Privacy Policy
Last updated: 31 March 2026 · TechAssembly Ltd · ICO-registered Data Controller
1. Who We Are
TechAssembly Ltd ("we", "us", "our") operates DeepCamp at deepcamp.cc as part of the TechAssembly platform. We are the data controller responsible for your personal data under the UK GDPR and the Data Protection Act 2018.
DeepCamp accounts are TechAssembly accounts. Your identity, sign-in, and account settings are managed at auth.techassembly.io. For the master TechAssembly Privacy Policy see techassembly.io/privacy.
Contact our Data Protection Lead: privacy@techassembly.io
2. What Data We Collect
Account data: email address, display name, hashed password (if email/password login), and OAuth identifiers (Google/GitHub).
Profile & preferences: career, AI experience level, learning goal, topic interests, onboarding responses.
Usage data: videos watched, search queries, saved content, roadmaps generated, streak data, engagement events (topic clicks, time-on-page).
Payment data: subscription status and payment reference IDs from Paystack/Flutterwave. We never store full card numbers — payment processing is handled by our PCI-DSS-compliant payment providers.
Technical data: IP address, country (from Cloudflare headers), browser type, and request logs (retained for 30 days for security monitoring).
Communications: emails you send us and weekly digest preferences.
3. How We Use Your Data
| Purpose | Lawful Basis |
|---|---|
| Provide and personalise the platform (feed, roadmaps, recommendations) | Contract performance |
| Process payments and manage subscriptions | Contract performance |
| Send account-related emails (verification, receipts) | Contract performance |
| Send optional weekly digest / learning nudge emails | Consent (you can unsubscribe any time) |
| Improve recommendations via engagement analytics | Legitimate interests |
| Detect fraud and abuse | Legitimate interests |
| Comply with legal obligations | Legal obligation |
4. Data Sharing
We do not sell your personal data. We share it only with:
- Cloudflare — infrastructure, CDN, D1 database, Workers AI (EU/US data centres). Privacy policy
- AWS — Bedrock AI model inference for roadmap generation. Data is not used to train models. Privacy policy
- Paystack / Flutterwave — payment processing. We pass only your email and payment amount.
- Google Analytics 4 — anonymised aggregate analytics (no cross-site tracking, IP anonymisation enabled).
- Law enforcement — only when legally required.
5. Cookies & Local Storage
We use:
- Session cookie (httpOnly, secure) — keeps you logged in. Expires after 30 days of inactivity.
- localStorage — stores "continue watching" state, watched-video markers, and theme preference. This never leaves your device.
- Google Analytics — uses first-party cookies for aggregate analytics. You can opt out via browser settings or the Google Analytics opt-out extension.
We do not use third-party advertising or tracking cookies.
6. Data Retention
- Account data: retained while your account is active + 90 days after deletion request.
- Usage/engagement logs: retained for 12 months.
- Payment records: retained for 7 years (legal requirement).
- Request logs: 30 days.
7. Your Rights (UK GDPR)
You have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure ("right to be forgotten") — delete your TechAssembly account at auth.techassembly.io/account/delete. This also removes your DeepCamp data.
- Portability — receive your data in a machine-readable format.
- Object — object to processing based on legitimate interests.
- Withdraw consent — unsubscribe from marketing emails at any time.
To exercise any right, email privacy@techassembly.io. We will respond within 30 days. You also have the right to lodge a complaint with the ICO.
8. International Transfers
Your data may be processed in the United States (Cloudflare, AWS). These transfers are protected by Standard Contractual Clauses (SCCs) and Cloudflare's UK GDPR Data Processing Addendum.
9. Children's Privacy
The main platform is for users aged 13 and above. The DeepCamp Kids section is designed for children with parental supervision. We do not knowingly collect personal data from children under 13. If we discover we have, we will delete it immediately. Contact us at privacy@techassembly.io if you have concerns.
10. Security
We use industry-standard measures including TLS encryption in transit, hashed passwords (bcrypt), httpOnly/Secure cookies, and Cloudflare's DDoS protection. No system is 100% secure — please use a strong, unique password and notify us of any suspected breach immediately.
11. Changes to This Policy
We will notify you of material changes by email or prominent in-app notice at least 7 days before they take effect. The "last updated" date at the top of this page reflects the current version.
12. Contact
Privacy enquiries: privacy@techassembly.io
General: hello@techassembly.io
TechAssembly Ltd · England & Wales
Master TechAssembly Privacy Policy: techassembly.io/privacy
DeepCamp AI