Privacy Policy

This Privacy Policy explains how Diurno HQ (“Diurno HQ,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with Diurno HQ — Customer Intent Intelligence CRM (the “Service”), a business-to-business sales-intelligence platform.

This Policy applies to three groups of people whose information the Service handles:

• our customers — the businesses that subscribe to the Service;
• the users who access the Service on a customer’s behalf; and
• the individuals at third-party companies whose limited, public professional information the Service processes so that customers can research those companies.

This Policy is provided for transparency about how the Service handles information; it is not legal advice, and you should consult your own counsel regarding its application to your business.

The Service is offered solely to businesses located and operating in the United States. It is not directed to, intended for, or offered to individuals or entities located or operating outside the United States, and it is not intended for consumers or minors. By using the Service, customers and their users represent that they are United States-based.

Because the Service is designed for the United States market, this Policy is written around United States privacy law. See Section 13 for how we treat access from outside the United States.

We collect the following categories of information:

We use the information described above to:

• provide, operate, and maintain the Service and your workspace;
• perform research on the third-party companies you choose to monitor and generate the intelligence, signals, and suggested outreach the Service is designed to produce;
• authenticate you, secure the Service, and prevent fraud and abuse;
• provide customer support and respond to your requests;
• process billing and manage subscriptions;
• monitor, improve, and develop the reliability and quality of the Service; and
• comply with legal obligations and enforce our terms.

To generate research, we send queries and relevant public context to the AI research providers described in Section 7, which process them on our behalf to return results.

To research third-party companies efficiently, we maintain a shared corpus of public, web-sourced facts about third-party companies — for example, hiring signals, technologies in use, funding, and public professional profiles — each tied to a public source. This corpus is cached and reused across customers to power research. Maintaining a shared corpus of public company facts is standard practice for the sales-intelligence category; platforms such as 6sense, ZoomInfo, and Clay similarly pool a shared corpus.

The shared corpus pools only public facts about third-party companies. Its purpose is to reuse public knowledge about the market so that every customer benefits from research already done, without re-fetching the same public sources.

The shared corpus never includes a customer’s private data. Specifically, we do not pool, share, or reveal to any other customer:

• your targeting or interest — the fact that you researched or monitored a given company is never disclosed to any other customer;
• your notes;
• your hand-entered signals; or
• your CRM, pipeline, or contacts.

These are strictly tenant-private. In short: the corpus reuses public knowledge about the world; it never reuses your private knowledge about your pipeline. Your Customer Data is used only to provide the Service to you.

As a United States-based business-to-business service, we process information on the following straightforward bases:

• To provide what you request — to deliver the Service and perform under our agreement with your organization;
• For our legitimate business interests — to operate, secure, improve, and market a business-to-business service, including maintaining the shared public-intelligence corpus from public sources; and
• To comply with law — to meet legal obligations and respond to lawful requests.

We do not sell your personal information (see Section 8). We share information only as described here, and we engage service providers (subprocessors) who process information on our behalf under contracts that require appropriate confidentiality and security. Our subprocessors fall into these categories:

• AI research providers (for example, Perplexity, OpenAI, and Anthropic), which process research queries and public context to help generate intelligence; and
• Cloud hosting, database, and infrastructure providers (for example, Railway, Cloudflare, and Supabase), which host, store, and help secure the Service.

The providers named above are examples; our current list of subprocessors is available on request at contact@diurnohq.com. We may also disclose information to professional advisors, to comply with law or valid legal process, to protect our rights and the safety of others, and in connection with a merger, acquisition, or sale of assets (subject to this Policy).

Diurno HQ does not sell personal information for money, and we do not share personal information for cross-context behavioral advertising. We do not use third-party advertising trackers, and we do not disclose personal information to data brokers for their own marketing purposes. Information is used to provide and improve the Service, as described in this Policy.

We retain your account and Customer Data for as long as your organization’s account is active and for a limited period afterward, so that we can support wind-down, meet legal and accounting obligations, and resolve disputes, after which we delete or anonymize it. Backups are retained for a limited period and then overwritten.

We retain public facts in the shared corpus for as long as they remain useful and supported by a public source, refreshing or re-sourcing them over time. Individuals may request removal of their public professional information as described in Section 11.

We use reasonable administrative, technical, and organizational measures designed to protect information, including encryption of data in transit, token-based authentication, access controls on a least-privilege basis, and reputable hosting infrastructure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If you believe your account has been compromised, contact us promptly at contact@diurnohq.com.

The Service is a business-to-business tool that is not directed to, or intended for, children. We do not knowingly collect personal information from anyone under 18 years of age, and the Service is not intended for consumers or for personal, family, or household use. If you believe a child has provided us personal information, contact us at contact@diurnohq.com and we will take appropriate steps to delete it.

The Service is intended solely for businesses located and operating in the United States, and information is processed in the United States. The Service is not directed to, or offered to, individuals or entities outside the United States, including in the European Union, the European Economic Area, or the United Kingdom. This Policy is not designed to address, and we do not offer the Service under, the EU/UK General Data Protection Regulation or similar non-United States frameworks.

If you access the Service from outside the United States, you do so on your own initiative, and you must not use the Service if doing so is not permitted where you are located.

We may update this Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page, and, for material changes, we will provide reasonable notice. Your continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.

This Policy is governed by the laws of the State of Texas, United States, consistent with our Terms & Conditions.

For any question about this Policy or about how we handle information — including access, correction, or removal requests, or to obtain our current list of subprocessors — email us at contact@diurnohq.com.