Privacy policy

Diligly (diligly.com) helps founders prepare a startup data room and share it privately with investors. This policy explains what personal information the operator of diligly.com (“we”, “us”) handles, why, and what you can do about it.

You can reach us about anything in this policy by email at support@diligly.com.

For the information in your room, you (the founder) decide what is collected, who sees it and for how long. We handle that information for you, to run the service.

For your account, billing and our own security, we decide how information is used.

If you are an investor or other viewer who received a link, the founder who shared it is responsible for what they show you. If you want to ask about information a founder holds, ask them first, or contact us and we will help where we can.

Founders: your email address, your name and optional profile picture, and your sign-in session.

What you add: startup profile details, team members, metrics, notes, checklist progress, folder names, and the documents you upload. You choose what to add. Everything is private to you until you create a link and choose what it shows.

Investors and other viewers: if a link asks who is viewing, the name and email you type. If a link has an NDA, your typed name, email, the time you accepted, and a fingerprint of the exact agreement text you accepted. Each link also records when it was opened and which documents were viewed or downloaded. These details are typed by the viewer and are not verified by us.

Billing: payments are handled by our payment provider, Polar. We never see or store your card number. We keep your plan, the subscription status and renewal dates, and the customer and subscription identifiers that Polar gives us.

Technical: your IP address is used briefly to limit abuse, such as repeated sign-in or link attempts. It is not stored in a room’s activity log. We also keep ordinary server error logs.

Support: if you email us, the message and your email address, which we use only to reply and to improve the product.

Website visitors: we count visits to our public pages (home, pricing, Help Center and similar) with Plausible, a privacy-focused analytics service. It records the page, where you came from, and your country, browser and device type in aggregate. It sets no cookies, builds no profile of you and does not follow you across sites. We do not count anything inside the dashboard or on investor room links, and we never send addresses with query strings. If your browser sends “Do Not Track”, nothing is counted.

Browser storage: we use cookies to keep you signed in. On a room link, your browser remembers the name and email you typed for up to 30 days, on that device only, so you do not have to type them again. You can clear it with “Not you?” on the link. We use your theme choice (light or dark) the same way. We do not use advertising or analytics cookies.

To run the service: store your workspace, show it only to the people you choose, record who opened a link, and send you the emails you ask for (sign-in codes, and open alerts on plans that include them).

To bill you and manage your plan.

To keep Diligly secure, prevent misuse and fix problems.

To reply when you contact us.

We do not sell personal information, we do not use your documents or data to train models, and we do not show advertising. Our analytics sets no cookies.

We use a small number of providers to run the service, and they handle information only on our instructions: Supabase (database, sign-in and private file storage), Resend (sending email), Polar (payments and subscriptions), Plausible (website visit counts), and our web hosting provider.

A founder who owns a room can see its activity, including the names and emails viewers typed.

We may disclose information if the law requires it, or to protect the safety and rights of people using the service.

Our providers may process information in countries other than yours. Where the law requires it, we rely on safeguards such as standard contractual clauses with those providers.

Documents and data stay until you delete them. Deleting a document removes its file. Deleting a startup removes everything in it. Deleting your account removes all your startups, files, links and activity, and cancels any subscription first.

A room’s activity log is kept for 12 months by default and then deleted.

Providers may keep encrypted backups for a limited time, and our payment provider may keep payment records for as long as tax and accounting law requires.

Rooms are private by default. Each link uses a random secret that we store only in hashed form, documents are served through short-lived signed links, and every request to a room is checked on the server. No system is perfectly secure, so please use a strong sign-in method and share links with care. More detail is on our security page.

Depending on where you live, you may have the right to access, correct, delete, export or object to the use of your personal information, and to complain to your data protection authority.

As a founder you can download your data and delete your account yourself from Account settings. For anything else, contact us and we will reply within a reasonable time, and within one month where the law sets that limit.

Diligly is for business use by adults. It is not meant for anyone under 18, and we do not knowingly collect their information.

If we change this policy in a way that matters, we will update the date above and, where the change affects how we use your information, tell you by email or in the app before it takes effect.