Privacy Policy

Last updated: 1 July 2026  ·  Effective: 1 July 2026
Your privacy matters to us. This policy explains what data we collect, how we use it, and your rights. We do not sell your data to third parties.

1. Who We Are

Diogelu ("we", "us", "our") operates the Diogelu platform at diogelu.com. diogelu.com is a subscription service provided by Clix Capital Pty Limited ACN: 169 978 438. We are the data controller for personal data processed through the platform.

Contact: privacy@diogelu.com

2. Data We Collect

2.1 Account Data

When you create an account, we collect:

2.2 Platform Data

Data you enter into the platform, including risk registers, property details, policy information, incident records and claims data. This data belongs to you and we process it only to provide the Service.

2.3 Billing Data

Payment processing is handled entirely by Stripe. We do not store your full credit card number, CVC or expiry date. We receive and store a Stripe customer ID and subscription status for account management purposes.

2.4 Usage Data

We collect technical data to operate and improve the Service:

2.5 Audit Log Data

Actions taken within the platform (adding risks, editing policies, logging in) are recorded in an audit log associated with your account. This data is visible to your organisation's administrators.

3. How We Use Your Data

PurposeData usedLegal basis
Providing the ServiceAccount data, platform dataContract performance
User authenticationEmail, password hash, JWT tokensContract performance
Billing & subscription managementEmail, Stripe IDsContract performance
Customer supportAccount data, platform data (with your consent)Legitimate interest
Service improvementUsage data, error logsLegitimate interest
Security & fraud preventionIP addresses, usage dataLegitimate interest
Legal complianceAs requiredLegal obligation

4. Data Sharing

We do not sell, rent or trade your personal data. We share data only as follows:

We do not use your data for advertising or share it with advertising networks.

5. Data Storage and Security

Your data is stored on secure servers. We implement appropriate technical and organisational measures to protect your data, including:

No method of transmission or storage is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription:

Billing records and audit trails may be retained for up to 7 years for legal and accounting compliance.

7. Geocoding

When you add a property location, we send the city and country name to OpenStreetMap's Nominatim geocoding service to obtain coordinates. No personally identifiable information is sent. Please review OpenStreetMap's Privacy Policy.

8. Cookies

Diogelu is a single-page application that uses local storage (not cookies) to store your authentication token in your browser. This is strictly necessary for the Service to function. We do not use tracking cookies or advertising cookies.

9. Your Rights

Depending on your location, you may have the following rights:

To exercise any of these rights, please contact us at privacy@diogelu.com. We will respond within 30 days.

10. Children's Privacy

The Service is intended for business use by adults. We do not knowingly collect personal data from anyone under 18 years of age. If you believe we have inadvertently collected such data, please contact us immediately.

11. International Data Transfers

Your data may be processed in countries other than your own. Where we transfer data internationally, we ensure appropriate safeguards are in place in compliance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-platform notice. The updated policy will be effective from the date stated at the top of this page.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: