Privacy Policy

Who this covers

This policy applies to the Dibaw website at dibaw.com, the Dibaw dashboard, and the pages you publish on your own subdomain.dibaw.com address. It covers you as an account holder, and the people whose details you enter into your workspace.

What we collect

• Account details. Your name, email address, and — if you sign in with Google — your Google profile picture. If you sign up with a password, we store a cryptographic hash of it, never the password itself.
• Workspace content. Everything you create in the product: your business name and branding, your offer, your scripts, tasks, calendar entries, and the funnel pages you build.
• Lead records. The names, email addresses, and conversation messages you enter or import for the people you are following up with. You decide what goes in here; see Leads and other people’s data below.
• Technical data. Standard server and delivery logs kept by our hosting providers — IP address, browser type, timestamps, and which pages were requested. We use these to keep the service running and to investigate abuse.

We do not run advertising trackers, third-party analytics scripts, or session recording on Dibaw.

Signing in with Google

If you choose “Continue with Google”, Google tells us your name, email address, whether that email is verified, and your profile picture. That is the whole of it. We request only the openid, email, and profile scopes.

We do not request, receive, or store access to your Gmail, Google Drive, Google Calendar, or Google Contacts. We use what Google sends solely to create and identify your Dibaw account. Dibaw’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We never transfer Google user data to anyone else except as needed to provide the service, and we never use it for advertising or sell it.

You can disconnect Dibaw at any time from your Google account’s third-party access settings. Doing so stops future Google sign-ins; it does not delete your Dibaw account, which you can remove from Settings.

Why we process it

• To create your account, sign you in, and keep your session secure.
• To store and display your workspace — the dashboard has nothing to show without it.
• To serve the funnel pages you publish, to the visitors you send to them.
• To keep the service available, prevent abuse, and fix faults.
• To reply to you when you contact us.

Where the law requires a legal basis, ours is the performance of our contract with you for the first three, and our legitimate interest in a working, non-abused service for the rest.

Who we share it with

We do not sell your data and we do not share it for advertising. We use a small number of providers to run the service, and they only process data on our instructions:

• Convex — our application backend and database. Your account record and all workspace content live here.
• Cloudflare — hosting and content delivery for the website, the dashboard, and your published pages.
• Google — identity only, and only if you use Google sign-in.

We may also disclose data if we are legally required to, or where it is necessary to protect our rights or someone’s safety. If Dibaw is ever acquired, your data may transfer with the business; we would tell you before that takes effect.

Where it is processed

Our providers operate data centres in several regions, so your data may be processed in the European Union and the United States. Where data leaves the region it was collected in, our providers rely on standard contractual clauses or an equivalent transfer mechanism.

Pages you publish

A page you mark live is public. Anyone with the address can read it, and search engines may index it. Do not put anything confidential on a published page. Setting a page back to draft removes it from your public subdomain, though copies may persist in caches and search indexes for a while afterwards.

Leads and other people’s data

When you enter someone else’s details into your workspace, you are the one who decides why and how they are used — in data-protection terms, you are the controller and Dibaw is your processor. It is your responsibility to have a lawful reason to hold those details, to honour requests from those people, and to follow the marketing and anti-spam rules that apply where they live. We will help you locate, export, or delete a record if you ask.

How long we keep it

Workspace content is kept for as long as your account exists. Deleting your account from Settings removes your account record and the workspace rows attached to it — brand, offer, scripts, tasks, calendar entries, leads, and pages. Backups and server logs age out on their own cycle, generally within 30 days.

Security

Traffic to Dibaw is encrypted in transit. Passwords are stored only as salted hashes. Sessions use signed, first-party cookies, and every database query is scoped to the signed-in account, so one workspace’s data is not reachable from another. No system is perfect; if a breach ever affects your data we will tell you promptly and say what happened.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Most of this you can do yourself from Settings. For anything else, email us at hello@dibaw.com and we will respond within 30 days. If you are in the EEA or the UK and you are unhappy with our answer, you may complain to your local data protection authority.

Children

Dibaw is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

Changes

If we change this policy we will update the date at the top of the page, and for anything material we will tell you in the product or by email before it takes effect.

Contact

Questions, requests, or complaints: hello@dibaw.com. See also our Terms of Service.