divelai / legal / privacy
Privacy
Two different things are covered here: what this website collects, and what the product does with data you route through it. They have different answers.
This website
No cookies are set, no third-party scripts run, and fonts are served from our own domain rather than a font CDN. Privacy-first analytics provider and what it records [CONFIRM]
Data you route through the product
Divelai processes request payloads in memory and does not retain their content. The token vault stores mappings between tokens and original values, encrypted per tenant, in the region you select. On self-hosted deployments, Divelai holds none of this.
Our role
For customer data flowing through the product, Divelai acts as a processor and you remain the controller. The terms of that relationship are in the Data Processing Addendum.
Your rights
Access, correction, deletion, portability, and objection requests go to the contact form. Where Divelai is a processor we will route your request to the relevant controller.
Full policy
[CONFIRM: counsel-reviewed policy text, effective date, supervisory authority, and any EU/UK representative]