Legal
Privacy Policy
Last updated 29 October 2026
This policy explains what personal information Deep Real collects through deepreal.com, why, who handles it, how long we keep it and the choices you have.
The short version
- We collect only what you type into our forms, plus basic technical information needed to run and protect the site.
- We do not use analytics, advertising or tracking cookies.
- We do not sell your personal information, and we do not share it for targeted advertising.
- You can ask to see, correct or delete your information at any time by emailing hello@deepreal.com.
1. Who we are
deepreal.com is run by Deep Real Inc., a Delaware corporation (“Deep Real”, “we”, “us”). We decide how and why your personal information is used, which makes us its “controller” under data protection laws such as the GDPR.
Deep Real Inc.
12000 Crest Court
Beverly Hills, CA 90210
United States
Email: hello@deepreal.com
2. What we collect, why, and how long we keep it
Contact form (About page)
What: your name, email address, your role or interest (optional) and your message.
Why: to read and reply to your message.
Legal basis (GDPR): our legitimate interest in answering people who contact us, and, where you are asking about working with us, taking steps at your request before entering into a contract.
Nattie beta signup (deepreal.com/nattie)
What you give us: your first name, email address and country; any Instagram, TikTok or X handles you choose to add; the topic that interests you and any note you write; your confirmation that you are 18 or older; your permission for us to contact you about early testing; and, only if you tick the box, your permission to send you future updates.
What the page adds automatically: the campaign tags in the link you arrived from (UTM parameters), the page that referred you, whether you were on a mobile or desktop screen, your browser’s user-agent string (which names your browser and operating system), which version of the page you saw, and when you signed up.
Why: to choose people for early testing and contact them about it; to send you updates if you asked for them; and to understand which campaigns and links bring people to the beta.
Legal basis (GDPR): your consent for contacting you about testing and for updates, which you can withdraw at any time; and our legitimate interest in measuring which campaigns work, for the automatic details.
Signup details are held by Deep Real. We do not give them to Nattie Neidhart or her management.
Emails you send us
If you email us, we receive your email address, your message and anything you attach, and use them to reply.
Visiting the site
Like every website, ours receives technical information each time your browser asks for a page: your IP address, the page requested, your browser’s user-agent string and the time. Our hosting provider uses it to deliver the site and protect it against abuse, and our own request logs keep it for up to 7 days. We do not use it to identify you or build a profile of you.
Legal basis (GDPR): our legitimate interest in running a secure, working website.
Staff accounts
The site’s admin area is used only by invited Deep Real staff. For them, we hold an email address and a sign-in, and keep them signed in with a session token stored in their browser.
How long we keep it
We keep contact-form messages, emails and Nattie signups for as long as they are relevant to the conversation or the beta, and delete them no later than 24 months after our last contact with you. We delete them sooner if you ask. If you withdraw your permission for updates, we stop sending them straight away. Hosting request logs are kept for up to 7 days. We may keep information longer only where the law requires it.
Do you have to give us this information?
No law or contract requires you to. The fields marked as required on each form are the ones we need to reply to you or to consider you for the beta; without them we can’t do that.
3. Cookies and tracking
We do not use analytics, advertising or social-media tracking cookies or pixels. That is why the site has no cookie banner.
Some blog posts may include embedded YouTube or Vimeo videos. When an embedded video loads, that provider may collect information and set cookies under its own privacy policy.
Do Not Track and Global Privacy Control: because we do not track visitors across sites, sell personal information or share it for targeted advertising, the site behaves the same whether or not your browser sends these signals. We treat a Global Privacy Control signal as a valid request to opt out of selling or sharing.
4. Who handles your information
We use a small number of service providers to run the site and our email. They process personal information on our behalf, under our instructions, and not for their own purposes:
| Provider | What it does for us | Where |
|---|---|---|
| Cloudflare, Inc. | Hosts and serves the website, protects it against attacks, and sends sign-in emails to staff | Global network |
| Supabase, Inc. | Stores form submissions, blog posts and staff accounts, and runs the code that receives the forms | United States (Northern California) |
| Microsoft Corporation (Microsoft 365) | Our company email | Microsoft’s data centres |
| Mimecast | Filters our incoming email for spam and threats | Mimecast’s data centres |
We may add or change providers, for example a tool for sending updates. When we do, we will update this list.
We may also disclose personal information:
- when the law, a court or a regulator requires it;
- to protect the rights, safety or property of Deep Real, our users or others;
- to a buyer, investor or successor, and their advisers, as part of a merger, acquisition, financing or sale of all or part of our business, under confidentiality obligations. This policy will continue to apply to information transferred that way.
We do not sell personal information, and we do not share it for cross-context behavioural (targeted) advertising.
5. International transfers
Deep Real is based in the United States, and our database is hosted there. If you are outside the United States, including in the EU, UK or Canada, your information will be transferred to and stored in the United States, where data protection laws may differ from yours. Where the law requires it, we rely on our providers’ data processing terms, including the European Commission’s standard contractual clauses and the UK’s equivalent, to protect it.
6. How we protect it
The site is served only over encrypted connections (HTTPS). Form submissions can be read only by signed-in Deep Real staff, enforced by access rules in the database itself. No method of transmission or storage is completely secure, but we work to protect your information and to limit who can see it.
7. Your rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct anything that is wrong;
- delete your information;
- stop sending you updates, or withdraw any permission you gave us.
Email hello@deepreal.com from the address you used with us, so we can confirm the request is yours. We may ask for more information if we can’t. We won’t charge you or treat you differently for using your rights. We respond within the time the law that applies to you sets, for example one month under the GDPR and 45 days under California law.
EU and UK
You also have the right to restrict or object to our use of your information (including where we rely on legitimate interests), and to receive the information you gave us in a portable format. Withdrawing consent does not affect what we did before you withdrew it. You can complain to the data protection authority where you live or work; in the UK, that is the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to resolve your concern first.
California and other US states
California residents, and residents of other states with similar privacy laws, have the right to know, access, correct and delete their personal information, to opt out of its sale or sharing (we do neither), and not to be discriminated against for using these rights. You may use an authorised agent to make a request; we may ask the agent for proof of your permission. If we decline your request, you can appeal by replying to our decision.
In the past 12 months, we have collected these categories of personal information:
- Identifiers: name, email address, social-media handles, IP address. Source: you, and your browser.
- Internet activity: referring page, campaign tags, device type and browser details. Source: your browser.
- Other information you give us: country, interests, messages and notes. Source: you.
We use them for the purposes in section 2, disclose them only to the service providers in section 4, and keep them for the periods in section 2. We do not collect sensitive personal information as defined by California law.
Canada
You can ask to access and correct your information, and withdraw your consent, at hello@deepreal.com. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
8. Automated decisions
We do not make decisions about you based solely on automated processing, and we do not profile you.
9. Children
The site is not intended for anyone under 16, and the Nattie beta is open only to people aged 18 or older. We do not knowingly collect personal information from children. If you believe a child has given us their information, email hello@deepreal.com and we will delete it.
10. Changes to this policy
We will update this policy when our practices change, and review it at least once a year. The date at the top shows when it last changed. If we make a significant change, we will say so on the site and, where we have your email address and the change affects you, by email.
11. Contact us
For any question about this policy or your information, email hello@deepreal.com or write to Deep Real Inc., 12000 Crest Court, Beverly Hills, CA 90210, United States.