while your Deepline account is active so the integration keeps working, and we delete it within 30 days after you close your Deepline account or ask us to delete it.
  • You can also remove Deepline's access at any time from the platform itself: your Google Account's third-party connections page, Meta Business Settings (or your Facebook account's Business Integrations settings), or LinkedIn's permitted services settings. Audiences already created in your ad accounts stay in those accounts until you delete them there or through Deepline.
  • To ask us to delete Platform Data, email team@deepline.com from the email address on your Deepline account. We will confirm when the deletion is complete.

Platform-specific terms

Deepline's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Our use of data received from Meta follows the Meta Platform Terms, and our use of data received from LinkedIn follows the LinkedIn API Terms of Use.

SMS messaging

If you opt in to receive SMS messages from Deepline, we may collect your mobile phone number, your SMS consent status, and message interaction records so that we can send requested Deepline workflow notifications, provide support, honor opt-out requests, and comply with carrier and legal requirements.

Mobile opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes. This non-sharing commitment applies to SMS opt-in data, phone numbers, and consent records. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help.

You can opt out of SMS messages at any time by replying STOP, CANCEL, END, QUIT, UNSUBSCRIBE, REVOKE, STOPALL, or OPTOUT to any Deepline SMS message. You can request help by replying HELP or INFO.

Your choices

Opt out of marketing communications. You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email. You may continue to receive service-related and other non-marketing emails.

Limit online tracking. There are a number of ways to limit online tracking, which we have summarized below. Please note that these tools are not associated with us and we cannot guarantee that they work as their providers advertise them:

  • Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://www.allaboutcookies.org/.
  • Using privacy plug-ins or browsers. You can block our websites from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers. You can also opt out of Google Analytics by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout.

Do Not Track. Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

Other sites, mobile applications and services

Our website may contain links to other websites, mobile applications, and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or in mobile applications or online services that are not associated with us. We do not control third party websites, mobile applications or online services, and we are not responsible for their actions. Other websites and services follow different rules regarding the collection, use and disclosure of your personal information. We encourage you to read the privacy policies of the other websites and mobile applications and online services you use.

Security

We employ a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. However, no security measures are failsafe and we cannot guarantee the security of your personal information.

Job applicants

When you apply for one of our open positions, we collect the information that you provide in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history, and other information that may be included in a resume or that you may provide during the interview process. This may also include demographic or diversity information that you voluntarily provide. We may also conduct background checks and receive related information. We also collect personal information from other sources where relevant for your application, such as employment research firms, recruiters, identity verification services, and information that you make publicly available on websites or social media platforms (for example, LinkedIn).

Throughout the recruitment process, we may supplement your personal information in connection with the assessment of your application. For example, we may record the views of those considering your application about your suitability for the role for which you have applied and retain interview notes. If you accept an offer from us, your personal information will be incorporated into and used as part of your employee record.

We use applicants' information to facilitate our recruitment activities, process employment applications and personalize candidate communication, including evaluating candidates and monitoring recruitment statistics. We also use successful applicants' information to administer the employment relationship. We may also use and disclose applicants' information to improve our Services and for the compliance and protection purposes described above.

Children

Our website is not intended for use by children under 18 years of age. Additionally, if we learn that we have collected personal information through the website from a child under 13 without the consent of the child’s parent or guardian as required by law, we will delete it.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the website.

How to contact us

Please direct any questions or comments about this Privacy Policy or our privacy practices to team@deepline.com.