DeepSeek
DeepSeek · Chat assistant · CN · www.deepseek.com
services/deepseek.yamlVendor data-handling terms
The privacy policy lists training and improving models among the purposes for processing prompts and uploaded content, and grants a right to opt out of that use. No account-level default toggle is described.
“To improve and develop the Services and to train and improve our technology, such as our machine learning models and algorithms. / the right to opt-out of using your Personal Data for training our models or optimizing our technologies.”
Users can delete chat history in settings and delete the account; deleted account content cannot be retrieved.
“We retain Personal Data for as long as necessary to provide our Services and for the other purposes set out in this Privacy Policy. / Should you choose to do so, you may also copy or delete your chat history via your settings.”
The current policy does not name a storage country. Earlier versions of the policy stated storage in the People's Republic of China; the wording checked on the date below does not.
“The Personal Data we collect from you may be stored on a server located outside of the country where you live.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| deepseek.com | app | observed |
| chat.deepseek.com | app | observed |
| api.deepseek.com | api | vendor-documented |
| platform.deepseek.com | app | vendor-documented |
Assessment
Reasoning: Prompts and uploads are processed for model training with only an opt-out right, no fixed retention period is stated, and the storage location is not disclosed beyond "outside of the country where you live". For an EU deployer that is a third-country transfer of whatever is in the prompt, with no processor agreement offered on the consumer service. The API terms checked do not add a no-training commitment.
Flags: GDPR Chapter V (undisclosed third-country storage) · GDPR Art. 28 (no processor agreement on consumer tiers) · Assessed 2026-09-15. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Merged the separate DeepSeek API entry; api.deepseek.com was already listed here.
- 2026-09-15Documented. Training, retention, and storage-location terms verified against the DeepSeek Privacy Policy; the policy no longer names China as the storage location.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Spotted something wrong or out of date? Send it with the source. Changes are checked and recorded in the changelog.