DeepSeek
By default, your conversations can train the models, and deletion is conditional by design: safety flags override it and copies travel past the company you typed to. What was absorbed into a trained model does not come back out.
Reported incidents
Chat histories and secret keys left in a database open to anyone
2025-01-29Affected DeepSeek backend log database
On 29 January 2025 the cloud security firm Wiz reported that DeepSeek had left a ClickHouse database open to the internet with no authentication, on two of its subdomains. It held more than a million lines of logs, including users' chat history, secret keys and backend details. Anyone who found it could run queries on the data and take full control of database operations, according to Wiz. Wiz said it told DeepSeek, which secured the database promptly.
People affected typically ask DeepSeek to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.