Privacy Policy

Diagonal Software Corp. (“Diagonal,” “we,” “us,” or “our”) provides software that businesses use to build applications and configure workflows, including workflows connected to Google services and AI models. This Privacy Policy explains how we collect, access, use, store, and disclose personal information through our website, applications, and related services (the “Services”).

Our Services are intended for business use, and we serve and market to customers in the United States. This policy covers information relating to account holders, people who use customer applications, website visitors, and people whose information customers process through the Services. Your use of the Services is also subject to our Terms of Use.

Information we collect and access

“Personal information” means information that identifies, relates to, or can reasonably be linked to an individual. The information we process depends on how you use Diagonal and how you or your organization configure its applications and workflows.

We obtain information directly from you, from your organization and its configured workflows, from connected services you authorize, and automatically through operation of the Services. The categories above describe potential information within each source; we do not collect every category from every person.

Our existing website activities also include business inquiries, conference and trade-association contacts, and podcast or media participation. Where you provide information through these activities, we use it for the relevant business communication or activity. Participant recordings may be published on podcast or media platforms with participant consent. These activities do not authorize us to use Google integration data for promotion.

Back to top

How we use information

We use personal information to create and manage accounts; operate customer applications and workflows; execute authorized requests; provide AI features; process subscriptions and payments; answer inquiries; send service-related communications; diagnose errors; and protect against fraud, abuse, or unauthorized access.

We also use appropriate account, contact, and usage information to improve the Services and communicate about Diagonal according to your preferences. You may opt out of promotional communications using the instructions in those communications or by contacting [email protected]. We do not use Google integration data for marketing.

We do not run advertisements or sell customer data. Information processed for a customer's workflows is used to deliver those workflows, subject to the additional Google restrictions below where applicable.

Back to top

Google integrations and user control

Services and data accessed

If you authorize a Google connection, Diagonal can interact with Google Drive, Google Docs, Google Sheets, Google Slides, Google Calendar, and Gmail. The Google permissions granted to Diagonal determine which resources it can access; the workflows and requests you configure determine how those permissions are used.

Some authorized permissions provide account-wide access rather than access only to individually selected items. For example, searching Drive for a document can require reading beyond files previously selected for use with Diagonal. Granting a permission does not mean that Diagonal automatically copies everything accessible through it into your Diagonal application.

Workflow processing and stored information

When you ask a workflow to read a Google file without importing it, Diagonal processes its contents to complete the request and does not save a separate imported file. Google content processed for the request may remain in the conversation history stored within Diagonal, including the associated AI responses. We also retain an access log recording the requested action. This means a read-only request can leave a record of Google-derived content in conversation history even when no file is imported.

When you explicitly ask a workflow to import or store Google content, such as uploading a Drive file into Diagonal, we retain that imported content as customer application data. Conversation history and deliberately imported content remain subject to the Google data protections and retention practices below.

Disconnecting Google

You may disconnect your Google account from Diagonal or revoke access through your Google Account's third-party connections controls. When you disconnect the account in Diagonal, we immediately delete its connection details and authorization credentials from our active systems. Revoking access through Google stops future authorized access; contact us if you also want stored connection details removed from Diagonal.

Disconnecting does not delete content you previously instructed Diagonal to store. That content remains in Diagonal until deleted under the retention and deletion practices below. Any retained copies derived from Google remain subject to this policy's Google data restrictions.

Back to top

Google user data and Limited Use

“Google user data” includes data received through Google APIs and information aggregated, anonymized, de-identified, or otherwise derived from it. Importing or transforming that data does not remove these restrictions.

Diagonal complies with the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including the Limited Use requirements, when accessing, using, storing, and transferring raw or derived Google user data.

We use Google user data only for appropriate features visible and prominent in Diagonal. Transfers are limited to delivering or improving those features with your consent, necessary security purposes, legal compliance, or a merger, acquisition, or asset sale with your explicit prior consent. We do not sell it, share it with advertising platforms or data brokers, use it for advertising, or use it to determine creditworthiness or for lending.

These restrictions govern Google user data throughout this policy and take precedence over general provisions on business purposes, disclosure, retention, or aggregated information.

Back to top

AI processing

Diagonal routes AI requests through OpenRouter to selected model providers, including Google Gemini, Anthropic Claude, and OpenAI, to execute AI requests and configured workflow features. Depending on the request, OpenRouter and the selected model provider receive relevant instructions and Google content to process the request and return results. An instruction to read content without importing it into Diagonal can still involve sending relevant content through OpenRouter to a model provider for processing.

This AI processing generates results for the requests and workflows you configure. OpenRouter, Google Gemini, Anthropic, and OpenAI receive Google user data only to provide user-facing features in Diagonal. Google user data is not provided to develop or train an AI model.

We have disabled prompt and response logging at OpenRouter. Under this configuration, OpenRouter does not store the content of our prompts or responses in request logs. OpenRouter retains operational request metadata, such as token counts and timing. Model providers have separate logging and retention practices, described in OpenRouter's provider logging and retention documentation. The Google user data restrictions in this policy continue to apply to any provider handling that data.

We route AI requests only to approved providers and have opted out of model training by every provider we select. Submitted prompts, content, and generated responses are not permitted to be used for provider model training. Diagonal does not use, transfer, sell, or retain Google user data to create, train, fine-tune, or improve foundational, generalized, or shared AI or machine learning models. This prohibition includes raw, aggregated, anonymized, de-identified, and derived data. Our providers are not permitted to use Google user data for those purposes or for independent purposes outside the permitted processing.

We retain conversation history within Diagonal under the retention practices below. Conversation history is separate from AI request logs.

Back to top

How we disclose information

Service providers

We disclose information to providers that help operate the Services. These include Amazon Web Services for infrastructure and PostgreSQL database hosting, MongoDB Atlas for database services, OpenRouter for AI request routing, Google, Anthropic, and OpenAI for model processing through OpenRouter, and LogRocket and Sentry for usage analysis and diagnostics. We also use communication, support, and payment providers as needed to deliver the Services.

Our existing payment processing partner is Stripe, Inc. Stripe processes payment information submitted for a transaction. Our website uses SendGrid to deliver inquiry and related emails. Information given to these providers depends on the relevant transaction or communication; connecting Google does not authorize unrelated sharing of Google content with them.

Google user data may be provided to a service provider only for the permitted purposes described above. Providers handling it must comply with the applicable restrictions.

Customer configured workflows

Your workflows determine which information is processed, stored, or sent as part of an application. If you instruct a workflow to send an email or share a document, the relevant information is disclosed to the recipient you specify. You should configure workflows and recipients carefully and ensure you have the necessary authority to process information about other people. Any transfer of Google user data remains subject to the Google restrictions above.

Employee access

Routine support access to stored customer data is limited to Diagonal employees with elevated permissions when debugging an issue for that customer. Employees cannot directly browse your connected Google account to read emails or documents. Imported Google content and Google-derived conversation history remain subject to Google's human-access restrictions.

Before employees inspect Google-derived content to debug an issue, we obtain and document your explicit authorization for the specific content. Human access without that authorization is limited to circumstances necessary for security or legal compliance.

Legal requirements and business transfers

We may disclose information when required by applicable law or legal process or when necessary to address fraud, abuse, or security incidents. For Google user data, disclosure is limited to the applicable security and legal-compliance exceptions.

If Diagonal undergoes a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We obtain your explicit prior consent before transferring Google user data in such a transaction, and its protections continue to apply to the recipient.

Aggregated or anonymized information

We may use aggregated or anonymized information for appropriate internal analysis and improvement of the Services. Information derived from Google remains subject to the Google restrictions above even if it no longer identifies an individual. Aggregation or anonymization does not permit advertising, unrelated transfers, or prohibited AI training.

Back to top

Cookies and analytics

We use cookies and similar technologies to support functions such as maintaining sessions and understanding use of the Services. We use LogRocket and Sentry for usage analysis and diagnostics, including investigating errors and understanding interactions with the Services. Depending on their configuration, these tools may receive usage events, device information, diagnostic records, or recordings of interactions. Google content processed during workflows is not included in LogRocket recordings or Sentry payloads; any retained conversation content is stored within Diagonal.

We do not use advertising or retargeting cookies to run advertisements. Browser settings may let you block or delete cookies, although doing so can affect functionality. Our existing Services do not respond to browser “Do Not Track” signals.

Back to top

Storage and security

We store customer data in PostgreSQL databases hosted on Amazon Web Services and in MongoDB Atlas databases in the United States. Data is encrypted in transit and at rest. These database locations do not establish the processing locations of every external provider, including AI providers.

We limit employee access through elevated permissions and use security measures appropriate to the information and Services. No transmission or storage system is completely secure. Contact [email protected] if you believe your information has been accessed without authorization.

Back to top

Retention and deletion

We retain information for the purpose for which it was collected, subject to the specific practices below and the Google restrictions above.

• Customer stored data and conversation history: We retain data stored in your Diagonal workspace until deletion is requested. Disconnecting Google does not delete this data, including imported files and conversation history.
• Google connections: When a user disconnects their Google account in Diagonal, we immediately delete that account's connection details and credentials from active systems.
• Logs and backups: Logs and backups are retained for 30 days. Deletion from active systems is separate from the expiration of backup copies within that retention period.
• AI processing: AI requests are routed through OpenRouter with prompt and response logging disabled. OpenRouter retains operational request metadata, as described above. We use approved model providers and have opted out of model training by every provider we select. Diagonal's own conversation history is retained separately from AI request logs.

To request deletion of stored information, email [email protected]. When you request deletion of an entire workspace, we remove it from active systems within seven days. Backup copies expire within the 30-day backup retention period. For requests involving particular records rather than an entire workspace, contact us at that address; we handle qualifying requests in accordance with applicable law.

We may retain information where required by law, but any retention of Google user data remains limited to permitted purposes. We do not retain Google user data for prohibited model training or advertising.

Back to top

Privacy requests and choices

Submit requests to access, correct, export, or delete your personal information to [email protected]. We may need information to verify your identity or authority before fulfilling a request. If your information is managed through your organization's Diagonal application, identify the organization and relevant account or records so we can determine the appropriate handling.

Your privacy rights depend on applicable law. We will handle qualifying requests in accordance with those requirements. You may revoke Google authorization or request deletion of information stored in Diagonal; these are separate actions as explained above.

California residents may contact us at [email protected] regarding disclosure for third parties' direct marketing. We do not sell customer data or use it for targeted advertising. Nevada residents may also contact that address regarding sale-related requests; we do not sell personal information.

Back to top

Users under 18

The Services are intended for business use by people aged 18 or older. People under 18 should not register for or use Diagonal. We do not knowingly collect account registration information from users under 18. If you believe someone under 18 has registered or submitted information directly to us, contact [email protected] so we can investigate and address it.

Customers determine the records their workflows store. Restricting account use to adults does not establish that every customer-supplied record concerns an adult.

Back to top

Other websites and services

The Services may link to third-party sites or display content from external platforms. This policy describes Diagonal's handling of information; those external services also have their own privacy practices. Their separate policies do not authorize Diagonal or its providers to disregard the Google data restrictions described here.

Back to top

Changes to this policy

We may update this policy as the Services or our practices change. We will display the new effective date and provide notice of material changes through the website, email, or another appropriate method. Before using Google user data for a new purpose or in a materially different way, we will notify you and obtain the required consent. Any new use must remain permitted by the applicable Google policies.

Back to top

Contact information

For privacy questions or requests to access, correct, export, or delete information, contact:

Diagonal Software Corp.

Email: [email protected]

Website: https://godiagonal.com

Mailing address: 2093 Philadelphia Pike #4131, Claymont, Delaware 19703

Back to top