← dekto.io

Privacy Policy

Last updated: June 2025

1. Introduction

Dekto ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our service at dekto.io.

2. Information We Collect

2.1 Account Information

  • Name and email address
  • Password (encrypted, never stored in plain text)
  • Payment method (processed by Lemon Squeezy, we never see your full card details)

2.2 Profile Information You Provide

  • Your product description and ICP settings
  • Keywords and signal preferences
  • Blacklist entries

2.3 Usage Data

  • Lead data found by our platform
  • Scan logs and platform activity
  • Feature usage statistics

2.4 Technical Data

  • IP address and browser type
  • Cookies for session management
  • Error logs for debugging

3. How We Use Your Information

We use your information to:

  • Provide and improve the Dekto service
  • Send morning digest emails with your leads
  • Process payments through Lemon Squeezy
  • Send important account notifications
  • Respond to support requests
  • Analyze usage to improve the product

We do NOT:

  • Sell your personal data to third parties
  • Use your data for advertising
  • Share your ICP or leads with other users

4. Data We Process About Third Parties

Our service monitors public platforms (HN, Reddit, Product Hunt, Twitter/X, Crunchbase) to find leads. This data is:

  • Publicly available at the time of collection
  • Processed through our AI to assess relevance
  • Stored in your account for your use only
  • Never shared with other users

If you are a person whose public information appeared in our system and wish to be excluded, contact us at privacy@dekto.io.

5. Data Storage and Security

  • All data stored in Supabase (US-East region)
  • Database encrypted at rest
  • All connections via HTTPS/TLS
  • Row Level Security ensures users only see their data
  • API keys encrypted in environment variables
  • We conduct regular security reviews

6. Data Retention

  • Account data: retained until account deletion
  • Lead data: retained for 12 months, then archived
  • Payment records: retained for 7 years (legal requirement)
  • After account deletion: all data removed within 30 days

7. Your Rights (GDPR & CCPA)

You have the right to:

  • Access: request a copy of your data
  • Correction: update incorrect information
  • Deletion: request removal of your account and data
  • Portability: export your data in machine-readable format
  • Opt-out: unsubscribe from marketing emails at any time

To exercise these rights: support@dekto.io
We respond within 30 days.

8. Cookies

We use cookies for:

  • Session authentication (essential, cannot be disabled)
  • Preferences storage (functional)

We do NOT use advertising or tracking cookies. You can disable cookies in your browser, but this will prevent you from logging in.

9. Third-Party Services

We use these third-party services:

10. International Transfers

We operate from Kazakhstan. Your data may be processed in the United States where our infrastructure providers are located. By using Dekto, you consent to this transfer.

11. Children's Privacy

Dekto is not intended for users under 18 years of age. We do not knowingly collect data from minors.

12. Changes to This Policy

We will notify you via email before any material changes to this Privacy Policy take effect.

13. Contact Us

Privacy questions or requests:

Email: privacy@dekto.io
Website: dekto.io