Legal

Privacy Policy

Last updated: October 20, 2026 · Applies to Daiahn

1. Introduction

This Privacy Policy explains how Daiahn, Inc. (“we,” “us,” or “our”), the company behind Daiahn (“Daiahn,” the “Service”), collects, uses, and protects information in connection with the Service. Daiahn is enterprise agent intelligence software that reads AI-agent session traces and turns them into analytics. By using the Service you agree to the practices described here.

2. Our local-first principle

Daiahn is designed to be local-first and private by default. Agent session traces are read and analyzed on your own device or within your own environment. We do not collect or transmit the contents of your agent sessions to our servers unless you explicitly opt in to a feature that requires it.

• API keys are stored in your operating system’s keychain, not on our infrastructure.
• Any transmission of content to a third-party large-language-model provider is gated per call, with a content preview, and subject to budget caps you control.
• Where the Service operates entirely on your device, that processing is not visible to us and is not covered by the data-collection sections below.

3. Information we collect

We collect only what we need to provide and improve the Service:

• Account & contact information — name, work email, company, and role, for example when you request a demo or create an account.
• Billing information — processed by our payment processors; we do not store full payment card numbers.
• Product telemetry — limited, aggregated usage and diagnostic data (for example, feature usage and crash reports), where enabled.
• Opt-in content — agent-trace data or analytics you explicitly choose to sync, share, or process through a cloud feature.
• Website data — standard server logs and cookies for the marketing site, as described in Section 4.

4. How we use information

We use the information we collect to:

• Provide, maintain, and improve the Service;
• Respond to demo requests, support inquiries, and other communications;
• Process transactions and manage subscriptions;
• Understand product usage in aggregate and improve features and reliability;
• Detect, prevent, and address security incidents, fraud, and abuse; and
• Comply with legal obligations.

We do not sell your personal information.

5. Legal bases for processing

Where the EU/UK GDPR applies, we process personal data on the bases of performance of a contract, our legitimate interests in operating and improving the Service, your consent (which you may withdraw), and compliance with legal obligations.

6. Sharing & disclosure

We share information only as needed to run the Service: with service providers (for example, cloud hosting, payment processing, and analytics) acting under contract; with third-party LLM providers solely for content you opt in to transmit; in connection with a merger, acquisition, or sale of assets; and where required by law or to protect rights and safety.

7. Data retention

We retain personal information only as long as necessary for the purposes described in this policy or as required by law. Locally processed agent data remains under your control and is retained according to your own settings and environment.

8. Security

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, least-privilege access controls, and an audit-grade, append-only event model within the product. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. To exercise these rights, contact us using the details in Section 13. We will respond within the time required by applicable law.

10. International data transfers

We may process and store information in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as Standard Contractual Clauses.

11. Children’s privacy

The Service is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version with a revised “Last updated” date and, where appropriate, provide additional notice.

13. Contact us

Questions about this policy or your data can be directed to privacy@daiahn.com.