LEGAL

Privacy Policy

Last updated: September 2026

Overview

This policy describes how DiffFind ("we," "us") handles information when you use our website and the DiffFind application. DiffFind helps you compare documents and, optionally, uses AI providers to explain what changed.

Information we collect

• Account information — if you sign in with Google, we receive your name, email address, and profile picture. If you create an account with email and password instead, we store your email address and a securely hashed version of your password (never the password itself).
• Content you compare — the text, files, or URLs you submit for comparison. In local mode, this never leaves your machine. In hosted mode, it is processed to generate a comparison and, if you enable semantic analysis, sent to the AI provider you've connected.
• API credentials — if you connect your own AI provider key, it is encrypted at rest and never displayed back to you in full.
• Usage data — basic technical logs (timestamps, request paths) for reliability and debugging.

How we use information

We use the information above to operate the comparison engine, maintain your session, and, if enabled, generate AI-assisted explanations of your document changes. We do not sell your data.

Third-party services

Depending on your settings, comparisons may be sent to a third-party AI provider (such as Anthropic, OpenAI, or Google) to generate semantic analysis. Their own privacy terms apply to that processing.

Data retention

Account, session, and settings data are retained for as long as your account is active. Document content submitted for comparison is processed to return a result and is not retained beyond what's needed to do so, unless you explicitly save it (such as comparison history stored in your browser).

Your rights

You can remove a connected AI provider key at any time from Settings or your Account page — it's deleted immediately, not just disconnected. You can also delete your account yourself at any time from the Account page, which permanently removes your account, sessions, settings, and any connected API keys; this cannot be undone. If you'd rather we handle it, you can also request account deletion by contacting us.

Changes to this policy

We may update this policy as the product changes. Material changes will be reflected by updating the date at the top of this page.

Contact

Questions about this policy? Email support@difffind.com.