Privacy Policy

We collect information in the following categories:

• Account information: name, email address, profile image, authentication identifiers, account status, and related profile details.
• User content: prompts, diagram definitions, generated visualizations, layout data, annotations, narration, follow-up instructions, uploaded materials, and other content you submit or generate.
• Code and repository context: repository names and URLs, selected source files or excerpts, code context, pull-request information, and execution metadata when you ask DagFlo or a connected coding agent to visualize code.
• MCP and authorization information: MCP client identifiers, requested scopes, authorization codes, access and refresh tokens, and records associated with your connected coding agents.
• Usage and device information: pages viewed, feature interactions, timestamps, browser and device information, IP address, diagnostics, application logs, and error reports.
• Communications: information you provide when requesting support, reporting a problem, or contacting us.

Please do not submit passwords, private keys, API keys, regulated health information, or other highly sensitive information unless DagFlo expressly supports that use and you have an appropriate written agreement with us.

We use information to:

• Provide, operate, maintain, and secure DagFlo.
• Authenticate accounts and MCP connections.
• Generate, render, store, edit, narrate, publish, and share visualizations.
• Maintain diagram history and restore your workspace across sessions.
• Process code context and other materials you ask us to visualize.
• Respond to support requests and communicate about the service.
• Monitor performance, diagnose errors, prevent abuse, and improve reliability.
• Comply with law and enforce our Terms of Service.

DagFlo uses AI services to interpret prompts and technical context, generate visualization structures, produce explanations, and support narration. When you request these features, relevant prompts, code excerpts, diagram state, and instructions may be sent to AI providers such as Google or other providers enabled for the service.

A coding agent connected through DagFlo MCP may send DagFlo content from your local project at your direction. Review the coding agent’s proposed tool call and avoid authorizing content you do not have permission to process.

Provider handling of submitted information is governed by our configuration and agreements with those providers. We will update this Policy if we materially change how private user content is used.

DagFlo uses third-party service providers to operate the service. These may include:

• Supabase for hosted database and related infrastructure.
• Google Firebase for authentication and analytics.
• AI providers, including Google and other configured providers, for generation and related processing.
• ElevenLabs or other speech providers when narration features are used.
• Hosting, monitoring, email, and infrastructure providers that help deliver and protect the service.

These providers process information on our behalf or as necessary to provide the feature you request. Some processing may occur outside your country of residence.

We may disclose information:

• To service providers described above.
• At your direction, including when you publish a diagram or create a share link.
• To collaborators or workspace members you authorize.
• To comply with law, legal process, or valid government requests.
• To investigate fraud, abuse, security incidents, or threats to rights and safety.
• As part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate protections.

We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising.

Diagrams are not intended to become public unless you choose a publishing or sharing action. Published diagrams and their associated content may be accessible to anyone with the public link and may be copied or redistributed by viewers.

Before publishing, review the complete visualization for confidential information, personal data, credentials, proprietary source code, or other material you are not authorized to disclose.

We retain account information while your account is active and retain diagrams and related content so you can revisit, edit, and share them. We may retain operational logs for security, fraud prevention, debugging, and legal compliance.

When content or an account is deleted, copies may remain for a limited period in backups, audit records, or systems where retention is required for security or legal reasons. We delete or de-identify information when it is no longer reasonably necessary for the purposes described in this Policy.

To request account or data deletion, email hello@dagflo.com. We may need to verify your identity before completing a request.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information. You may also have the right to withdraw consent or appeal a decision about a privacy request.

You can disconnect an MCP client through that client’s authentication settings. You may manage or delete diagrams using available product controls or contact us for assistance.

Submit a request to hello@dagflo.com. We will not discriminate against you for exercising applicable privacy rights.

DagFlo and its providers use cookies, browser storage, and similar technologies to maintain authentication, remember settings, secure sessions, measure page usage, and diagnose performance. We use Vercel Web Analytics for anonymized page-usage measurement and aggregate product interactions, such as opening a diagram or changing a visualization setting. We redact diagram and preview identifiers, query strings, and URL fragments before page views are sent; analytics events do not include prompts, diagram content, account identifiers, or individual diagram IDs.

You can control cookies through your browser, although blocking essential storage may prevent authentication or other features from working.

The categories described in Section 2 are the categories of personal information we may have collected during the preceding 12 months. We collect this information directly from you, automatically from your use of DagFlo, and from services or coding agents you connect.

We use and disclose those categories for the business purposes described in Sections 3 through 6. We do not knowingly sell personal information or share it for cross-context behavioral advertising. California residents may contact us to exercise rights available under applicable California law.

DagFlo does not currently respond to browser “Do Not Track” signals because there is no consistent industry standard for those signals.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authentication and access controls. No system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account, coding-agent permissions, public links, and any credentials used with the service. Notify us promptly if you believe your account or data has been compromised.

DagFlo and its providers may process information in the United States and other countries whose data-protection laws may differ from those where you live. Where required, we use appropriate legal mechanisms for international transfers.

DagFlo is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can take appropriate action.

We may update this Policy as DagFlo changes. We will post the updated version with a new effective date and provide additional notice when a change is material and applicable law requires it.

Questions and privacy requests may be sent to hello@dagflo.com.