Privacy Policy

This Privacy Policy explains how Diagramy, Inc. (“Diagramy,” “we,” “us,” or “our”) handles personal information when you visit https://diagramy.io, use the Diagramy application at app.diagramy.io, or otherwise interact with our services (collectively, the “Service”).

Questions about this policy: privacy@diagramy.io.

We collect information in these categories:

• Account information — name, email address, authentication identifiers (including Google sign-in tokens when you choose that option), and workspace membership details.
• Workspace content — architecture models, diagrams, comments, reviews, and other content you create or upload in the Service.
• Usage and device data — IP address, browser type, approximate location derived from IP, pages viewed, and product interaction events needed to operate, secure, and improve the Service.
• Billing and subscription data — when you subscribe to a paid plan, payment is processed by Polar Software, Inc. (“Polar”), our Merchant of Record. Polar collects payment method details, billing address, tax identifiers where required, and transaction records under its own privacy policy. We receive subscription status, plan and seat information, limited customer identifiers needed to provision access, and billing metadata (such as invoice IDs and payment status). We do not store full card numbers on our servers.

We use personal information to:

• Provide, maintain, and secure the Service
• Authenticate users and manage workspaces and permissions
• Process subscriptions, trials, plan changes, and send transactional notices
• Respond to support, billing, and refund requests
• Detect abuse, debug issues, and improve product quality
• Comply with legal obligations

We do not sell personal information. We do not use workspace architecture content to train third-party general-purpose AI models. Bring-your-own AI keys are encrypted at rest and used only to proxy requests to the provider you chose; we do not log raw key material.

We share personal information only when necessary:

• Service providers — hosting, authentication, email, analytics, and payment processors that process data on our instructions or as independent controllers where applicable.
• Polar — for paid plans, Polar acts as Merchant of Record and processes payment and tax data as described in its Privacy Policy. See also our Payment & Billing Policy.
• Workspace collaborators — content and profile details you share inside a workspace are visible to other members according to that workspace’s permissions.
• Legal requirements — when we believe disclosure is required by law, regulation, or valid legal process, or to protect the rights, safety, or security of Diagramy, our users, or the public.

We retain account and workspace data for as long as your account is active or as needed to provide the Service. If you delete an account or ask us to erase personal data, we delete or anonymize it within a reasonable period, unless we must retain it for legal, security, or billing reasons (for example subscription history needed for tax, fraud prevention, or dispute resolution). Polar may retain payment records under its own retention obligations.

Diagramy may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal information, and to object to certain processing. To exercise these rights, email privacy@diagramy.io. For payment records held by Polar, you may also need to contact Polar directly. You may also have the right to lodge a complaint with a supervisory authority.

We use cookies and similar technologies that are necessary to keep you signed in, remember preferences, and understand how the Service is used. Checkout and billing portals operated by Polar may set their own cookies subject to Polar’s policies. You can control cookies through your browser settings; disabling necessary cookies may prevent the Service from working correctly.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may also be communicated by email or in-product notice.

Diagramy, Inc.
Privacy: privacy@diagramy.io
General: hello@diagramy.io