Privacy Policy

Last updated: March 16, 2026

This privacy policy (“Privacy Policy”) describes the types of personal data that Enclave AI Inc. (dba Enclave) (“Enclave,” “we,” “our,” and/or “us”) collects, uses, and discloses from users of our website (including https://enclave.ai/), downloadable applications, and other related services provided by us that link to this Privacy Policy (collectively, the “Services”). As used in this Privacy Policy, “personal data” means any information relating to an identified or identifiable individual and includes any information that constitutes “personally identifiable information,” “personal data,” or “personal information” under applicable privacy or data protection laws or regulations.

This Privacy Policy does not apply to the extent we process information in the role of a processor or service provider on behalf of our customers. In that context, our processing of your personal data is subject to our agreements with our customers. Our customers are the data controllers and their privacy policies will apply to the processing of your personal data. We are not responsible for the privacy or data security practices of our customers, which may differ from those explained in this Privacy Policy.

Personal Data We Collect

We may collect a variety of personal data from or about you or your devices from various sources, as described below. Where applicable, we indicate whether and why you must provide us with your personal data, as well as the consequences of failing to do so. If you do not provide your personal data when requested, you may not be able to use the full extent of the Services if that personal data is necessary to provide you with the Services or if we are legally required to collect it.

A. Personal Data You Provide to Us

Accounts and Registration. When you sign up for an account, we ask you for your personal data such as your name and email address. If you sign up using a third-party account such as GitHub or Google, we will receive your name and email address from those third-party services.

Communications. If you contact us directly, we may receive personal data about you, such as your name, email address, the contents of a message or attachments that you may send to us, and other information you choose to provide. When you communicate with us, our third-party vendors may receive and store these communications on our behalf. If you subscribe to our newsletter, we may collect personal data from you, such as your email address. When we send you emails, we may use embedded pixels or other technologies to track information about your receipt and interaction with our emails, such as whether and when you open them, whether you access any links included in our emails, how long you read our emails, whether you forward our emails and to whom, your Location Information (described below), and your Device Information (described below), to learn how to deliver a better user experience and improve the Services.

Careers. If you decide that you wish to apply for a job with us, you may submit your information and your resume online. We will collect the information you choose to provide to us, such as your education and employment experience. You may also apply through a third-party service, such as LinkedIn. If you do so, we will collect the information you make available to us through that service.

Payment Information. If you make a payment on our Services, your payment-related information, such as credit card or other financial information, is collected by our third-party payment processor on our behalf.

B. Personal Data We Collect When You Use Our Services

Location Information. When you use our Services, we may receive your location information, including, for example, your IP address may indicate your general geographic region).

Device Information. We may receive information about the device and software you use to access our Services, such as IP address, device type, device identifiers, web browser type and version, and operating system version.

Usage Information. We automatically receive information about your interactions with our Services, such as the pages or other content you view, referrer information (the website you visited before coming to our Services), and the dates and times of your visits.

Scan Results. We review your repos, analyze them, research for security vulnerabilities, and generate findings based on our scans (“Results”). We will collect any information you choose to provide in your code and the information produced in the Results. If you opt-in, Results and affiliated code repos associated your use of our Services may be used to train and improve the artificial intelligence used to provide our Services.

Information from Cookies and Similar Technologies. We and our third-party partners may collect information using cookies, beacons, and similar technologies (collectively, “Cookies”) to provide functionality, to collect information about your online activities over time and across different services, and to distinguish you from other users of the Services. For more information, please see our Cookie Policy, which includes information on how to control or opt out of these Cookies.

C. Personal Data We Receive from Other Sources

Information from Third-Party Services. If you choose to link our Services to a third-party account, we may receive information about you, such as your profile information, email address, and information about your use of the third-party account. If you wish to limit the information available to us, you should visit the privacy settings of your third-party accounts to learn about your options.

How We Use the Personal Data We Collect

We use the personal data we collect:

• To provide, maintain, improve, and enhance our Services;
• To develop, train, and improve the artificial intelligence, machine learning, and models that we use to support our Services for users who opt-in;
• To personalize your experience on our Services, such as by providing tailored content and recommendations;
• To understand and analyze how you use our Services and develop new products, services, features, and functionality;
• To communicate with you, provide you with updates and other information relating to our Services, provide information that you request, respond to comments and questions, and otherwise provide user support;
• To facilitate the connection of third-party services or applications;
• For marketing and advertising purposes, such as developing and providing promotional and advertising materials that may be relevant, valuable or otherwise of interest to you;
• To generate anonymized or aggregated data containing only de-identified, non-personal data that we may may use for any lawful purposes;
• To facilitate transactions and payments;
• To find and prevent fraud and abuse, resolve disputes, or respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our Terms of Service or other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the information is collected.

Legal Bases for Processing European Personal Data

If you are located in the European Economic Area (“EEA”) or the United Kingdom (“UK”), we only process your personal data when we have a valid “legal basis,” including as set forth below.

Consent. We may process your personal data where you have consented to certain processing of your personal data. For example, we may process your personal data to send you marketing communications or to use Cookies where you have consented to such use.

Contractual Necessity. We may process your personal data where required to provide you with the Services. For example, we may need to process your personal data to respond to your inquiries or requests.

Compliance with a Legal Obligation. We may process your personal data where we have a legal obligation to do so. For example, we may process your personal data to comply with tax, labor, and accounting obligations.

Legitimate Interests. We may process your personal data where we or a third party have a legitimate interest in processing your personal data. Specifically, we have a legitimate interest in using your personal data for internal analytics purposes, and otherwise to improve the safety, security, and performance of the Services. We only rely on our or a third party’s legitimate interests to process your personal data when these interests are not overridden by your rights and interests.

How We Disclose the Personal Data We Collect

Partners and Affiliates. We may disclose any personal data we receive to our current or future partners and affiliates for any of the purposes described in this Privacy Policy.

Vendors and Service Providers. We may disclose any personal data we receive to vendors and service providers retained in connection with the operation of our Services, including AI-powered service providers that provide backend support for our Services.

Third-Party App Integrations. If you connect a third-party application to our Services, we may disclose information such as name, username, and other profile information to that third party.

AI Service Providers. We may disclose information we receive to vendors that provide artificial intelligence services that provide backend support for our Services.

Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn more about Google’s practices by visiting https://www.google.com/policies/privacy/partners/.

Advertising Partners. We work with third-party advertising partners to collect and process your information in order to show you ads that we think may interest you. Some of our advertising partners are members of the Digital Advertising Alliance (https://optout.aboutads.info) and serve ads through cookie-based technologies. Please visit their opt-out pages to learn about how you may opt out of receiving certain web-based personalized ads from member companies. These opt-outs will not apply when our partners serve ads through non-cookie based technologies.

As Required By Law and Similar Disclosures. We may access, preserve, and disclose your personal data if we believe doing so is required or appropriate to:

• Comply with law enforcement requests and legal process, such as a court order or subpoena;
• Respond to your requests;
• Protect your, our, or others’ rights, property, or safety;
• Protect against legal liability; or
• Investigate fraud or other unlawful activity.

For the avoidance of doubt, the disclosure of your personal data may occur if you post any objectionable content on or through with the Services.

Merger, Sale, or Other Asset Transfers. We may transfer your personal data to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

Consent. We may also disclose your personal data with your permission.

Your Choices

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.

Do Not Track. There is no accepted standard on how to respond to “Do Not Track” signals, and we do not respond to such signals.

Your European Privacy Rights. If you are located in the EEA or the UK, you have additional rights described below.

You may request access to the personal data we maintain about you, update, and correct inaccuracies in your personal data, restrict or object to the processing of your personal data, have your personal data anonymized or deleted, as appropriate, or exercise your right to data portability to easily transfer your personal data to another company. In addition, you have the right to lodge a complaint with a supervisory authority, including in your country of residence, place of work or where an incident took place.

You may withdraw any consent you previously provided to us regarding the processing of your personal data at any time and free of charge. We will apply your preferences going forward and this will not affect the lawfulness of the processing before you withdrew your consent.

You may exercise these rights by contacting us using the contact details at the end of this Privacy Policy. Before fulfilling your request, we may ask you to provide reasonable information to verify your identity. Please note that there are exceptions and limitations to each of these rights, and that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain personal data for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. Please be aware that this Privacy Policy does not apply to your activities on these third-party services or any data you disclose to these third parties. We encourage you to read their privacy policies before providing any data to them.

Retention

We retain personal data about you for as long as reasonably necessary to provide you with the Services, or otherwise in support of our business or commercial purposes. When you request that we do so, we take measures to delete your personal data or keep it in a form that does not permit identifying you when this personal data is no longer reasonably necessary for the purposes for which we process it, unless we are required by law to keep this information for a longer period. When we process personal data for our own purposes, we determine the retention period taking into account various criteria, such as the type of products and services provided to you, the nature and length of our relationship with you, possible re-enrollment with products and services, the impact on the products and services we provide to you if we delete some personal data from or about you, and mandatory retention periods provided by law and the statute of limitations. In certain cases, we also keep your information for legal reasons, including after your account has been deleted, for example to respond to a legal request or to comply with applicable law when we have a legal obligation to retain information, and to deal with and resolve requests and complaints related to data rights. Following the relevant retention period, personal data is deleted from storage. Copies of personal data may also remain for a limited time in the backup storage that we use to recover lost information in the event of an information loss event.

Security

We make reasonable efforts to protect your data by using security measures designed to safeguard the data we maintain. However, because no electronic transmission or storage of data can be entirely secure, we can make no guarantees as to the security or privacy of your data.

Children’s Privacy

We do not knowingly collect, maintain, or use personal data from children under 18 years of age, and no part of our Services is directed to children. If you learn that a child has provided us with personal data in violation of this Privacy Policy, then you may alert us at privacy@enclave.ai.

International Visitors

The Services are hosted in the United States (“U.S.”). If you choose to use the Services from the EEA, the UK, or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal data outside of those regions to the U.S. for storage and processing. We may transfer personal data from the EEA or the UK to the U.S. and other third countries based on European Commission-approved or UK Government-approved Standard Contractual Clauses, or otherwise in accordance with applicable data protection laws. We may also transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services. For more information about the tools that we use to transfer personal data, or to obtain a copy of the contractual safeguards we use for such transfers (if applicable), you can contact us as described below.

Changes to this Privacy Policy

We will post any updates to the Privacy Policy on this page, and the revised version will be effective when it is posted.

Contact Information

We are the data controllers responsible for the processing of your personal data. If you have any questions, comments, or concerns about our processing activities, please email us at privacy@enclave.ai or write to us at:

Deputy Technologies, Inc.
8 The Green # 23625
Dover, Delaware 19901

For individuals located in the EU, you can write to us at:

VeraSafe Ireland Ltd.
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork T23AT2P
Ireland