Privacy Policy

Who we are

Oranjy Limited is registered in England and Wales, company number 12547751. Its registered office is 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF.

Oranjy Limited is the data controller for the personal information described in this policy. Use our contact form for privacy questions or requests.

Information we use

We receive information you give us, information created as you use DeepScroll, and payment updates from Stripe.

• Account and profile details, such as your name, email, sign-in information and any profile information you choose to add.
• Your onboarding answers, chosen interests, follows, likes, saves, reading activity and other interactions used to personalise your feed.
• Notes, questions, conversations and other material you create through the features you use.
• Subscription details, payment status and payment references. Stripe handles your payment information; DeepScroll does not store your full card number.
• Messages you send us, email preferences and records needed to deliver emails and honour unsubscribe requests.
• Technical information involved in running the service, such as IP addresses, browser information, request records and errors.

Your profile name, handle, photo and bio can be visible to other people on public profiles and through shared profile links. Choose these details with that visibility in mind.

Why we use it

To provide your account, personalised feed, saved material, AI features and subscription, we rely on performing our contract with you. We need account information to provide an account, and payment information to provide a paid subscription. Other information depends on the features you choose to use.

To keep DeepScroll secure, investigate faults, prevent misuse and answer enquiries, we rely on our legitimate interests in running a reliable service and helping our users. We consider your rights when using information for these purposes.

We retain and use records where necessary to meet legal obligations, including accounting obligations and responses to valid legal requests.

For promotional emails, we rely on consent where required, or our legitimate interest in communicating about our own service where the law permits this. You can opt out at any time.

We use Meta Pixel and Conversions API to measure how our Facebook and Instagram advertising leads to visits and purchases, and to improve our campaigns. For visits identified as coming from the UK, EU/EEA or Switzerland, and when we cannot identify the country, measurement stays off until you accept. In other recognised countries, it may start automatically after we show an advertising notice, unless you have opted out. Signing in does not give advertising consent, and automatic activation is not recorded as your consent. You can turn measurement off through Cookies at any time. This choice is separate from your daily-feed email preference.

Personalisation and AI

Your selected interests and interactions help us decide which topics and cards to show you and reduce repetition. This is automated personalisation of your learning feed.

When you use AI features, your question or message, relevant conversation history, topic choices and recent topic trail may be sent through Vercel AI Gateway to the AI provider used for that request. Our configured providers include Google; the provider can vary with the feature and configuration. Avoid submitting sensitive personal information or confidential information about others.

Some generated learning material, including deep-dives attached to cards, may be saved for other users to read. Do not treat material used to generate a learning article as a private message.

AI processing can produce inaccurate results. You can contact us to raise a concern about how your information has been used.

Services that help us run DeepScroll

We use service providers to deliver DeepScroll. They receive the information needed for their role.

• Supabase provides account authentication and database storage.
• Vercel hosts the website and server functions and routes AI requests through its AI Gateway. AI providers process the material submitted for AI features.
• Stripe processes payments and manages billing. It also uses information for its own payment, fraud-prevention and legal responsibilities, as explained in its privacy policy.
• Resend delivers account emails and other DeepScroll emails.
• External services supply images, book covers, fonts and website code. Loading these resources shares technical information such as your IP address and the resource requested with the provider. If a default avatar is generated from your name, that name is sent to ui-avatars.com.
• When advertising measurement is on, Meta receives information through Meta Pixel in your browser and Conversions API on our server. This includes browser and device information, such as IP address and browser type, advertising cookie and click identifiers, page categories, event identifiers, and confirmed purchase amounts and currencies. Meta may combine this with other information it holds and use it for advertising, including personalised ads, under its privacy policy.

For Meta measurement, we send general page categories rather than detailed page addresses. We exclude URL query strings and fragments, post bodies, chosen interests, sign-in credentials and checkout tokens. We do not send Meta your name, email address or phone number, including hashed versions of these contact details.

We may also share information where needed to comply with the law or protect people and the service. We do not sell your personal information for money. Sharing with Meta for advertising is optional. You can stop it through Cookies or Do Not Sell or Share My Personal Information.

• Meta Privacy Policy

Processing outside the UK

Our providers operate internationally, so information may be processed outside the UK, including in the United States. The location depends on the service and its infrastructure.

Supabase and Resend include international transfer provisions in their published data processing terms, including standard contractual clauses with the UK Addendum for relevant UK transfers. Stripe’s published transfer terms also include the UK Addendum. These contractual safeguards set requirements for protecting information when it is transferred abroad.

Vercel states that it participates in the EU–US Data Privacy Framework and its UK Extension for personal information received under that framework. Its privacy notice explains those commitments and the available complaint routes. The provider documents below describe their transfer arrangements. You can also use our contact form to request information about the arrangements relevant to your data or a copy of applicable safeguards.

• Supabase data processing terms
• Resend data processing terms
• Stripe data transfer terms
• Vercel privacy and international transfers

Email choices

We send emails needed for your account and subscription. DeepScroll also offers a learning feed by email, with daily, weekly and off preferences.

You can stop promotional emails using the unsubscribe link in the email. Digest emails also include a preference link. Unsubscribing from these emails does not stop essential account or billing messages.

When you enter your email before choosing a plan, we store it so you can continue to checkout. We also record the daily-feed preference shown on that screen. Daily emails are optional: you can turn them off before continuing, change your frequency through the preference link in an email, or unsubscribe at any time. If daily emails are enabled, you may receive DeepScroll posts even if you do not create an account or buy a subscription. We continue to respect existing opt-outs and selected frequencies. An option enabled by default is not recorded as affirmative consent.

Cookies and browser storage

DeepScroll uses cookies and browser storage to keep you signed in, remember settings and interests, and record reading activity for personalisation. This includes cards viewed or opened, time spent, skips and recent topics. It also stores or caches content used by the app.

A topic-history cookie can last up to one year. Session storage lasts for the browser session; local storage can remain between visits until cleared or replaced.

Meta advertising cookies are used when advertising measurement is on, following your acceptance or automatic activation for your region. The _fbp cookie identifies a browser, and _fbc records an advertising click identifier when available. Each lasts up to 90 days. We do not save an advertising click identifier from a link while measurement is off; if it is still in the current page address when measurement starts, we may then use it.

We remember your manual advertising choice in this browser for 365 days. Open Cookies to change it, withdraw consent or opt out. We also turn measurement off when your browser sends Global Privacy Control or Do Not Track. Turning it off stops future advertising measurement from this browser and its associated server records, and removes our advertising identifiers. It does not automatically erase information already received by Meta. Use our contact form for a request about earlier sharing, and see Meta’s privacy policy for its own controls.

Your advertising measurement setting does not change your daily-feed email preference.

You can clear site data in your browser settings. Doing so may sign you out or remove local preferences and locally stored material. It does not delete your account or information held on our servers.

• Do Not Sell or Share My Personal Information

How long we keep information

Account information and saved material are kept while needed to provide your account and the features you use. If you ask us to delete your account, we assess what can be removed and what must be retained.

Retention depends on the purpose of each record: providing the service, resolving support enquiries or disputes, investigating security issues, meeting accounting or other legal requirements, and honouring email opt-outs. Backup copies may remain until replaced through the backup cycle. We do not promise that every record disappears immediately when an account is closed.

We keep private advertising measurement and attribution records for up to 90 days. Records used to deliver advertising events and prevent duplicate reporting are kept for about 90 days. A manual browser choice lasts 365 days; advertising cookies last up to 90 days. When a private record created after your acceptance expires, measurement stops and you must accept again through Cookies to restart it, including in a region with automatic activation. A record created through automatic activation may be replaced after it expires if your region remains eligible and you have not opted out. These periods describe DeepScroll’s records and cookies, not Meta’s retention of information it has already received.

Your choices and rights

You can ask to access or correct your information, request deletion, restrict certain uses, or receive a portable copy where applicable. These rights depend on the circumstances and the legal basis for the processing.

You can object to processing based on legitimate interests, and you can always object to direct marketing. Where we rely on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Use our contact form to make a request or ask to close your account. We may need to verify your identity. We will respond within the time required by data protection law and explain any information we need to retain.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/, or to your local data protection authority where applicable. You do not have to contact us first.

Younger users

DeepScroll is intended for people aged 16 and over. If you believe someone under 16 has provided personal information through an account, please contact us so we can investigate.

Changes to this policy

We will update this page when our use of personal information changes. The date above shows when it was last revised. We will bring material changes to your attention where required, and seek consent if a new use requires it.