Privacy policy

Last updated: May 4, 2026. The date reflects the most recent review of what we collect and which third-party services process your data; we update it whenever a subprocessor is added, removed, or changes the kind of data it sees.

What we collect

When you create an account, we store your email address, name, and the workspace data you create or import (feedback, changelog entries, roadmap items, customer records, and so on). We do not run page-view or product-analytics tracking.

How we use it

Your data is used to provide Diktura. We do not sell your personal information. Server-side error reports help us diagnose and fix bugs; see Third-party services below for what that involves.

Third-party services

Diktura is configured to send specific kinds of data to the following third-party processors. Each is scoped to what the integration can do today, not just what currently runs; new uses will be disclosed here before they ship.

• Supabase — authentication and primary data storage. All account, workspace, and content data lives here.
• Vercel — hosting for the web application and its server-side functions; sees request metadata at the edge.
• Brevo — every transactional and broadcast email Diktura dispatches goes through Brevo (account emails, notification emails, weekly digest emails, and broadcast campaigns to your end users).
• Sentry — captures server-side errors from our backend engine and server/client error events from the web application. Stack traces and the request context that produced them flow there; that context can include identifiers such as your user ID. Session Replay is not enabled.
• Anthropic— the LLM provider Diktura's AI features call. Currently this includes the help-center chat in embedded widgets, sentiment classification of incoming feedback, AI-drafted changelog entries, suggested support replies, and AI triage suggestions for feedback and support conversations; any future AI feature ships against the same provider. Text users enter into those features (and conversation context surrounding it) is sent to Anthropic for processing — both end-user content (widget chat messages, feedback bodies, support conversation subjects and messages) and workspace-owner input (changelog source text, workspace roadmap titles, and roadmap descriptions). Anthropic does not train on this content.
• Cloudflare — provides Turnstile, the CAPTCHA used during sign-in. Cloudflare sees your IP address, browser fingerprint, and interaction signals during the login challenge as part of bot detection.

Each processor handles data under its own privacy policy.

Cookies

We use essential cookies for authentication and session management. No advertising or third-party tracking cookies are used.

Data retention

Your data is retained while your account is active. You can request deletion of your account and associated data at any time by contacting us.

Contact

Questions about this policy? Email us at privacy@diktura.com.