How we handle your data
Last updated: October 15, 2026 · This is a translation of the Spanish version. If the two differ, the Spanish version prevails.
In short
- You can use the canvas without an account: your diagrams stay in your browser.
- We measure how Diagramia is used (which tools, errors, timings), never the content of your diagrams.
- When you use the AI, your request and the necessary part of the diagram are sent to the model provider (currently DeepSeek, which processes data in China) to generate the proposal. If you don't use the AI, none of that leaves Diagramia.
- You can turn measurement off, and you can delete your account and everything you saved to the cloud at any time.
Who is responsible
Maximo Andres Cobeaga, Misiones 134, Mar del Plata, Buenos Aires, Argentina. Privacy contact: mcobeaga@diagramia.app.
What data we use and why
| Data | Purpose | Where and for how long |
|---|---|---|
| Your diagrams without an account | So you do not lose your work | Only in your browser (local storage). They do not reach our servers unless you save them to the cloud (manually or with automatic saving, which is off by default) or use the AI. |
| Anonymous usage data: tools used, number of elements, exports, errors (without messages), load times, device and browser type, language, referring site (domain only) and campaign | Understanding what works and where people get stuck, to improve the product | In our database. They are identified by a random code stored in your browser, not by your name. They are deleted automatically after 13 months; before that, deleting your account unlinks them from you, and you can ask us to delete them. We only keep daily totals, with no identifier. |
| Account: email, whether it is verified, and the identifier given by the sign-in service | Signing in, saving to the cloud and using the AI with its quota | While you have the account. |
| Diagrams saved to the cloud and their versions | So you can open them from any device and recover versions | While you have the account, and in backups for up to 14 days after you delete them. |
| Links for sharing a diagram | So someone else can view one of your diagrams and its animation without an account | They only exist if you create the link. Anyone who has it can view that diagram, read-only and always in its latest saved version, and nothing else from your account. It stops working as soon as you choose “Stop sharing” or delete your account. It is not offered to search engines, but anyone who receives the link can open it: share it as you would share the diagram itself. |
| AI requests: your text and the necessary part of the diagram | Generating the proposal | They are sent to the model provider. We keep the response for 24 hours for retries and, for 90 days, only the record of credits used, without content. |
| A link you ask a preview for | Fetching the title and description of that page | Only when you click «Traer título y descripción» (Fetch title and description). Our server visits the page (the site sees our address, not yours) and keeps the result in memory for about 10 minutes. The link is not kept in logs or in the database. |
| Your feedback on a response (👍/👎 and reason) | Improving the AI | Together with the usage data. It does not include free text. |
| Pro subscription: subscription and customer identifiers in Paddle, status, renewal or cancellation date | Knowing whether your account is Pro and showing you when it renews | While you have the account. Payment data (card, billing, taxes) is received and stored by Paddle, not by us. |
| Business inquiries: name, email, company, team size and message | Answering your commercial inquiry | In a private inbox that only verified administrators can access, separate from telemetry. They are deleted automatically 13 months after we receive them; before that, you can ask for their deletion by email. |
| IP address | Limiting abuse (request frequency) | Only in memory: one minute for AI and events, up to one hour for business inquiries. It is not stored in the database. |
Why we are allowed to use it
We process your data under Argentina's Personal Data Protection Law No. 25,326. If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) also applies. The basis for each use is:
- Providing the service you asked for (contract): your account, cloud diagrams, share links, link previews, AI requests and the Pro subscription.
- Our legitimate interest in improving and protecting Diagramia: anonymous usage data and your feedback on answers (you can object by turning measurement off), and your IP address to stop abuse.
- Your request: business inquiries, which we use only to reply to you.
- Legal obligations: invoicing and taxes on payments, handled by Paddle.
Cookies and storage in your browser
- Session (
diagramia_session): needed to keep you signed in. It lasts up to 30 days or until you sign out. - Sign-in (
diagramia_oidc_flow): lasts 10 minutes, only during sign-in. - Local storage: your drafts, your preferences (theme, tutorial), the anonymous measurement code and your last 20 conversations with the AI, as text only. Conversations are not stored on our servers and you can delete them from the chat history.
- We do not use advertising cookies or third-party analytics tools.
Who we share data with
Only with the providers we need for Diagramia to work, and only what is necessary:
- Auth0 (Okta): sign-in. If you sign in with Google, also Google.
- AI model provider (DeepSeek or OpenAI, depending on the model in use): generates the proposals from your request. Privacy policies: DeepSeek and OpenAI.
- Paddle (Paddle.com Market Limited): processes the payments of the Pro subscription and acts as the authorized reseller (Merchant of Record). It receives the payment data you enter on its page; its privacy policy.
- Hostinger: the server where Diagramia runs. The server is in São Paulo, Brazil. Hostinger privacy policy.
We do not sell your data. AI providers only receive the request and the necessary part of the diagram: we do not send them your name, your email or your account identifier.
Data outside your country
Diagramia runs on a server in São Paulo, Brazil, and its providers process data in other countries:
- DeepSeek processes and stores AI requests on servers in the People's Republic of China, a country without an adequacy decision from Argentina or the European Union, so its laws may protect your data less. That is why the AI is optional: the canvas, the cloud, sharing and exporting all work without it. If you use the AI, you accept this transfer. If a request contains something you don't want to leave Diagramia, don't send it to the AI.
- OpenAI, when it is the model in use, processes requests in the United States.
- Auth0 (Okta) and Paddle may process data outside your country, including the United States, with the safeguards described in their privacy policies.
If you are a business and need AI requests not to go to a particular provider, write to us before using it.
Your choices and rights
- Turning measurement off: in the editor, «Cuenta → Configuración → Privacidad» (Account → Settings → Privacy). If your browser asks not to be tracked (Do Not Track or Global Privacy Control), we measure nothing.
- Deleting your account: under «Cuenta → Configuración → Eliminar mi cuenta» (Account → Settings → Delete my account). Your account, your cloud diagrams with their versions and your credits are deleted. Usage data you already sent is unlinked from your account. Business inquiries are handled separately: ask us to delete them by email.
- Access, correction or questions: write to us at mcobeaga@diagramia.app. You can file a complaint with the data protection authority of your country. In Argentina, the Agencia de Acceso a la Información Pública.
Security
Connections are encrypted (HTTPS). Provider keys never reach your browser. Each account can only see its own diagrams, and we make daily backups.
Minors
You must be at least 18 years old to create an account.
Changes
If we change something important, we will announce it on this page and in the editor before it applies.