Privacy

Privacy policy.

Last updated: 20 April 2026

This policy explains what personal data Deepgrain Ltd collects through this website, why we collect it, and what your rights are. Plain language. No surprises.

Who we are

Deepgrain Ltd is the data controller. Registered in England and Wales. You can reach us at matt@deepgrain.ai.

What we collect

Subscribers. If you join the mailing list, we store your email address, the page you subscribed from, and the date.

The Brain. If you request the People Ops AI Brain at /brain, we store your first name (optional), email address, the timestamp you gave consent, your IP address, and the user agent of the browser you submitted from. The IP and user agent are kept as a light audit trail for the consent record.

Brain link resends. If you ask us to resend your Brain link at /brain/resend, we'll tell you whether your address is on file, has unsubscribed, or has been blocked due to bounces or spam complaints — so you know why access isn't working. This is a deliberate, scoped exception to our usual practice of not disclosing whether an email is on file.

Enquiries. If you use the contact form, we store the name, email, organisation, team size, and message you give us.

Server logs. Our hosting providers keep short-term logs of IP address and request metadata to keep the site secure and working. These are not used for marketing.

Why we use it

Mailing list. Lawful basis: your consent. We send occasional notes on operating systems and leadership. You can unsubscribe from any email or by writing to us.

Enquiries. Lawful basis: legitimate interest in replying to people who contact us about working together.

Site security and uptime. Lawful basis: legitimate interest in keeping the site available and free from abuse.

How long we keep it

Subscriber records are kept until you unsubscribe. Brain subscribers are kept for up to 24 months after your last engagement, then deleted unless you ask us to keep you on the list. Enquiries are kept for up to three years so we can pick up a conversation later, then deleted. Server logs are short-lived and managed by our hosting providers.

Who processes it

We use a small set of trusted providers to run the site and send email. Brain subscriber data and the welcome email are handled by Lovable Cloud (EU-region storage), which uses Supabase as the underlying platform. These providers act as processors on our instructions and are bound by data processing terms.

International transfers

Some of our providers process data outside the UK and EEA. Where they do, transfers are covered by standard contractual clauses or an equivalent safeguard.

Your rights

Under UK and EU GDPR you can ask us to access, correct, delete, or restrict the personal data we hold on you. You can also object to processing and ask for portability. Write to matt@deepgrain.ai and we will respond within one month.

If you are not happy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority in the EU.

Cookies

See our cookie policy for details on the small amount of storage this site uses.

Changes

If we change this policy, we will update the date above. Material changes will be flagged on the site.