Privacy Policy

Your data is yours. Your customers' data is yours. Deway is built to enhance your product capabilities without compromising privacy.

1. Introduction

Deway is an AI-powered product intelligence platform that helps SaaS products become self-aware. We observe how users interact with your product, detect misconfigurations, and provide intelligent guidance. Our mission is to make your product smarter while respecting privacy every step of the way.

2. Data Collection

We collect only the data necessary to provide our service, primarily consisting of:

Usage Data: Information about how users interact with your product, including web activity, session analytics, and interactions with our AI features.
Customer Content: Documentation, knowledge base articles, and other content you upload to power AI responses.
Account Information: Business contact details and authentication data required to manage your account and security.
PII Sanitization: We automatically detect and redact personally identifiable information (PII) before storing your data to ensure privacy by design.

3. Data Ownership & Rights

You own your data. Everything Deway learns about your product and users belongs to you. We are simply custodians.

Export Anytime: You can export your data via our API.
Full Deletion: When you delete a record, all associated data is automatically deleted through cascade operations.
No Third-Party Sales: Your data is never sold, shared, or used for advertising.

4. AI & Data Processing

To provide intelligent responses, we utilize industry-leading AI infrastructure.

AI Provider: We use AWS Bedrock (Anthropic Claude) to generate AI responses.
Processing: Your data is processed by AWS in accordance with their strict enterprise security terms.
Isolation: Each customer's data is strictly isolated using row-level security policies.

5. Data Retention

All raw usage data is automatically deleted after a 30-day retention period.

6. Security & Infrastructure

We leverage enterprise-grade security infrastructure to protect your data.

Infrastructure

We are hosted on AWS (Amazon Web Services), utilizing VPC isolation, private subnets, and security groups.

Encryption: Data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

Compliance

SOC 2 Type II: In progress — Annual third-party security audits.
GDPR: Compliant — We support full compliance with EU data protection standards.

7. Sub-processors

To provide our service, we utilize the following trusted third-party providers:

AWS: Cloud Infrastructure, AI (Bedrock), and Database services. Datadog: System monitoring and logging. Logfire: Application observability.

8. Contact Us

Have a security concern or privacy question?

Security Inquiries: security@deway.ai
Privacy Questions: privacy@deway.ai