Privacy policy

1. Who we are

Deb is provided by Thalassis Pte. Ltd., 160 Robinson Road, Singapore. You can reach us at [email protected].

2. What Deb is

Deb connects an AI assistant you choose, such as Claude or ChatGPT, to the LinkedIn, WhatsApp, Gmail and Outlook accounts you connect, including your calendars, Google Drive and OneDrive. Your assistant uses Deb to read, search and draft in those accounts, and to send messages after you confirm them.

3. Data we process

• Account details: the details you give us when you create your Deb account.
• Sign-in details: your passkeys, of which Deb keeps only the public part, and your recovery email address if you add one.
• Connections: the connections you create to LinkedIn, WhatsApp, Google and Microsoft, so Deb can act in those accounts for you. When you connect LinkedIn, the email and password you enter are passed to our messaging connectivity provider to sign you in. Deb doesn't store your password.
• Content from those services: messages, emails, calendar events, files, profiles and posts that Deb reads from them when your assistant asks for them.
• Drafts and scheduled messages: content saved to be sent later.
• Billing data: your plan, subscription and payment records. Your payment details are collected by our payment provider; Deb never receives your full card number.
• Activity logs: a record of which Deb tools ran, when, and with what result, kept for security and troubleshooting. These logs are designed not to hold message content.
• Feedback reports: when your assistant runs into a problem with Deb, it can file a report describing what happened. You can opt out of these reports on your account page.

Our Security page explains what Deb stores and how it protects it.

4. How we use it

We use this data only to provide Deb's features. We do not sell personal data or use it for advertising.

We don't use your data, or content from the accounts you connect, to train AI models.

5. Your AI assistant

Content Deb returns to Claude or ChatGPT is processed by Anthropic (for Claude) or OpenAI (for ChatGPT) under your agreement with them.

6. Google user data

Deb's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Subprocessors

We use service providers to run Deb, and share with each only what it needs for its job:

• Hosting and database: stores Deb's data and runs its services, in Singapore.
• Network and security: carries traffic between you, your AI assistant and Deb, and protects Deb from attacks.
• Email delivery: sends sign-in codes, recovery links and security notices.
• Messaging connectivity: connects Deb to the LinkedIn and WhatsApp accounts you link, and carries the messages Deb reads and sends there.
• Payments: our payment provider sells Deb subscriptions as the seller of record. It handles checkout, billing, tax and payment support under its own terms and privacy policy.

Google and Microsoft process your data under your own accounts with them. Deb connects to them only with the permissions you approve.

8. Retention and deletion

We keep data only as long as we need it:

• Connected accounts and their sign-in keys: until you disconnect the account or delete your Deb account.
• Drafts: until you send or delete them.
• Scheduled messages: deleted 30 days after they're sent, fail or are cancelled.
• Files you upload to attach: deleted about a day after upload.
• Sign-in codes and recovery links: deleted within about a week after they expire.
• Activity logs: deleted after 180 days.
• Feedback reports: deleted after 12 months.
• Billing records: kept for as long as tax and accounting law requires.

Cancelling your subscription doesn't delete your data. To delete it, delete your Deb account from your account page. That immediately deletes your account, your connections and their sign-in keys, your passkeys, drafts and scheduled messages. For Google accounts, Deb also asks Google to cancel its access. Activity logs are stripped of anything that identifies you and deleted after 180 days. Billing records are kept as the law requires, and our payment provider keeps its own records of your purchases under its privacy policy.

9. International transfers

Deb stores your data in Singapore, where Thalassis Pte. Ltd. is based. If you use Deb from another country, your data is transferred to Singapore. Some of our service providers, such as our network and payment providers, also process data in other countries where they operate. Google, Microsoft, LinkedIn and WhatsApp handle your data in their services under their own terms.

10. Your rights and how to exercise them

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we process it. To exercise these rights, email [email protected]. You can also disconnect any connected account at any time.

11. Changes to this policy

When this policy changes, we update this page and its effective date. Effective date: 11 October 2026.