Privacy policy

Diffuse PTE LTD. and Graviti Technologies, Inc. (“Diffus”, “we”, or “us”) provide this Privacy Policy to inform you of our policies and procedures regarding the collection, use and disclosure of information we receive from users of our website and our Diffus Platform (the “Platform” or “Services”). This Privacy Policy (or “Policy”) applies to visitors of our websites and individuals registered for our Services (“Users”, “you”, or “your”). Your privacy is important to us. Please read this policy carefully to understand how we will collect, use, and disclose your information, and what choices you have with respect to your information.

This Policy shall be read in conjunction with our Terms of Use. By signing up to our Platform, you have read and fully accepted all the terms of this Policy, knowingly and clearly agree that we process, use and disclose your and your user information in accordance with this Policy. If you do not accept all or part of the terms of this Policy, or cannot fully understand the meaning of all or part of the terms of this Policy, please do not use, register or otherwise access the Services.

Please note this Policy does not restrict our use or disclosure of aggregated or de-identified information that complies with applicable law.

I. Purpose of collecting information from you

When you register with us through the Services to become a User, we will ask you for information relating to an identified or identifiable user (“personal data”). We may request you to provide personal data such as your name and email address. We collect information, including personal data, that you submit to the Platform during usage. We use your personal data to provide the Services to you and to administer your inquiries.

We may collect your personal data to promote the Services to you with Diffus or its partners’ newsletters, marketing, or promotional materials and other information that may be of interest to you.

We may collect information from you in surveys that we may conduct in order to improve the Services.

We may accept financial and billing information in order to process your payment for use of the Services.

II. What information do we collect from you and how?

We collect personal data Users provide directly to the Platform, including registration information, payment information and profile information. We automatically collect information such as transaction information, usage information, cookies and device information. We may also collect your personal data from third parties, for example, when you make payment through Stripe.

When you use the Services, we may collect information about the devices you use to access the Services, including IP address, browser or device type, operating system, the website you visited before the Services, and identifiers of your devices. We use this information to provide, improve, and protect the Services.

When you interact with our Services, we collect information about how you use the Services, including tracking Users’ activity in our Services. We use this information to provide and improve the Services, and to protect the Services.

We use cookies, tracking pixels, and similar technologies by working with our trusted third-party service providers to provide, improve, protect, and promote our Services. For more information, please refer to our Cookie Policy.

To the extent that we receive any Do-Not-Track signals, we reserve the right to not comply with them.

We do not intentionally collect personal data revealing racial or ethnic origin, political opinions, religious beliefs, or facilitate the processing of genetic data, biometric data and other information which may be sensitive in nature. If you choose to store any such information on our servers, you are responsible for complying with any regulatory controls regarding that data.

Moreover, we do not knowingly collect information from or direct any of our content specifically to Users under 13 years old. If we learn or have reason to suspect that you are under the age of 13, we may choose to close your account, regardless of whether you have consent from your legal guardian. Different countries may have different minimum age limits as to when we can legally process your data, and if you are below the minimum age for providing consent for data collection in your country, you may not have an account on our Platform.

We do not intentionally collect personal data that is stored in your public data sections or other free-form content inputs. Any personal information within a user’s public data is the responsibility of the user.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement

III. User Authorization and Consent

We rely on your consent to use your personal data when you fill out the information in your user profile; when you decide to participate in a Diffus event, research project, or survey; and for marketing purposes, where applicable.

We need to use your personal data for contract performance. We collect and process the personal data provided by you upon registration for you to enter into the Terms of Use agreement with us, and payment information on the basis of performing that contract.

Generally, the remainder of the processing of User personal data we perform is necessary for the purposes of our legitimate interest, for example, for legal compliance purposes, security purposes, or to maintain ongoing confidentiality, integrity, availability, and resilience of the Platform.

You may have the right to access, review, correct, amend, transfer, restrict, delete, opt-out of, or object to our use of the personal data provided to Diffus by contacting us at privacy@diffus.me. We may request specific information from you to help us confirm your identity and process your request. Please note, so long as you continue to use our Platform, you may not be able to opt-out of our uses of the personal data for non-promotional notifications, such as updates to our Terms of Use, Privacy Policy, security alerts, and other important notices related to your use of our Platform.

IV. How we share, transfer and disclose personal data

Diffus will not sell your personal data to others for monetary consideration. We share personal information only as described below and with our affiliates or third parties that we will in our best endeavors, to ensure they accord with this Privacy Policy.

Third Parties Service Providers: We may use third party service providers on our Platform for sending communications, processing payments, assessing credit and compliance risks, analyzing data, providing marketing and sales assistance (including advertising and event management), conducting customer relationship management, and providing training. We share information related to those transactions with that third party. These third parties have access to personal data needed to perform their functions, but may not use it for other purposes.

Third Party or Diffus Applications: You may have the option of enabling or adding third-party or Diffus applications in using the Platform. These applications are not essential in your use of the Platform. All Diffus applications are subject to this Privacy Policy. If you use third party applications, we may share your personal data with the application developers. You are responsible for your use of the applications and the amount of personal data you choose to share with it.

We have no control over any third parties, thus we make no guarantees about, and assume no responsibility for the information, services or data/privacy practices of third-parties. However, we will try our best to ensure they adhere to this Privacy Policy.

Business Transfers: As we continue to develop our business, we might sell or buy businesses or services. In such transactions, personal data generally is one of the transferred business assets, but we will make best endeavors to ensure your personal data to continue to be bound by this Privacy Policy.

Compliance with law: We release account and other personal information when in our reasonable opinion, the release is appropriate to comply with the law, enforce or apply our terms and other agreements, or protect the rights, property, or security of Diffus, our users, or others. This includes exchanging information with other companies and organizations for fraud prevention and detection and credit risk reduction.

With your consent: Other than as set out above, you will receive notice when personal information about you might be shared with third parties, and you will have an opportunity to choose not to share the information.

V. How we protect your personal data

Diffus is concerned with safeguarding your information. We employ reasonable physical, technological, and administrative security measures. No method of transmission over the Internet, or method of electronic storage, is completely secure, however. Therefore, while we strive with our best endeavors, to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

VI. Private vs Public Data

If your data is private, we do not access private content except for:

  1. security purposes
  2. to assist the data owner with a support matter
  3. to maintain the integrity of the Service
  4. to comply with our legal obligations
  5. if we have reason to believe the contents are in violation of the law, or
  6. with your consent.

Diffus may conduct automated scanning on our servers and content to detect certain tokens or security signatures, known active malware, known vulnerabilities in dependencies, or other content known to violate our Terms of Use, such as violent extremist or terrorist content or child exploitation imagery, based on algorithmic fingerprinting techniques. The scanning of content will be automatic upon your uploads, you may opt out of this arrangement by contacting us via privacy@diffus.me, and we may refuse your use of the Platform in such circumstances.

We will notify you when we access your private data, except to comply with our legal obligations, or where otherwise bound by requirements under law, for automated scanning, or if in response to a security threat or other risk to security.

If your data is public, anyone may view its contents. If you include personal data, or confidential information, such as email addresses or passwords, in your public data, that information may be viewed or used by third parties.

VII. How We Help You to Exercise Your Right to Manage Personal Information

You can view, update, and delete certain information on your account. If you cannot access or update your information yourself, you can always contact us at privacy@diffus.me for assistance.

You have choices about the collection and use of your personal information. You can choose not to provide certain information, but then you might not be able to use our Platform or the applications within.

You can always take your personal data with you by making a copy on your device. We will keep your personal data for as long as your account is active. When your account is cancelled or deleted, whether voluntarily or otherwise as stipulated in the Terms of Use, we retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements, unless otherwise required legal requirements, we will delete your full profile within 90 days of your request.

VIII. International Transfers of Your Personal Information

We store and process the information that we collect in the United States in accordance with this Privacy Policy, although third parties who work with us may store and process data outside the United States. Whenever we transfer personal information to other jurisdictions, we will ensure that the information is transferred in accordance with this Privacy Policy and as permitted by applicable data protection laws.

We work hard to provide high standards of privacy protection to all our users around the world, regardless of their country of origin or location. We will continually strive to become compliant with more internationally recognized certifications for data security.

IX. Contacting Us and Resolving Disputes

If you have any queries, requests or suggestions regarding this Privacy Policy, please contact Diffus by E-mail at privacy@diffus.me. We always try to ensure our Users have the best experience, and we aim to respond to you promptly.

In case of any unresolved disputes between you and Diffus regarding this Policy, it shall be settled by arbitration in California before a single arbitrator of the American Arbitration Association (“AAA”). The arbitrator shall be selected by application of the rules of the AAA, or by mutual agreement of the parties.

X. How We Update and Modify This Policy

While we may modify this agreement at any time, we will notify users of any material changes