Privacy Policy

Last Updated: June 29, 2026

1. Introduction

Gupta Enterprises, LLC, a California limited liability company that operates the DPF product and service ("we," "us," "our," or "Company"), is committed to protecting your privacy. "DPF" is a product of Gupta Enterprises, LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service, including our website, web portal, REST API, and related services (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your name, email address, and password.
• Profile Information: You may optionally provide additional profile details, team affiliations, and preferences.
• Data Integration Details: Information about data integrations you set up, including file formats, schemas, transformation logic, and data sources.
• Uploaded Files: Data files you upload for processing, transformation, and validation.
• Credential Information: API keys, connection strings, and authentication credentials securely stored for data source access.
• Communication: Messages, support requests, feedback, and communications you send to us.
• Legal Acceptance Records: A record of your acceptance of our Terms of Service and Privacy Policy, including the date, time, and version accepted at registration.

2.2 Information Collected Automatically

• Usage Data: Access logs, feature usage patterns, job execution records, and interaction data with the Service.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies and Tracking: We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns.
• Performance Data: System performance metrics, error logs, and diagnostic information.

2.3 Information from Third Parties

• Payment Processor: Our payment processor (Stripe) provides us with billing-related information such as your customer identifier, subscription status, and payment outcomes. We do not receive or store your full payment card number.
• Identity Providers: If you use federated authentication, we receive information from your identity provider.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing, maintaining, and improving the Service and its features
• Creating and managing your account and verifying your identity
• Processing data integrations, transformations, and validations
• Communicating with you about updates, security alerts, and support
• Responding to your inquiries and providing customer support
• Analyzing usage patterns to improve user experience
• Detecting, preventing, and addressing fraud and security issues
• Complying with legal obligations and enforcing our terms
• Marketing and promotional communications (with your consent)
• Conducting research and analytics to enhance our Service

4. Artificial Intelligence and Cloud Infrastructure

4.1 AI Processing of Your Data

A core function of the Service is AI-assisted schema inference and code generation. To provide this, content you submit — such as sample data files, format descriptions, and the natural-language prompts you write — is sent to large language models hosted within Amazon Bedrock, a service operated by Amazon Web Services ("AWS") in the United States. This processing occurs within AWS infrastructure to generate the inferred schemas and the parsing/transformation code used by your jobs.

As documented by AWS, Amazon Bedrock does not use your inputs or the resulting outputs to train the underlying foundation models, and does not share them with the foundation-model providers. We do not sell this content, and we use it only to provide and improve the Service as described in this Policy. Because AI output is generated automatically and is probabilistic, it may be inaccurate or incomplete; you are responsible for reviewing and validating results before relying on them.

4.2 Query Engine

When you run SQL queries through the Service, queries are executed by an embedded query engine (DuckDB) running inside our AWS compute environment against your stored data. Query inputs and results are processed ephemerally to return your results and are not retained by the query engine beyond what is necessary to serve the request; operational logs may record query metadata as described in Sections 2 and 5.

4.3 Cloud Hosting

The Service is hosted on AWS. Your data is stored and processed using AWS services (including, for example, compute, object storage, databases, and secrets management) located in the United States. AWS acts as our infrastructure provider and subprocessor and maintains its own security and compliance programs. Your information is subject to AWS's handling of the underlying infrastructure, which we do not control.

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest using industry-standard encryption.
• Credential Management: Sensitive credentials are encrypted and stored using AWS Secrets Manager.
• Access Controls: Role-based access control (RBAC) restricts access to data and operations.
• Infrastructure Security: We leverage AWS security services including VPC, security groups, and IAM policies.
• Regular Audits: We conduct regular security audits and vulnerability assessments.
• Employee Access: Access to customer data is limited and monitored.

6. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specific retention periods include:

• Account Data: Retained while your account is active, plus 30 days after deletion for account recovery purposes.
• Integration Data: Retained as long as the integration exists, plus 90 days after deletion for audit purposes.
• Job Execution Records: Retained for 2 years for audit and compliance purposes.
• Uploaded Files: Retained according to your specified retention policy or 1 year, whichever is shorter.
• Audit Logs: Retained for 2 years for security and compliance auditing.

7. Sharing Your Information

We do not sell your personal information. We may share information in the following circumstances:

• Team Members: Within your organization, according to role-based access controls you configure.
• Service Providers: With subprocessors and vendors necessary to operate the Service — including AWS (hosting, storage, and Amazon Bedrock AI processing) and Stripe (payment processing) — under confidentiality and data-protection agreements.
• Legal Requirements: When required by law, court order, or government request.
• Security: To protect against fraud, security threats, or enforce our terms.
• Business Transfers: In the event of merger, acquisition, or sale of assets (with notice to you).

8. Your Rights and Choices

8.1 Access and Portability

You have the right to request a copy of your personal information in a portable format.

8.2 Correction and Deletion

You can update or delete your account information at any time through your account settings. You may request permanent deletion of your account and associated data, subject to legal retention requirements.

8.3 Marketing Communications

You can opt-out of promotional emails by clicking the unsubscribe link in our communications or adjusting your notification preferences.

8.4 Cookie Management

You can control cookie preferences through your browser settings, though some functionality may be limited if cookies are disabled.

9. International Data Transfers

Our Service is hosted in the United States. If you are located outside the United States, your information will be transferred to, stored in, and processed in the United States. By using the Service, you consent to such transfers.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will promptly delete it and notify you.

11. Third-Party Links

The Service may contain links to third-party websites and services. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and posting the revised policy. Your continued use of the Service constitutes acceptance of changes.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@dpf-it.com
Company: DPF
United States

14. Regulatory Compliance

We comply with applicable privacy laws including GDPR, CCPA, and similar regulations. Residents of applicable jurisdictions have additional rights regarding their personal information. Please contact us for information about exercising these rights.