Controller: Divai LLC (Alaska, USA). Contact: privacy@divai.ai
This policy explains what personal data DIVAI collects when you use divai.ai, app.divai.ai, our assistants and apps (the “Service”), why, how long we keep it, and your choices.
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | name, email, country, language, sign-in method (email or Google) | you / Google sign-in |
| Billing data | plan, credit balance and ledger, invoices, payment status, last four digits and brand of your card | you / payment processor |
| Your content | prompts, uploads (logos, photos, text), business details you describe, generated outputs, sites and previews | you / the Service |
| Assistant memory | facts the DIVAI assistant learns about your business to serve you (e.g. your trade, your city, your preferred tone) | the Service |
| Usage and technical data | pages visited, actions taken, device and browser type, IP address, approximate location, timestamps, error logs | automatic |
| Support data | messages you send to support@divai.ai and our replies | you |
| Moderation data | refusals, reports, freeze decisions | the Service |
We do not collect government ID numbers, full card numbers or bank details. Payment details are entered directly with our payment processor.
2. Why we use it (and legal basis where that applies)
- To provide the Service: create your account, run the jobs you approve, host your previews and sites, show your balance (contract).
- To bill you and keep financial records (contract; legal obligation).
- To keep the Service safe: moderation, fraud and abuse prevention, security monitoring (legitimate interest; legal obligation).
- To support you and answer your messages (contract).
- To improve the Service using aggregated, de-identified usage statistics (legitimate interest).
- To send you service messages (receipts, security notices, changes to terms). Marketing emails only with your consent, and you can opt out any time.
3. AI processing
3.1 To generate outputs, your prompts and relevant content are sent to AI model providers acting as our processors. Providers are selected and configured so that your data is not used to train their models, with zero or minimal retention where the provider offers it. If a primary provider is unavailable we may route the same request to an alternative provider under the same conditions.
3.2 Inputs and outputs are checked by automated moderation. Refusals are logged with the reason.
3.3 We do not sell your data and we do not use your content to train third-party models.
4. Who we share with
- Service providers (processors) acting on our instructions, by category: payment processing (you enter card details directly with the payment processor); authentication; cloud hosting and database; network security and content delivery; email; AI model providers; and domain registrars when you buy a domain through us (you are the registrant). Each is bound by a contract limiting use of your data to providing its service to us. A list of current sub-processors is available to business customers on request under a data-processing agreement: privacy@divai.ai.
- Legal: authorities or courts where the law requires, or to protect rights and safety.
- Business transfer: a successor if DIVAI is sold or merged, under this policy.
We do not share your data with advertisers.
5. International transfers
DIVAI is a US company. Our infrastructure is hosted in the United States and the European Union, and AI providers may process data in other countries. Where required we use standard contractual safeguards. By using the Service you understand your data may be processed outside your country.
6. How long we keep it
| Data | Retention |
|---|---|
| Financial records (invoices, payments, credit ledger) | 12 years |
| Your content, outputs, sites, assistant memory | while your account is active; permanently deleted 30 days after account deletion |
| Technical logs | 90 days |
| Moderation refusals and reports | 12 months, or longer if needed for a dispute |
| Support messages | 24 months |
Backups are rotated on the same schedules.
7. Your rights
Depending on where you live you may have the right to access, correct, download, or delete your data, to object to or restrict processing, and to withdraw consent. You can:
- change account data in the Service;
- download your outputs from the Service;
- delete your account from the Service (deletion runs automatically after the 30-day window; financial records are kept as required by law);
- write to privacy@divai.ai for anything else. We answer within 30 days.
Residents of Saudi Arabia, Jordan, the EU/UK, California and other jurisdictions with data-protection laws have the rights those laws provide; we honour them without discrimination.
8. Security
Encryption in transit and at rest; access limited to the founder and to automated systems on a least-privilege basis; secrets kept in managed vaults; security scanning of our code and dependencies; automated spend and abuse limits. No system is perfectly secure; report concerns to security@divai.ai.
9. Cookies
We use strictly necessary cookies (sign-in, security, your language and theme). We do not use advertising cookies. Details at divai.ai/cookies.
10. Children
The Service is for adults (18+). We do not knowingly collect data from children; if you believe we have, write to privacy@divai.ai and we will delete it.
11. Changes
We will post changes here and, for material changes, notify you at least 14 days before they take effect.
12. Contact
privacy@divai.ai · Divai LLC, Alaska, USA.