Privacy Policy.

FARSIGHT MARKETING LLC ("Digraph," "we," "us," or "our") operates digraph.dev and the Digraph software service. For personal information described in this policy, we act as the controller (or "business"). Where we process personal information on behalf of a customer, we act as that customer’s processor (or "service provider"), and an applicable data processing addendum may apply.

Contact: info@digraph.dev · FARSIGHT MARKETING LLC, 16192 COASTAL HWY, LEWES, DE 19958.

We collect the following categories of information:

• Account information: name, email address, organization, team membership, and, if you sign in with Google, the basic profile information Google shares with us.
• Workspace data: configured brands, competitors, prompts, personas, source lists, saved views, exports, and other content you submit to the service.
• Observed AI answers: public answers, citations, and sources returned by AI systems and search engines in response to prompts run for your workspace.
• Billing information: billing contact, company name and address, tax ID, plan, invoices, and bank transfer records. Payments are made by bank transfer; we do not collect payment card details.
• Communications: details you send through our contact form, waitlist, report requests, or email, and your email preferences.
• Usage and diagnostics: pages and features used, device and browser information, IP address, and logs and run metadata needed to operate and secure the service.

We use personal information to provide and secure the service, authenticate users, run monitoring and generate reports, process payments, provide support, send service and account messages, send marketing email where permitted (you can opt out at any time), measure and improve the website and product, detect misuse, and comply with legal obligations. Where GDPR or similar law applies, our legal bases are performance of a contract, our legitimate interests in operating and securing the service, consent (for optional cookies and marketing where required), and legal obligation.

We do not use automated decision-making that produces legal or similarly significant effects on individuals.

To observe how AI systems answer, we send prompts configured in your workspace to third-party AI and search providers, currently including OpenAI, Anthropic, Google, and Perplexity. Controlled personas and multi-turn logic approximate research behavior without accessing private user conversations or personal LLM histories.

Digraph does not use private workspace data to train public AI models. Prompts you configure are processed by the providers under their own terms, so do not include personal, confidential, or regulated information in prompts.

We use a limited set of cookies and manage them through the cookie banner and Cookie settings in the site footer. Optional cookies are off until you allow them.

• Essential: cookie_consent (stores your choice, 1 year) and sidebar_state (dashboard sidebar preference, 7 days), plus authentication cookies needed to keep you signed in.
• Analytics (optional): Google Analytics cookies _ga and _ga_* (up to 2 years) to understand website traffic.
• Marketing: no marketing cookies are currently used.

You can change or withdraw consent at any time. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out and keep optional analytics and marketing cookies off. We do not respond to Do Not Track signals, which have no agreed industry standard.

We share personal information only with service providers that help us operate Digraph, under contracts that limit their use of it, and as described here:

• Hosting and infrastructure by Google Cloud, and database and authentication services by Supabase;
• Our bank and our accounting or invoicing providers, to process payments and keep financial records;
• Transactional and account email delivery by Resend;
• Google Analytics and Google sign-in;
• AI and search providers listed above, for prompts you configure;
• Professional advisers, and authorities where required by law or to protect rights and safety; and
• A successor in a merger, acquisition, or sale of assets, with notice where required.

Digraph does not sell personal information or share it for cross-context behavioral advertising.

We keep personal information while your account is active and as needed to provide the service, meet legal, tax, and accounting obligations, resolve disputes, and enforce agreements. You can delete your account from your account settings or by emailing info@digraph.dev. After deletion we remove or de-identify workspace data, except where we must retain it by law, and residual copies in backups expire on our normal backup cycle. Export available reports before deleting.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information; to object to or restrict certain processing; to withdraw consent; to opt out of sale, sharing, or targeted advertising (we do none); and to lodge a complaint with your data protection authority. We will not discriminate against you for exercising these rights.

To make a request, email info@digraph.dev. We may need to verify your identity, and an authorized agent may submit a request on your behalf with proof of authority. We respond within the period required by law, generally 30 to 45 days. If we decline a request, you may appeal by replying to our response. You can manage marketing email with the unsubscribe link or your email preferences, and cookies through Cookie settings. If you use Digraph through an organization, we may refer your request to that organization.

Digraph is based in the United States and hosts the service on Google Cloud across multiple regions. Personal information may therefore be stored and processed in the United States and other countries where we and our providers operate, which may have different data protection laws than your country. Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses.

We use reasonable administrative, technical, and organizational safeguards described on our Security page. No online service is completely secure. Tell us promptly at info@digraph.dev if you believe your account has been compromised.

Digraph is intended for business users aged 18 or older and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will delete it.

We may update this policy and will post the revised version with a new effective date. For material changes, we will notify account holders by email or in the service where required. Questions or requests: info@digraph.dev.