Sign in

Privacy Policy

This policy explains what data DivergeAi collects when you use the Divergent platform, why, and who can see it. It covers the web application at divergeai.net and the Divergent app for Android.

Effective date: September 8, 2026

Divergent is a workspace run by your organization

You use Divergent with an account that your organization created for you. The organization decides which apps are enabled, which external systems are connected, which AI model providers answer its assistant, and who inside the organization can see what. For the data you create in that workspace, your organization is the data controller and DivergeAi processes it on the organization's behalf to run the service.

What we collect

Account information

Your name, work email address, the organization you belong to, your roles, and the language you prefer. Sign-in credentials are verified by DivergeAi or by your organization's identity provider; passwords are stored only as salted hashes.

Content you create

Conversations with the assistant, the photos and documents you attach to them, inventory counts, forms, and any other records you submit through an enabled app. This content belongs to your organization's workspace.

Device and diagnostic information

The Android app records its own version, the Android version, error codes, and timing of failed requests so that we can fix problems. Crash reports are collected through Firebase Crashlytics and are tagged with your user id and organization id so that a crash can be traced to an affected workspace. Diagnostic log lines stay on your device unless you copy or share them from the Diagnostics screen. Secrets such as session tokens are redacted before anything is written to a log.

Session tokens

To keep you signed in, the Android app stores an access token and a refresh token in the device's secure storage. They are removed when you sign out.

Device permissions the Android app asks for

  • Camera: to scan barcodes and serial numbers during inventory counts and to take photos you attach to a conversation. The camera is only active while you are using one of those features.
  • Photos and files: to attach an existing photo or document. Only the files you pick are uploaded.
  • Location: only when you clock in or out on the attendance screen, to record the position at that moment together with the time. The app never reads your location in the background.

The app does not read your contacts or other apps.

How we use the data

  • To provide the service: show your workspace, deliver messages, and store what you submit.
  • To answer through the assistant. Your messages and attachments are sent to the AI model providers your organization has configured so that the assistant can respond and use the tools your organization enabled.
  • To synchronize with the business systems your organization has connected, for example an ERP or field-service system, when an enabled app writes to them.
  • To keep the service secure, enforce your organization's access rules, and audit governed actions.
  • To diagnose and fix defects.

We do not sell personal data and we do not show advertising.

Who can see it

  • Your organization. Administrators and colleagues see workspace content according to the roles your organization assigned.
  • Service providers. Google Cloud hosts the platform. Firebase Crashlytics receives crash reports. The AI model providers configured by your organization receive the content needed to answer a request. Each provider processes data under its own terms and only for the purpose of running the service.
  • Legal requirements. We disclose data when the law requires it.

Retention and deletion

Workspace content is kept for as long as your organization keeps its workspace and your account. Uninstalling the Android app deletes the tokens, caches, and diagnostic logs it stored on the device.

How to request deletion of your data

  1. Ask your organization's administrator to remove your Divergent account, or write to wmontoya@divergeai.net from your work email with the subject "Delete my Divergent data".
  2. We confirm the request with your organization and complete it within 30 days.

What is deleted: your account, sign-in credentials and tokens, your profile, your conversations with the assistant and their attachments, and the crash and diagnostic data tied to your user id.

What is kept: business records you submitted on behalf of your organization, such as inventory counts and their audit trail, remain in the organization's workspace because they belong to the organization. They are kept for as long as the organization keeps them, and no longer name you once your account is removed.

Security

Data travels over TLS. Tokens on Android live in the platform's secure storage. Access inside a workspace is controlled by roles, and actions that change business records are recorded with the identity that performed them.

Children

Divergent is a tool for members of organizations and is not directed to anyone under 18.

Changes to this policy

When this policy changes, we update the effective date on this page. Material changes are announced to organization administrators.

Contact

Questions about this policy or about your data: wmontoya@divergeai.net.