DeepSeek Privacy Policy

Legal Rights & Agreement Rules · Context

Policy last updated February 10, 2026

This saved policy states that its last update was February 10, 2026.

Supporting quotations

Last Update: Feb 10, 2026

Legal Rights & Agreement Rules · Context

Scope: DeepSeek services, with a downstream-app exclusion

The policy covers personal data processed for DeepSeek apps, websites, software and related services that link to or reference it, including chatbot interactions. It excludes end-user processing in downstream applications built by developers using DeepSeek’s open platform; the developer is responsible for disclosing its own policy. A linked model-mechanism document is separate and is not supplied here.

Supporting quotations

This privacy policy (“Privacy Policy”) applies to the Personal Data (or other similar terms as defined by applicable data protection law) relating to you (“Personal Data”) that DeepSeek processes in connection with DeepSeek apps, websites, software, and related services (the “Services”), that link to or reference this Privacy Policy. The Services enable you to create and interact with chatbots.

Please be informed that the processing rules for Personal Data collected from end users when accessing downstream systems or applications developed by developers using our open platform services are not covered by this privacy policy. The developer operating the application, as the controller of the Personal Data processing activity, should disclose the relevant Personal Data protection policies to the end users. If you would like to learn more about our model mechanism or training methods, please refer to the Model Mechanism and Training Methods of DeepSeek.

Not stated here

• The linked Model Mechanism and Training Methods of DeepSeek text is not supplied here; this card does not describe its training disclosures.

Legal Rights & Agreement Rules · Context

The data controller is based in China

Hangzhou DeepSeek Artificial Intelligence Co., Ltd., with its registered address in China, provides and controls the services. Privacy questions can go to privacy@deepseek.com or the website’s Contact us column.

Supporting quotations

Data Controller: The Services are provided and controlled by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., with its registered address in China (“we” or “us”). If you have any questions about how we use your Personal Data, please contact privacy@deepseek.com or click the “Contact us” column on the website.

Sharing & Disclosure · Company practice

Service providers receive data as necessary for their work

DeepSeek shares user-provided, automatically collected and other-source personal data with providers as necessary to provide, support and develop services and understand use. Examples include inquiry support, communications, analytics and safety monitoring. Under DeepSeek’s instructions, these providers may access, process or store the data only while performing their duties for DeepSeek.

Supporting quotations

We engage service providers that help us provide, support, and develop the Services and understand how they are used. We share Personal Data You Provide, Automatically Collected Personal Data, and Personal Data From Other Sources with these service providers as necessary to enable them to provide their services. For example:

We use third party vendors to provide necessary information to

responde to your inquiries.

We use communication service providers to send notifications and/or

communications to you.

We use analytics services providers to analyse data.

We use support and safety monitoring services providers to assist us

in ensuring the safety of our Services.

Pursuant to our instructions, these parties will access, process, or store Personal Data only in the course of performing their duties to us.

Sharing & Disclosure · Company practice

Search integrations receive your input keywords

DeepSeek integrates third-party search APIs and shares your input keywords to provide search services. The service-provider restriction says these parties access, process or store personal data under DeepSeek’s instructions only while performing duties for it.

Supporting quotations

We integrate third-party APIs to provide search services, and we will

share your input keywords to provide these services.

Pursuant to our instructions, these parties will access, process, or store Personal Data only in the course of performing their duties to us.

Sharing & Disclosure · Company practice

Group entities process data for service functions and model training

Certain DeepSeek group entities process user-provided, automatically collected and other-source data for DeepSeek as necessary for storage, delivery, security, research and development, foundation-model training and optimization, analytics and support. The policy separately lists a training or technology-optimization opt-out depending on residence and applicable legal exceptions.

Supporting quotations

The Services are supported by certain entities within our corporate group. These entities process the Personal Data You Provide, Automatically Collected Personal Data, and Personal Data from Other Sources for us, as necessary to provide certain functions, such as storage, content delivery, security, research and development, foundation model training and optimization, analytics, customer and technical support.

Depending on where you live and subject to exceptions provided under applicable data protection laws, you may have certain rights with respect to your Personal Data.

the right to opt-out of using your Personal Data for training our

models or optimizing our technologies.

Sharing & Disclosure · Company practice

Corporate transactions may involve disclosure

In the limited scenarios described by this section, personal data may be disclosed to third parties in connection with a merger, asset or share sale, reorganization, financing, change of control or acquisition of all or part of DeepSeek’s business.

Supporting quotations

We share your Personal Data with the following categories of third parties in other limited scenarios as follows:

Parties to a Corporate Transaction. Your Personal Data may be disclosed to third parties in connection with a corporate transaction, such as a merger, sale of assets or shares, reorganization, financing, change of control, or acquisition of all or a portion of our business.

Sharing & Disclosure · Company practice

Legal and safety disclosures require a good-faith necessity belief

DeepSeek may access, preserve and share the data described in its collection section with law enforcement, public authorities, copyright holders or other third parties when it believes in good faith this is necessary to comply with law, legal process or government requests, consistently with internationally recognized standards and legal due process; or to protect rights, property and safety. The safety ground includes protecting life and preventing imminent bodily harm, with IP-address disclosure in an emergency as an example.

Supporting quotations

Law Enforcement and Parties with Other Legal Rights. We may access, preserve, and share the Personal Data described in “What Personal Data We Collect” with law enforcement agencies, public authorities, copyright holders, or other third parties if we have good faith belief that it is necessary to:

comply with applicable law, legal process or government requests, as

consistent with internationally recognized standards, in accordance with the due process prescribed by law;

protect the rights, property, and safety of our users, copyright

holders, and others, including protecting life or preventing imminent bodily harm. For example, we may provide Personal Data (such as your IP address) to law enforcement agencies in the event of an emergency where someone’s life or safety is at risk;

Sharing & Disclosure · Company practice

Enforcement and unlawful-activity investigations can involve sharing

On a good-faith belief of necessity, DeepSeek may access, preserve and share the collected personal data with law enforcement, public authorities, copyright holders or other third parties to investigate potential violations and enforce its Terms, Guidelines or other applicable standards, or to detect, investigate, prevent or address misleading activity, copyright infringement or other illegal activity.

Supporting quotations

Law Enforcement and Parties with Other Legal Rights. We may access, preserve, and share the Personal Data described in “What Personal Data We Collect” with law enforcement agencies, public authorities, copyright holders, or other third parties if we have good faith belief that it is necessary to:

investigate potential violations of and enforce our Terms, Guidelines,

or any other applicable terms, policies, or standards; or

detect, investigate, prevent, or address misleading activity,

copyright infringement, or other illegal activity.

Not stated here

• The referenced Terms, Guidelines and other policies are not supplied here; their substantive requirements and violation criteria are not established by this card.

Sharing & Disclosure · Company practice

Requested social-service connections can share data

Depending on where you live, DeepSeek may share personal data with proper authorization or to provide requested or authorized services. It says choosing social-network login or sharing data to a social-media service will involve sharing that data with the third-party service. This does not make consent the only ground for all disclosures described elsewhere in the policy.

Supporting quotations

Depending on where you live, we may share Personal Data with the proper authorization or to provide the Services you have requested or authorized. For example, if you choose to log in to our Services using a social network account, or share Personal Data from our Services to a social media service, we will share that Personal Data with those third parties services. Specifically, you may share the Inputs and Outputs information (together referred to as "Dialogues") by generating a unique URL. When using such feature, any Dialogues you share with others, if subsequently published on public networks, may be at risk of being obtained by third parties through technical means such as web crawlers. We recommend that you take the following precautions when using this feature: (1) avoid sharing your own or others' personal information, especially sensitive personal data; (2) before sharing other individual's personal information, please ensure you have obtained their explicit consent; (3) before publicly publishing any relevant conversation to an open network, carefully review the content to identify any information you would not wish third parties to access.

Sharing & Disclosure · User right or choice

Publicly posted dialogue links can be collected by outsiders

You can share inputs and outputs as a dialogue through a unique URL. If a shared dialogue is subsequently posted on public networks, outsiders may obtain it through tools such as web crawlers. DeepSeek recommends avoiding personal information, particularly sensitive data, obtaining explicit consent before sharing another person’s information, and checking the dialogue before public posting for anything you do not want outsiders to access.

Supporting quotations

Depending on where you live, we may share Personal Data with the proper authorization or to provide the Services you have requested or authorized. For example, if you choose to log in to our Services using a social network account, or share Personal Data from our Services to a social media service, we will share that Personal Data with those third parties services. Specifically, you may share the Inputs and Outputs information (together referred to as "Dialogues") by generating a unique URL. When using such feature, any Dialogues you share with others, if subsequently published on public networks, may be at risk of being obtained by third parties through technical means such as web crawlers. We recommend that you take the following precautions when using this feature: (1) avoid sharing your own or others' personal information, especially sensitive personal data; (2) before sharing other individual's personal information, please ensure you have obtained their explicit consent; (3) before publicly publishing any relevant conversation to an open network, carefully review the content to identify any information you would not wish third parties to access.

you use our Services, we may collect your text input, voice input, prompt, uploaded files, photos, feedback, chat history, or other content that you provide to our model and Services (“Prompts” or “Inputs”). We generate responses (“Outputs”) based on your Inputs. Specifically, we will not extract or mine voiceprint or facial recognition information or other unique biological patterns or characteristics used to identify a specific individual from the voice inputs or photos you provided to us.

Legal Rights & Agreement Rules · Restriction or exception

Third-party content is outside DeepSeek’s control

The services may link to third-party policies, features or content that DeepSeek does not control. DeepSeek disclaims responsibility and representations about those materials and third-party practices or operations.

Supporting quotations

Third-party content. The Services may contain links to policies, functionality, or content maintained by third parties not controlled by us. We are not responsible for, and make no representations regarding, such policies, functionality, or content or any other practices or operations of such third parties.

Account & Service Control · Procedure

Privacy requests and appeals go through email

Privacy rights depend on where you live and applicable legal exceptions. You or an authorized agent can request them at privacy@deepseek.com; DeepSeek may request information to verify identity or authority. You may be entitled to appeal a denial at the same email address and, after an unsuccessful appeal, raise a concern or complaint with the competent authority depending on your location.

Supporting quotations

Depending on where you live and subject to exceptions provided under applicable data protection laws, you may have certain rights with respect to your Personal Data.

To exercise your rights, you or an authorized agent may submit a request by emailing us at privacy@deepseek.com.

After we receive your request, we may verify it by requesting information sufficient to confirm your identity or authority to exercise a right on behalf of someone else.

You may also have the right to appeal requests that we deny by emailing privacy@deepseek.com. If your appeal is unsuccessful and depending on where you live, you may have the right to raise a concern or lodge a complaint with the competent authority.

Account & Service Control · Company commitment

Exercising privacy rights will not bring discrimination

DeepSeek promises not to discriminate against you for exercising a privacy right you have.

Supporting quotations

We will not discriminate against you for exercising any privacy right you may have.

Account & Service Control · User right or choice

Access, correction and deletion rights depend on applicable law

Depending on residence and legal exceptions, available rights may include knowing whether and how data is processed, accessing it, correcting inaccuracies and deleting personal data you provided or that DeepSeek obtained about you. The policy does not promise that every request or every person qualifies.

Supporting quotations

Depending on where you live and subject to exceptions provided under applicable data protection laws, you may have certain rights with respect to your Personal Data.

Privacy rights that may be available to you include:

the right to know whether and how we process your Personal Data;

the right to access your Personal Data;

the right to correct

inaccuracies in your Personal Data;

the right to delete Personal Data you’ve provided to us, or that we’ve

obtained about you;

Account & Service Control · User right or choice

A portable copy may be available with technical limits

Depending on residence and legal exceptions, you may have a right to a portable copy of personal data you provided or DeepSeek obtained about you. This applies to data available digitally; a format allowing transfer to another service is subject to technical feasibility.

Supporting quotations

Depending on where you live and subject to exceptions provided under applicable data protection laws, you may have certain rights with respect to your Personal Data.

the right to receive a portable copy of Personal Data you’ve provided

to us, or that we’ve obtained about you, to the extent it is available in a digital format, and where technically feasible, in a format that allows you to transfer your Personal Data to another service, and

Sharing & Disclosure · Company commitment

DeepSeek says it does not sell data or run targeted advertising

The policy lists a possible, location-dependent right to opt out of targeted advertising, sale and consequential profiling, subject to legal exceptions. It also expressly says DeepSeek does not engage in targeted advertising, sell personal data, or use personal data for profiling or other automated decisions having legal or similarly significant effects. That statement does not prohibit all the provider, legal and other disclosures described elsewhere.

Supporting quotations

Depending on where you live and subject to exceptions provided under applicable data protection laws, you may have certain rights with respect to your Personal Data.

the right to opt-out

of the processing of your Personal Data for the purposes of targeted advertising, sale or profiling that could have legal or similarly consequential impact on you. NOTE WE DO NOT ENGAGE IN TARGETED ADVERTISING, “SELL” PERSONAL DATA OR USE PERSONAL DATA FOR “PROFILING” OR OTHERWISE ENGAGE IN AUTOMATED PROCESSING OF PERSONAL DATA TO MAKE DECISIONS THAT COULD HAVE LEGAL OR SIMILARLY SIGNIFICANT IMPACT ON YOU OR OTHERS.

Use & Processing · User right or choice

You may have a right to opt out of model-training use

The rights list includes opting out of use of your personal data for training models or optimizing technology, depending on where you live and applicable legal exceptions. Requests can be sent by you or an authorized agent to privacy@deepseek.com. The clause does not promise universal eligibility or removal of information already learned by a model.

Supporting quotations

Depending on where you live and subject to exceptions provided under applicable data protection laws, you may have certain rights with respect to your Personal Data.

To exercise your rights, you or an authorized agent may submit a request by emailing us at privacy@deepseek.com.

the right to opt-out of using your Personal Data for training our

models or optimizing our technologies.

Cross-references

• qualifies (model-proposed): Data is used for model improvement, with a qualified opt-out right — qualifies: The training-use statement is limited by the listed opt-out, whose availability depends on residence and legal exceptions.
• qualifies (model-proposed): Group entities process data for service functions and model training — qualifies: Group model-training functions sit alongside the same qualified training opt-out described in the policy.

Account & Service Control · User right or choice

Settings let you copy or delete chat history

You can access and control some personal data through settings, including managing, copying or deleting chat history. This is a control over some data, not an assurance that every retained record is removed through settings.

Supporting quotations

You can control and access some of your Personal Data directly through settings. For example, you can manage your chat history. Should you choose to do so, you may also copy or delete your chat history via your settings.

Account & Service Control · Restriction or exception

Deleting an account ends your ability to restore its content

If you delete your account, you cannot reactivate it or retrieve associated content or personal data. That loss of access is not a promise of immediate deletion of every retained record: the retention section permits keeping data for necessary service and policy purposes, contractual or legal obligations, legitimate business interests and legal claims.

Supporting quotations

If you choose to delete your account, you will not be able to reactivate your account or retrieve any of the content or Personal Data in connection with your account.

We retain Personal Data for as long as necessary to provide our Services and for the other purposes set out in this Privacy Policy. We also retain Personal Data when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing our Services and enhancing their safety, security and stability), and for the exercise or defense of legal claims.

Use & Processing · Procedure

Outputs can be inaccurate; correction requests have limits

DeepSeek explains that its model predicts likely words and may produce inaccurate statements, so you should not rely on output as factually accurate. If output contains inaccurate personal data about you, you can request correction or removal at privacy@deepseek.com. DeepSeek will consider the request under applicable law and its models’ technical capabilities; it does not guarantee every request can be fulfilled.

Supporting quotations

A note about accuracy: Services like DeepSeek generate responses by reading a user’s request and, in response, predicting the words most likely to appear next. In some cases, the words most likely to appear next may not be the most factually accurate.

For this reason, you should not rely on the factual accuracy of Output from our models. If you notice that Output contains factually inaccurate Personal Data about you and you would like to request a correction or removal of the Personal Data, you can submit these requests through privacy@deepseek.com and we will consider your request based on applicable law and the technical capabilities of our models.

Security & Safeguards · Company practice

Security measures do not guarantee secure transmission

DeepSeek maintains commercially reasonable technical, administrative and physical measures against unauthorized access, theft, disclosure, modification and loss, and reviews new methods and technology. It warns that internet and email transmission is never fully secure or error-free, urges care with submitted data, and disclaims responsibility for circumvention of privacy settings or security measures on its services or third-party sites.

Supporting quotations

The security of your Personal Data is important to us. We maintain commercially reasonable technical, administrative, and physical security measures that are designed to protect your Personal Data from unauthorized access, theft, disclosure, modification, or loss. We regularly review our security measures to consider available new technology and methods. However, no Internet or email transmission is ever fully secure or error free. In particular, emails sent to or from us may not be secure. Therefore, you should take special care in deciding what Personal Data you send to us via the Services or email. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Services, or third-party websites.

Retention & Deletion · Company practice

Retention depends on purpose, account duration and other needs

DeepSeek retains data as long as necessary for services and other policy purposes, contractual or legal obligations, legitimate business interests such as improving and securing services, and legal claims. Periods vary with data amount, type, sensitivity, purposes and law. For service delivery it keeps account, input and payment data while you have an account; violation-related data may be kept as necessary to handle the violation. When no longer required, DeepSeek and its providers destroy, delete, erase or anonymize it as law permits or requires. No single fixed retention period is stated.

Supporting quotations

We retain Personal Data for as long as necessary to provide our Services and for the other purposes set out in this Privacy Policy. We also retain Personal Data when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing our Services and enhancing their safety, security and stability), and for the exercise or defense of legal claims.

The retention periods will be different depending on the amount, type and sensitivity of Personal Data, the purposes for which we use the Personal Data and any legal requirements, etc. For example, when we process your Personal Data to provide you with the Services, we keep this Personal Data for as long as you have an account. This Personal Data includes your account Personal Data, input and payment Personal Data. If you violate any of our terms, policies or guidelines, we may keep your Personal Data as necessary to process the violation.

When the Personal Data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws.

Cross-references

• contrast (model-proposed): Settings let you copy or delete chat history — contrast: Settings permit chat-history deletion, while the policy separately retains data for necessary service, legal, business and claims purposes. The deletion control is not a universal immediate-erasure promise.
• qualifies (model-proposed): Deleting an account ends your ability to restore its content — qualifies: Inability to reactivate or retrieve deleted-account content does not eliminate the separate stated retention purposes.

Use & Processing · Company practice

Personal data is collected, processed and stored in China

DeepSeek directly collects, processes and stores personal data in the People’s Republic of China to provide services, and says a server may be outside your country of residence. Where required, it will use appropriate safeguards for cross-border transfers in accordance with applicable data-protection law. This is not a promise to keep your data in your home country.

Supporting quotations

The Personal Data we collect from you may be stored on a server located outside of the country where you live. To provide you with our services, we directly collect, process and store your Personal Data in People's Republic of China.

Where required, we will use appropriate safeguards for transferring Personal Data outside of certain countries, including for one or more of the purposes as set out in this Policy, we will do so in accordance with the requirements of applicable data protection laws.

Data Access & Collection · Company commitment

Child-data reports trigger investigation and qualified deletion

DeepSeek says its services are not aimed at children and it does not knowingly process children’s personal data. If it notices or receives feedback that it collected data from a child, it will investigate and, where appropriate, delete it to the extent law permits. Reports can be sent to privacy@deepseek.com. This clause states no numerical age threshold.

Supporting quotations

Our Services are not aimed at children, and we do not knowingly process Personal Data from children. If we notice or receive feedback that we have collected any of their Personal Data from a child, we will investigate, and where appropriate, delete the Personal Data to the extent permitted by applicable law. If you believe that we processed Personal Data about or collected from a child, please contact us at privacy@deepseek.com.

Legal Rights & Agreement Rules · Procedure

Updates may be announced by a revised date or posted policy

DeepSeek may update the policy from time to time as required by law. Notice can take the form of a changed last-updated date, posting a new policy, or another notice required by applicable law. It recommends checking the policy whenever using the service; the clause does not promise an individual email for every change.

Supporting quotations

We may update this Privacy Policy from time to time as required by law. When we update the Privacy Policy, we will notify you by updating the “Last Updated” date at the top of the new Privacy Policy, posting the new Privacy Policy, or by providing any other notice required by applicable law. We recommend that you review the Privacy Policy each time you access our Services to stay informed of our privacy practices.

Account & Service Control · Procedure

Privacy questions can go to email or the website

Policy questions, comments and requests should be sent to privacy@deepseek.com or through the website’s Contact us column.

Supporting quotations

Questions, comments and requests regarding this policy should be addressed to privacy@deepseek.com or click “Contact us” column on the website.

Legal Rights & Agreement Rules · Context

Additional European rules map purposes to legal bases

For people using the services in the EEA, Switzerland or UK, additional terms apply. DeepSeek says it uses personal data only as law permits and identifies purposes, categories and legal bases in a table. You may decline some data fields, but doing so may affect the services available to you. These are region-specific additional rules, not universal rights for all users.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

We use your Personal Data only as permitted by law. Our legal bases for processing your Personal Data described in this Privacy Policy are described in the table below.

Please be aware that we collect your Personal Data for the purposes set out in the table above. You may choose not to provide some of the Personal Data fields, but this may affect the Services you are able to use from us.

Legal Rights & Agreement Rules · Company practice

European operations rely on contract, requested consent or a limited minor-related basis

In the EEA, Switzerland and UK, the service-operation and enforcement row covers account data, inputs, contacts with DeepSeek, device/network data, logs, location and cookies; the general policy excludes its cookie provision from the App. Listed bases are performance of the service contract or requested pre-signup steps, and consent when requested for a specific account-creation purpose. For ages 14–17 with limited contracting ability, when contractual necessity is unavailable, DeepSeek relies on legitimate interests to enable access and use. This describes a processing basis, not a general declaration of age eligibility.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

To provide, administer and maintain the Services and to enforce our terms, conditions and policies. Such as creating the accounts, deliver a fast and convenient logging-in experience, enabling you to chat with DeepSeek and provide user support.

Account Personal Data User Input Personal Data When You Contact Us Device and Network Personal Data Log Personal Data Location Personal Data Cookies

Performance of a contract with you when we provide and maintain our services. To take steps that you request prior to signing up for an account to use the Platform.

Your consent when we ask for it to process your Personal Data for a specific purpose to help you create accounts.

Legitimate interests. If you are 14 or older but under the age of 18, with a limited ability to enter into an enforceable contract only, where we may be unable to process your Personal Data on the grounds of contractual necessity, we rely on legitimate interests and use the Personal Data we collect to allow you to access and use the Platform.

To avoid any doubt, Cookies & Similar Technologies and Payment Personal Data are not applicable to DeepSeek App.

Cross-references

• contrast (model-proposed): Child-data reports trigger investigation and qualified deletion — contrast: The general policy says the services are not aimed at children, while the European table supplies a processing basis for some users aged 14–17 with limited contracting ability. The regional basis is not itself an age-eligibility grant or proof of a contradiction.

Use & Processing · Company practice

European model improvement uses stated interests and requested consent

For EEA, Swiss and UK users, the improvement and training row covers account data, inputs, contacts with DeepSeek, device/network data, logs, location and cookies, with the general App cookie exclusion. It lists legitimate interests in resolving issues, improving services and researching and protecting data through aggregation or anonymization consistent with minimization and privacy by design, plus consent when requested for a specific service purpose. Legitimate-interest processing can be challenged unless compelling grounds override the objection; the policy also lists a location- and law-qualified training or technology-optimization opt-out.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

To improve and develop the Services and to train and improve our technology, such as our machine learning models and algorithms. Including by monitoring interactions and usage across your devices, analyzing how people are using it, and training and improving our technology.

Account Personal Data User Input Personal Data When You Contact Us Device and Network Personal Data Log Personal Data Location Personal Data Cookies

Our legitimate interests to identify and resolve issues with the Platform and to improve the Platform; and to conduct research and protect Personal Data through aggregation or anonymization, consistent with data minimization and privacy by design principles.

Your consent when we ask for it to process your Personal Data for a specific purpose to provide services.

To avoid any doubt, Cookies & Similar Technologies and Payment Personal Data are not applicable to DeepSeek App.

The right to object to processing if we are processing your Personal

Data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your Personal Data and to balance our legitimate interest in processing and your objection to this processing;

Depending on where you live and subject to exceptions provided under applicable data protection laws, you may have certain rights with respect to your Personal Data.

the right to opt-out of using your Personal Data for training our

models or optimizing our technologies.

Legal Rights & Agreement Rules · Company practice

European legal and public-interest processing has specified grounds

In the EEA, Switzerland and UK, the legal-obligation, public-interest and vital-interest row covers account data, inputs, contacts, device/network data, logs, location and cookies, subject to the App cookie exclusion. It lists compliance duties, valid legal requests and protection of rights, safety and property, plus legitimate interests in protecting the business, employees and users and sharing with regulators or government entities. Emergency health or life disclosures remain subject to the general legal-due-process wording. The regional objection right for legitimate-interest processing applies unless overriding compelling grounds are shown.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

To comply with our legal obligations, or as necessary to perform tasks in the public interest, or to protect the vital interests of our users and other people. This could include providing law enforcement agencies or emergency services with Personal Data in urgent situations to protect health or life.

Account Personal Data User Input Personal Data When You Contact Us Device and Network Personal Data Log Personal Data Location Personal Data Cookies

Compliance with our legal obligations. This includes situations where we have obligations to take measures to ensure the safety of our users or comply with a valid legal request such as an order from law enforcement agencies or courts; and where we have obligations to comply with applicable law or when we protect our or our affiliates’, users’, or third parties’ rights, safety, and property.

Our legitimate interests to protect our business, employees and users from illegal activities, inappropriate behavior or violations of terms that would be detrimental, and to disclose and share Personal Data with regulators or other government entities.

To avoid any doubt, Cookies & Similar Technologies and Payment Personal Data are not applicable to DeepSeek App.

in the public interest, or to protect the vital interests of our users and other people. This could include providing law enforcement agencies or emergency services with Personal Data in urgent situations to protect health or life, in accordance with the due process prescribed by law.

The right to object to processing if we are processing your Personal

Data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your Personal Data and to balance our legitimate interest in processing and your objection to this processing;

Use & Processing · Company practice

European service communications use narrower listed data categories

For EEA, Swiss and UK users, the communication row lists account data, data provided when contacting DeepSeek, and location data for changes, support and other service messages. It lists performance of the service contract and consent when requested for a specific communication purpose. This row does not list every data category from the other rows, and its omission of commercial messages does not itself establish a document-wide ban on them.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

To communicate with you, including to notify you about changes to the Platform, provide customer support to you and send you other service-related messages.

Account Personal Data Personal Data When You Contact Us Location Personal Data

Performance of a contract with you when we provide and maintain our services.

Your consent when we ask for it to process your Personal Data for a specific purpose to communicate with you.

Security & Safeguards · Company practice

European security processing rests on obligations and legitimate interests

For EEA, Swiss and UK users, safety, security and stability activities include abuse, fraud and illegal-activity prevention, troubleshooting, analysis, testing and research. Listed data are account data, inputs, contacts, device/network data, logs, location and cookies, subject to the App cookie exclusion. The row cites legal obligations and protecting rights, safety and property, and legitimate interests in a safe platform. The regional right to object to legitimate-interest processing is subject to overriding compelling grounds.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

To promote the safety, security, and stability of the Platform, such as by preventing and detecting abuse, fraud, and illegal activity on the Platform and by conducting troubleshooting, data analysis, testing, and research.

Account Personal Data User Input Personal Data When You Contact Us Device and Network Personal Data Log Personal Data Location Personal Data Cookies

Compliance with our legal obligations when we use your Personal Data to comply with applicable law or when we protect our or our affiliates’, users’, or third parties’ rights, safety, and property.

Our legitimate interests to ensure that the Platform is safe and secure.

To avoid any doubt, Cookies & Similar Technologies and Payment Personal Data are not applicable to DeepSeek App.

The right to object to processing if we are processing your Personal

Data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your Personal Data and to balance our legitimate interest in processing and your objection to this processing;

Use & Processing · Company practice

European users’ data is also processed and stored in China

The European supplement repeats that DeepSeek directly collects, processes and stores personal data in China, and that servers may be outside a user’s country. Using the services in the EEA, Switzerland or UK does not create a local-storage promise.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

The Personal Data we collect from you may be stored on a server located outside of the country where you live. To provide you with our services, we directly collect, process and store your Personal Data in People's Republic of China.

Account & Service Control · User right or choice

European users can request confirmation and a copy free of charge

For EEA, Swiss and UK users, the supplement gives a right to request free confirmation of whether DeepSeek processes personal data and access to a copy of retained data. Before responding, DeepSeek may require verification of identity or account details.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

You have the following rights:

The right to request free of charge (i) confirmation of whether we

process your Personal Data and (ii) access to a copy of the Personal Data retained;

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Account & Service Control · User right or choice

European correction, erasure and restriction rights

EEA, Swiss and UK users can request proper correction or erasure of personal data or restriction of processing. The supplement describes restriction when accuracy is disputed; processing was unlawful but you oppose deletion; you need data for a legal claim; or an objection is awaiting a decision. DeepSeek may require identity or account verification before responding.

Supporting quotations

If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

The right to request proper rectification or erasure of your Personal

Data or restriction of the processing of your Personal Data;

You have the right to request the restriction of the processing of

your Personal Data where (a) you are challenging the accuracy of the Personal Data, (b) the Personal Data has been unlawfully processed, but you are opposing the deletion of that Personal Data, (c) where you need the Personal Data to be retained for the pursuit or defense of a legal claim, or (d) you have objected to the processing and you are awaiting the outcome of that objection request.

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Account & Service Control · User right or choice

European portability depends on consent or contract and automation

For EEA, Swiss and UK users, where processing is based on consent or contract necessity and is automated, the supplement provides a right to receive personal data in a structured, commonly used, machine-readable format or have it sent directly to another company where technically feasible. Identity or account verification may be required before DeepSeek responds.

Supporting quotations

European Economic Area (“EEA”), Switzerland, and UK

Where processing of your Personal Data is either based on your consent

or necessary for the performance of a contract with you and processing is carried out by automated means, the right to receive the Personal Data concerning you in a structured, commonly used and machine-readable format or to have your Personal Data transmitted directly to another company, where technically feasible (data portability);

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Use & Processing · User right or choice

European consent can be withdrawn for future processing

For EEA, Swiss and UK users, consent-based processing can be challenged by withdrawing consent at any time. Withdrawal does not affect the lawfulness of processing that took place beforehand. Identity or account verification may be required before DeepSeek responds to a rights request.

Supporting quotations

European Economic Area (“EEA”), Switzerland, and UK

Where the processing of your Personal Data is based on your consent,

the right to withdraw your consent at any time (withdrawal will not impact the lawfulness of data processing activities that have taken place before such withdrawal);

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Use & Processing · User right or choice

European automated-decision rights list exceptions, while DeepSeek says it does not make such decisions

The European supplement provides a right not to face automated individual decisions, including profiling, with legal or similarly significant effects, except with consent, EU or Member State legal authorization, or contract necessity. Separately, DeepSeek says it does not undertake such consequential automated processing. The listed legal exceptions do not establish that DeepSeek actually uses them.

Supporting quotations

European Economic Area (“EEA”), Switzerland, and UK

The right not to be subject to any automatic individual decisions,

including profiling, which produces legal effects on you or similarly significantly affects you unless we have your consent, this is authorised by European Union or Member State law or this is necessary for the performance of a contract;

of the processing of your Personal Data for the purposes of targeted advertising, sale or profiling that could have legal or similarly consequential impact on you. NOTE WE DO NOT ENGAGE IN TARGETED ADVERTISING, “SELL” PERSONAL DATA OR USE PERSONAL DATA FOR “PROFILING” OR OTHERWISE ENGAGE IN AUTOMATED PROCESSING OF PERSONAL DATA TO MAKE DECISIONS THAT COULD HAVE LEGAL OR SIMILARLY SIGNIFICANT IMPACT ON YOU OR OTHERS.

Cross-references

• contrast (model-proposed): No automated decisions with legal or similarly significant effects — contrast: The European rights clause lists exceptions to a right against consequential automated decisions, while DeepSeek says it does not make those decisions. Legal exceptions in the rights description do not establish actual use of them.

Use & Processing · User right or choice

European users can object to legitimate-interest processing

For EEA, Swiss and UK users, there is a right to object when DeepSeek relies on legitimate interests, unless it demonstrates compelling grounds overriding that right. DeepSeek asks you to explain your grounds so it can examine and balance the objection against its interest. Identity or account verification may be required for the request.

Supporting quotations

European Economic Area (“EEA”), Switzerland, and UK

The right to object to processing if we are processing your Personal

Data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your Personal Data and to balance our legitimate interest in processing and your objection to this processing;

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Cross-references

• qualifies (model-proposed): European model improvement uses stated interests and requested consent — qualifies: The European legitimate-interest training basis is subject to an objection unless overriding compelling grounds are demonstrated.

Use & Processing · User right or choice

European restriction rights cover disputes and legal claims

EEA, Swiss and UK users can request restriction when challenging accuracy; when processing is unlawful but they oppose deletion; when they need data for pursuing or defending a legal claim; or while awaiting the outcome of a processing objection. Identity or account verification may be required. A request for restriction is distinct from a demand to erase the information.

Supporting quotations

European Economic Area (“EEA”), Switzerland, and UK

You have the right to request the restriction of the processing of

your Personal Data where (a) you are challenging the accuracy of the Personal Data, (b) the Personal Data has been unlawfully processed, but you are opposing the deletion of that Personal Data, (c) where you need the Personal Data to be retained for the pursuit or defense of a legal claim, or (d) you have objected to the processing and you are awaiting the outcome of that objection request.

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Use & Processing · User right or choice

European users can object to direct-marketing processing

The European supplement gives EEA, Swiss and UK users a right to object to processing personal data for direct marketing. DeepSeek may require identity or account verification for rights requests. This is a marketing objection right, not a statement that all service communications are marketing.

Supporting quotations

European Economic Area (“EEA”), Switzerland, and UK

The right to object to processing your Personal Data for direct

marketing purposes; and

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Cross-references

• qualifies (model-proposed): Communications can include commercial messages — qualifies: For European-region users the direct-marketing objection right limits personal-data use for marketing, without treating every service message as marketing.

Legal Rights & Agreement Rules · User right or choice

European users can complain to their local data authority

The European supplement gives EEA, Swiss and UK users the right to lodge complaints before their local data-protection authority.

Supporting quotations

European Economic Area (“EEA”), Switzerland, and UK

The right to lodge complaints before your local data protection

authority.

Account & Service Control · Procedure

European rights requests can be emailed to DeepSeek

EEA, Swiss and UK users can exercise the listed rights by emailing privacy@deepseek.com. DeepSeek may first require verification of identity or account details.

Supporting quotations

European Economic Area (“EEA”), Switzerland, and UK

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Please send an email to us if you would like to exercise any of your rights at privacy@deepseek.com.

Account & Service Control · Procedure

EU and UK users have a privacy-representative contact

DeepSeek appoints Prighter Group and local partners as privacy representative and contact for the EU and UK. Data-subject requests can also be sent to rep_deepseek@prighter.com with “Data Subject Request” as the subject and details of the request. The linked portal is offered to verify the appointment and find contact details. This appointment statement does not list Switzerland or every non-EU EEA country.

Supporting quotations

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

-European Union (EU)

-United Kingdom (UK)

If you wish to lodge a data subject request, you may also exercise your rights by contacting us at rep_deepseek@prighter.com, with “Data Subject Request” in the subject line, setting out the details of your rights request. To verify the appointment of Prighter as our representative and for further contact details please visit https://app.prighter.com/portal/deepseek.

Data Access & Collection · Company practice

Three routes for collecting personal data

DeepSeek collects data you provide, data collected automatically, and data from other sources. Creating an account, submitting content, contacting DeepSeek or otherwise using the services may involve providing some or all of the listed data; receiving data from other sources is described as a possibility.

Supporting quotations

We collect your Personal Data in three ways: Personal Data You Provide, Automatically Collected Personal Data, and Personal Data From Other Sources. More detail is provided below.

When you create an account, input content, contact us directly, or otherwise use the Services, you may provide some or all of the following Personal Data:

We may receive the Personal Data described in this Privacy Policy from other sources, such as:

Data Access & Collection · Company practice

Account setup collects contact and login details

When you set up an account, DeepSeek collects the personal data you provide, including email and/or telephone number and password, and date of birth and username where applicable.

Supporting quotations

Account Personal Data.

We collect Personal Data that you provide when you set up an account, such as your date of birth (where applicable), username (where applicable), email address and/or telephone number, and password.

Data Access & Collection · Company practice

Prompts and uploads may be collected, with a biometric-extraction limit

DeepSeek may collect text and voice inputs, prompts, files, photos, feedback, chat history and other content you provide, and generates outputs from those inputs. It says it will not extract or mine voiceprints, facial-recognition information or other unique biological identifying patterns from your voice inputs or photos. This is a limit on extracting identifying features, not a promise that the voice or photo inputs themselves are never collected.

Supporting quotations

User Input. When

you use our Services, we may collect your text input, voice input, prompt, uploaded files, photos, feedback, chat history, or other content that you provide to our model and Services (“Prompts” or “Inputs”). We generate responses (“Outputs”) based on your Inputs. Specifically, we will not extract or mine voiceprint or facial recognition information or other unique biological patterns or characteristics used to identify a specific individual from the voice inputs or photos you provided to us.

Data Access & Collection · Company practice

Contacting DeepSeek supplies additional personal data

DeepSeek collects personal data you send when contacting it, such as identity or age proof, contact details, feedback, service inquiries and data about possible violations of its Terms or other policies. The linked Terms are not supplied here, so this card does not determine what violates them.

Supporting quotations

Personal Data When You Contact Us. When you contact us, we collect the Personal Data you send to us,

such as proof of identity or age, contact details, feedback or inquiries about your use of the Services or Personal Data about possible violations of our Terms of Service (our “Terms”) or other policies.

Not stated here

• The linked Terms of Service text is not supplied; its violation criteria cannot be determined from this clause.

Linking & Identification · Company practice

Device and network data also link activity across devices

DeepSeek automatically collects network and device information, including IP address, unique identifiers, device model, operating system and language, plus crash reports and performance logs. It also lists cookies, but expressly excludes its cookies-and-similar-technologies provision from the DeepSeek App. It assigns device and user IDs. When you log in from multiple devices, it uses identifiers to recognize cross-device activity for a seamless login experience and security.

Supporting quotations

We automatically collect certain Personal Data from you when you use the Services, including internet or other network activity Personal Data such as your IP address, unique device identifiers, and cookies.

Device and Network Personal Data. We collect certain device and network connection Personal Data when

you access the Services. This Personal Data includes your device model, operating system, IP address, device identifiers and system language. We also collect service-related, diagnostic, and performance Personal Data, including crash reports and performance logs. We automatically assign you a device ID and user ID. Where you log-in from multiple devices, we use Personal Data such as your device ID and user ID to identify your activity across devices to give you a seamless log-in experience and for security purposes.

To avoid any doubt, Cookies & Similar Technologies and Payment Personal Data are not applicable to DeepSeek App.

Data Access & Collection · Company practice

Usage logs record features and actions

DeepSeek collects information about your use of the services, including the features you use and actions you take.

Supporting quotations

Log Personal Data. We collect Personal Data regarding your use of the Services, such

as the features you use and the actions you take.

Data Access & Collection · Company practice

Approximate location comes from IP address

DeepSeek automatically derives approximate location from IP address for security, such as unusual-login detection, and to answer location-related inquiries. It says it will not obtain precise geolocation by other means without your explicit consent.

Supporting quotations

Location Personal Data. We automatically collect Personal Data about your approximate

location based on IP address (1) for security reasons, for example to protect your account by detecting unusual login activity; (2) to respond to your inquiries related to your location (e.g., when you ask, "What's the weather like in my city?" or "Please recommend local cuisines in my city"). We will not obtain your precise geolocation information through other means without your explicit consent.

Data Access & Collection · Company practice

Cookie use and controls exclude the DeepSeek App

DeepSeek may use cookies and similar tracking technologies to operate and provide the service, including security and understanding use. Where law requires, it allows management of non-essential cookies. The policy expressly says this cookies-and-similar-technologies provision does not apply to the DeepSeek App. The separate linked Cookies Policy is not supplied here.

Supporting quotations

Cookies & Similar Technologies. We may use cookies and similar tracking technologies to operate and

provide the Service. For example, we use cookies for security purposes and to better understand how the Service is used. We will allow you to manage our use of non-essential cookies where required by law. To learn more about our use of cookies, please see our Cookies Policy.

To avoid any doubt, Cookies & Similar Technologies and Payment Personal Data are not applicable to DeepSeek App.

Not stated here

• The linked Cookies Policy text is not supplied; additional cookie details cannot be inferred.

Charges & Financial Obligations · Context

The payment-data provision concerns paid open-platform services

The policy describes collection of payment-order and transaction data when using paid services on the open platform, for ordering, payment, customer service and after-sales support. It expressly excludes the DeepSeek App from this provision. This clause does not establish payment-data collection for consumer app subscriptions.

Supporting quotations

Payment Personal Data. When you use paid services in our open platform, we collect your

payment order and transaction Personal Data to provide Services such as order placement, payment, customer service, and after-sales support.

To avoid any doubt, Cookies & Similar Technologies and Payment Personal Data are not applicable to DeepSeek App.

Data Access & Collection · Company practice

Third-party login can supply account-linking data

Where available, choosing Apple, Google or another third-party service to sign up or log in, or linking a third-party account, may let DeepSeek collect data from that service, such as an access token.

Supporting quotations

Log-in, Sign-up, or Linked Services. Where available, if you choose to sign-up or log-in to the Services

using a third-party service such as Apple or Google, or link your account to a third-party service, we may collect Personal Data from the third-party service, such as access token.

Data Access & Collection · Company practice

Security partners supply data to address threats

DeepSeek receives personal data from trusted partners, including security partners, to protect its services against fraud, abuse and other security threats.

Supporting quotations

Security Personal Data. We receive

Personal Data from our trusted partners, such as security partners, to protect against fraud, abuse, and other security threats to our Services.

Data Access & Collection · Company practice

Public online personal data may be used for model training

DeepSeek may obtain publicly available personal data from online sources to train its models and provide services. The clause does not say that all training data comes from public sources.

Supporting quotations

Public Personal Data. We may obtain publicly available Personal Data via online sources to

train our models and provide Services.

Data Access & Collection · Restriction or exception

Do not supply sensitive personal data

The services are not designed or intended to process sensitive personal data. DeepSeek says it does not ask for it and that you should not submit it about yourself or anyone else. Its examples include racial or ethnic origin, religion, health, sexuality, citizenship, immigration status, genetic or biometric data, children’s data, precise location and criminal membership. This instruction is not a guarantee that submitted sensitive data cannot reach the service.

Supporting quotations

The Services are not designed or intended to process sensitive Personal Data (e.g., personal data revealing racial or ethnic origin, religious beliefs, health, sexuality, citizenship, immigration status, genetic or biometric data, personal data of children, precise geolocation or criminal membership). We do not ask for, and you should not provide sensitive Personal Data to the Services, whether about yourself or other individuals.

Use & Processing · Company practice

Personal data supports operation and enforcement

DeepSeek uses personal data to operate, provide, develop and improve its services. Operational purposes include administering and maintaining services, enforcing terms and policies, creating accounts, convenient login, chatting and user support.

Supporting quotations

We use your Personal Data to operate, provide, develop, and improve the Services, including for the following purposes.

To provide, administer and maintain the Services and to enforce our

terms, conditions and policies. Such as creating the accounts, deliver a fast and convenient logging-in experience, enabling you to chat with DeepSeek and provide user support.

Use & Processing · Company practice

Data is used for model improvement, with a qualified opt-out right

DeepSeek uses personal data to improve and develop services and train and improve its models and algorithms, including monitoring interactions and usage across devices and analyzing use. Its rights section lists an opt-out from using personal data to train models or optimize technology, depending on where you live and subject to applicable legal exceptions.

Supporting quotations

To improve and develop the Services and to train and improve our

technology, such as our machine learning models and algorithms. Including by monitoring interactions and usage across your devices, analyzing how people are using it, and training and improving our technology.

Depending on where you live and subject to exceptions provided under applicable data protection laws, you may have certain rights with respect to your Personal Data.

the right to opt-out of using your Personal Data for training our

models or optimizing our technologies.

Use & Processing · Company practice

Communications can include commercial messages

DeepSeek uses personal data to communicate service changes, provide support, and send other service-related or commercial messages. For EEA, Swiss and UK users, the supplement gives a right to object to processing personal data for direct marketing; that does not make every service message marketing.

Supporting quotations

To communicate with you, including to notify you about changes to the

Services, provide customer support to you and send you other service-related messages or commercial messages.

European Economic Area (“EEA”), Switzerland, and UK

The right to object to processing your Personal Data for direct

marketing purposes; and

Security & Safeguards · Company practice

Data supports safety, stability and threat detection

DeepSeek uses personal data to promote service safety, security and stability, including preventing and detecting abuse, fraud and illegal activity, troubleshooting, analysis, testing and research.

Supporting quotations

To promote the safety, security, and stability of the Services, such

as by preventing and detecting abuse, fraud, and illegal activity on the Services and by conducting troubleshooting, data analysis, testing, and research.

Legal Rights & Agreement Rules · Company practice

Legal duties and urgent health or life protection are processing purposes

DeepSeek uses personal data to comply with legal obligations, perform necessary public-interest tasks or protect people’s vital interests. This may include providing data to law enforcement or emergency services in urgent health or life situations, in accordance with legally prescribed due process.

Supporting quotations

To comply with our legal obligations, or as necessary to perform tasks

in the public interest, or to protect the vital interests of our users and other people. This could include providing law enforcement agencies or emergency services with Personal Data in urgent situations to protect health or life, in accordance with the due process prescribed by law.

Use & Processing · Company commitment

No automated decisions with legal or similarly significant effects

DeepSeek says it does not engage in profiling or other automated processing of personal data to make decisions with legal or similarly significant effects on you or others. This statement concerns consequential decision-making; it does not mean the service performs no automated processing at all.

Supporting quotations

PLEASE NOTE: We do not engage in “profiling” or otherwise engage in

automated processing of Personal Data to make decisions that could have legal or similarly significant impact on you or others.