Privacy Policy

Effective Date: May 22, 2025

The Delfhos service is provided by David Serrano Díaz (DNI/NIF: 03226056F), acting as a sole proprietor under the trade name "Delfhos".

At Delfhos, your privacy and the security of your data are our top priorities. This Privacy Policy explains what information we collect, how we use it, and the measures we take to safeguard it. By accessing or using our services at https://app.delfhos.com, you agree to the practices described in this policy.

1. Information We Collect
   1. Account Information
      • Personal Details: Name, email address, organization (if applicable).
      • Billing & Payment Data: Prepaid balance top-ups, refund requests, and payment method metadata (we do not store full credit-card details).
   2. Usage Data
      • Service Metrics: Timestamps of requests, number of API calls, module usage counts, and error logs.
      • Purpose: To monitor system health, enforce fair usage, and provide customer support.
   3. Technical Data
      • Device & Connection: IP address, browser type/version, operating system, and session identifiers.
      • Purpose: For security monitoring, fraud prevention, and optimizing platform performance.
2. Sensitive Credentials

   To connect to your data sources (e.g., SQL databases), you provide connection credentials (host, port, username, password).

   • Encryption & In-Memory Processing:
     • Credentials are encrypted in transit and held only in memory during each session.
     • We never persist or log your credentials to disk or any database.
     • Even Delfhos personnel and systems have no ability to decrypt or retrieve your credentials.
3. How We Use Your Information
   • Service Delivery: Authenticate you, process your queries, and generate AI responses.
   • Product Improvement: Analyze aggregated usage patterns to enhance features and reliability.
   • Security & Compliance: Detect and prevent abuse, fraud, and unauthorized access.
   • Customer Support: Investigate issues, answer support tickets, and handle refund requests.
4. Data Retention & Deletion
   • Account Data: Retained for as long as your account is active, or as required by law.
   • Usage & Technical Logs: Stored for up to 90 days to support troubleshooting and security audits, then automatically purged.
   • No Conversation or Query Storage:
     • We do not store the content of your AI queries or the model’s responses.
     • Session transcripts are discarded immediately upon completion of each session.
5. Cookies & Tracking
   • Essential Cookies: Required for authentication, session management, and security.
   • Analytics Cookies: Optional, non-identifying cookies used to gather aggregate usage statistics.
   • Opt-Out: You may disable non-essential cookies via your browser settings; note that some features may be impacted.
6. Third-Party Services

   We may share aggregate, de-identified usage statistics with our service providers for hosting, analytics, and payment processing. We do not sell or rent your personal data to third parties for marketing purposes.

7. Your Privacy Rights

   Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the right to:

   • Access: Request a copy of the personal data we hold about you.
   • Correction: Update or correct inaccuracies in your personal information.
   • Deletion: Request deletion of your personal data (except where retention is required by law).
   • Portability: Obtain your data in a machine-readable format.
   • Objection: Object to certain processing activities, such as marketing communications.

   To exercise any of these rights, please contact us at info@delfhos.com. We will respond to verifiable requests within applicable legal timeframes.

8. Security Measures
   • Encryption: All data in transit is protected via TLS. Database credentials are encrypted in memory with strong, industry-standard algorithms.
   • Access Controls: Role-based permissions, secure credential handling, and regular security reviews.
   • Monitoring & Auditing: Continuous security monitoring, intrusion detection, and vulnerability testing.
9. Changes to This Policy

   We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via email or an in-app notice. Continued use after notification constitutes acceptance of the updated policy.

10. Contact Us

    If you have questions or concerns about this Privacy Policy, or wish to exercise your privacy rights, please reach out:

    • Email: info@delfhos.com

    Thank you for trusting Delfhos with your data. We’re dedicated to keeping it safe and secure.