Legal
Privacy Policy
How Diagramy collects, uses, and protects personal information when you use our architecture workspace.
Last updated July 24, 2026
Who we are
This Privacy Policy explains how Diagramy, Inc. (“Diagramy,” “we,” “us,” or “our”) handles personal information when you visit https://diagramy.io, use the Diagramy application at app.diagramy.io, or otherwise interact with our services (collectively, the “Service”).
Questions about this policy: [email protected].
Information we collect
We collect information in these categories:
- Account information — name, email address, authentication identifiers (including Google sign-in tokens when you choose that option), and workspace membership details.
- Workspace content — architecture models, diagrams, comments, reviews, and other content you create or upload in the Service.
- Usage and device data — IP address, browser type, approximate location derived from IP, pages viewed, and product interaction events needed to operate, secure, and improve the Service.
- Billing and subscription data — when you subscribe to a paid plan, payment is processed by Paddle.com Market Ltd. (“Paddle”), our Merchant of Record. Paddle collects payment method details, billing address, tax identifiers where required, and transaction records under its own privacy policy. We receive subscription status, plan and seat information, limited customer identifiers needed to provision access, and billing metadata (such as invoice IDs and payment status). We do not store full card numbers on our servers.
How we use information
We use personal information to:
- Provide, maintain, and secure the Service
- Authenticate users and manage workspaces and permissions
- Process subscriptions, trials, plan changes, and send transactional notices
- Respond to support, billing, and refund requests
- Detect abuse, debug issues, and improve product quality
- Comply with legal obligations
We do not sell personal information. We do not use workspace architecture content to train third-party general-purpose AI models.
Sharing
We share personal information only when necessary:
- Service providers — hosting, authentication, email, analytics, and payment processors that process data on our instructions or as independent controllers where applicable.
- Paddle — for paid plans, Paddle acts as Merchant of Record and processes payment and tax data as described in its Privacy Policy. See also our Payment & Billing Policy.
- Workspace collaborators — content and profile details you share inside a workspace are visible to other members according to that workspace’s permissions.
- Legal requirements — when we believe disclosure is required by law, regulation, or valid legal process, or to protect the rights, safety, or security of Diagramy, our users, or the public.
Retention
We retain account and workspace data for as long as your account is active or as needed to provide the Service. If you delete an account or ask us to erase personal data, we delete or anonymize it within a reasonable period, unless we must retain it for legal, security, or billing reasons (for example subscription history needed for tax, fraud prevention, or dispute resolution). Paddle may retain payment records under its own retention obligations.
International transfers
Diagramy may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.
Your rights
Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal information, and to object to certain processing. To exercise these rights, email [email protected]. For payment records held by Paddle, you may also need to contact Paddle directly. You may also have the right to lodge a complaint with a supervisory authority.
Cookies and similar technologies
We use cookies and similar technologies that are necessary to keep you signed in, remember preferences, and understand how the Service is used. Checkout and billing portals operated by Paddle may set their own cookies subject to Paddle’s policies. You can control cookies through your browser settings; disabling necessary cookies may prevent the Service from working correctly.
Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.
Changes
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. Material changes may also be communicated by email or in-product notice.
Contact
Diagramy, Inc.
Privacy: [email protected]
General: [email protected]