Privacy Policy

DiviDen (“we,” “us,” or “our”) operates the DiviDen Command Center platform at dividen.ai (the “Platform”). This Privacy Policy describes how we collect, use, store, share, and protect your personal information and data when you use our Platform and Services.

By using DiviDen, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.

This policy also covers our use of data obtained through Google APIs, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

2.1 Account Information. When you create an account, we collect:

• Name and email address
• Password (stored as a one-way cryptographic hash — we never store plaintext passwords)
• Profile information you choose to provide (headline, bio, skills, languages, timezone, etc.)

2.2 Data You Create on the Platform. Through normal use, you create and store:

• Kanban cards, projects, tasks, and checklist items
• CRM contacts and relationship data
• Documents, notes, and reports
• Chat conversations with your AI agent
• Queue items, goals, and calendar events
• Agent marketplace listings and configurations

2.3 Data From Connected Services (Google & Other Integrations). When you connect external services, we access and store data from those services to power DiviDen's signal triage and agent capabilities. Specifically:

2.4 Automatically Collected Data. We collect standard technical information:

• IP addresses (for security and rate limiting)
• Browser type, device type, and operating system
• Pages visited and features used (for improving the Platform)
• Timestamps of actions

We use collected data solely to provide and improve the DiviDen Platform:

• Providing the Service — Powering your AI agent (Divi), triaging signals, managing tasks, routing relays, and executing marketplace agents
• Signal Triage — Analyzing connected data sources (email, calendar, drive, recordings) to extract actionable tasks and route them to project cards
• AI Processing — Sending relevant context to AI language model providers to generate agent responses, summaries, and task recommendations
• Communication — Sending emails on your behalf (when you configure and approve outbound email capabilities), delivering relay messages between connected users
• Platform Improvement — Aggregated, anonymized usage analytics to improve features and performance
• Security — Detecting and preventing unauthorized access, fraud, and abuse

We share your data only in the following circumstances:

• AI Language Model Providers — Relevant context from your data is sent to your configured AI provider (e.g., OpenAI, Anthropic) to generate agent responses. We send only the minimum context necessary. These providers process data per their API terms.
• Connected Users (Relays) — When you send or receive relay messages with other DiviDen users, the content of those relays is shared between the connected parties. You control who you connect with and what relay permissions you grant.
• Federated Instances — If you enable federation with external DiviDen instances, relay data traverses network boundaries to those instances. You control federation settings.
• Bubble Store — If you list agents on the Bubble Store, your agent listing (title, description, pricing) is publicly visible. Execution data is shared between you and the subscribing user.
• Infrastructure Providers — We use hosting, database, and storage providers to operate the Platform. These providers process data on our behalf under data processing agreements.
• Legal Requirements — We may disclose data if required by law, subpoena, court order, or government request.

We do not sell your personal data to any third party.

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted via TLS/HTTPS
• Passwords are stored as one-way cryptographic hashes (bcrypt)
• OAuth tokens are stored encrypted at rest
• Database access is restricted to authenticated and authorized application code
• API endpoints require authentication via session tokens
• Administrative access is protected by separate credentials

No system is perfectly secure. We cannot guarantee absolute security, but we take reasonable measures to protect your data from unauthorized access, alteration, disclosure, or destruction.

7.1 Retention. We retain your data for as long as your account is active or as needed to provide the Services. Data from connected services (Google, etc.) is retained to enable historical triage and context building.

7.2 Account Deletion. You may request deletion of your account and all associated data at any time by contacting us or using the account deletion feature (when available). Upon deletion:

• All personal data, contacts, cards, documents, and chat history are permanently deleted
• All connected service data (emails, events, files) is permanently deleted
• All OAuth tokens are revoked and deleted
• Marketplace agent listings are removed
• Some anonymized, aggregated data may be retained for analytics purposes

7.3 Disconnecting Services. You can disconnect individual services (e.g., Google) at any time via Settings → Integrations. Disconnecting revokes our OAuth access and deletes stored tokens. Previously synced data (emails, events) may be retained in your account unless you explicitly request deletion.

Depending on your jurisdiction, you may have rights including:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your data (see Section 7)
• Portability — Request your data in a portable format
• Revoke Consent — Disconnect any connected service or withdraw consent for data processing at any time
• Restrict Processing — Request that we limit how we use your data

To exercise any of these rights, contact us at privacy@dividen.ai. You can also manage your Google account permissions directly at myaccount.google.com/permissions.

DiviDen is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will take steps to delete that information promptly.

We use cookies and local storage for:

• Authentication — Session cookies to keep you logged in
• Preferences — Storing UI preferences (theme, layout settings)

We do not use cookies for advertising or third-party tracking.

DiviDen operates globally. Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and infrastructure providers are located. By using the Platform, you consent to such transfers.

If you use a self-hosted DiviDen instance, you are the data controller for all data on that instance. This Privacy Policy applies only to the managed platform at dividen.ai. Self-hosted operators are responsible for their own privacy policies and data handling practices.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via email. The “Last updated” date at the top reflects the most recent revision. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

For privacy-related questions, requests, or concerns:

• Email: privacy@dividen.ai
• Website: dividen.ai

For Google-specific data concerns, you can also manage or revoke DiviDen's access to your Google account at Google Account Permissions.