divelai / legal / privacy
Privacy
Two different things are covered here: what this website collects, and what the product does with data you route through it. They have different answers.
This website
No advertising or cross-site tracking cookies are set, and fonts are served from our own domain rather than a font CDN. If you opt in, Vercel Web Analytics and Speed Insights record aggregate page views and page-load timings without cookies or persistent identifiers. The full list is in the cookie policy.
Data you route through the product
Divelai processes request payloads in memory and does not retain their content. The token vault stores mappings between tokens and original values, encrypted per tenant, in the region you select. On self-hosted deployments, Divelai holds none of this.
Our role
For customer data flowing through the product, Divelai acts as a processor and you remain the controller. The terms of that relationship are in the Data Processing Addendum.
Your rights
Access, correction, deletion, portability, and objection requests go to the contact form. Where Divelai is a processor we will route your request to the relevant controller.
Enquiries
What you send through the contact form is encrypted before it is stored and used only to respond to you. Your IP address is stored only as a one-way hash, for investigating abuse. You can ask us to delete your enquiry at any time through the contact form.
Changes to this notice
Effective 13 September 2026. We update this date whenever the notice changes.