Privacy Policy

• Account information: your email address, and the name, avatar and preferences you choose.
• Content you create: the workspaces, projects, tasks, notes, discussions, check-ins, comments, reports and files you and your teammates add.
• Technical information: basic logs of requests and errors (such as time, IP address and browser), kept to run and secure the service.

We sign you in with a one-time code sent by email and keep you signed in with a secure session cookie. We store display preferences (such as theme) and a few conveniences — like your recently opened items and your Home layout — in your browser. We don't use advertising or analytics trackers.

Using Google Drive is optional.

• Google Drive: when you attach files from Drive, you pick them in Google's own file picker. Diafold can only see the files you pick (the drive.file permission), and stores only each file's name, link, type and Drive file ID — never its contents. The permission used to open the picker stays in your browser.

Diafold's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide these features to you. We don't sell it, use it for advertising, or let anyone read it except where you ask us to, where it's needed for security or to comply with the law.

You can remove Diafold's access to Google at any time from your Google Account.

To provide and improve Diafold: to sign you in, show and sync your work, send the emails you expect (sign-in codes and notifications), keep the service secure, and fix problems. We don't sell your information.

Only the service providers that run Diafold for us, under their own privacy and security commitments:

• Railway — hosting, database and file storage;
• Resend — sending sign-in and notification emails;
• Sentry — error monitoring;
• an AI provider (OpenAI or Anthropic) — when AI features are set up (a workspace admin can turn them off), the content a feature works on is sent to the provider: for example a note you ask to explain, a project's open tasks, a task's comments for a summary, or recent updates and check-in answers for a status report. This can include content your teammates wrote.

Workspace admins can also set up webhooks that send workspace updates — such as new tasks, status changes, comments and check-ins — to services they choose.

Your teammates see the content you share in your workspace. We may disclose information if the law requires it.

We keep your information while your account is active. Workspace admins can set how long deleted files are kept and can export workspace data. To delete your account and its personal information, write to support@diafold.com; content you shared in a workspace may stay with that workspace.

You can update your profile and preferences in Settings, remove Diafold's access to Google at any time from your Google Account, and ask us to access, correct, export or delete your information by writing to support@diafold.com.

We use encrypted connections, store sensitive credentials encrypted, and limit access to people who need it to run the service. No system is perfectly secure, so please tell us if you find a problem.

Diafold is not meant for children under 16, and we don't knowingly collect their information.

If we change this policy, we'll update the date above, and tell you in Diafold or by email when the change matters.