Privacy Policy

The data controller is Diligo Ltd, with registered office at 128, City Road, London, EC1V 2NX, United Kingdom. For any questions regarding the processing of your personal data, you can contact us at [email protected].

We collect personal data necessary for the provision of our services, including: identification data (name, surname, company registration number, VAT number), contact data (email, telephone), company data, and transaction data related to platform usage.

Your data is processed for: service provision, contract management, legal compliance, fraud prevention, and with your consent, for marketing communications.

Personal data is retained for the time necessary to fulfil the purposes for which it was collected and in any case for the periods required by applicable law.

You have the right to access, rectify, delete, limit processing, data portability, and object to processing. You can download a copy of your personal data or delete your account from your profile settings. To exercise these rights, contact us at [email protected].

To operate the platform, we share certain data with the following providers who process data solely on our behalf and under our instructions, in compliance with UK GDPR Article 28: Amazon Web Services (EU region) for hosting, database storage, and document storage; Resend for email delivery (your email address); Twilio for WhatsApp notifications (your phone number, if you opt in); TomTom for address validation (delivery addresses); Google for bot protection (reCAPTCHA) and anonymous analytics. All data processing by third parties is limited to what is strictly necessary for the service provided.

The platform offers an optional assistant that can answer questions about your own trading and prepare actions for you to approve. When you use it, the text you write and the details of your own requests, offers, orders and storage needed to answer are sent to our model provider, Anthropic, which processes them on our behalf and on infrastructure outside the United Kingdom and the European Economic Area. Your password, payment details and uploaded documents are never sent. Assistant messages are deleted 30 days after they are written; the record that an action was taken is kept with the order or offer it produced, because that is a commercial record rather than a conversation. Consent to automated assistance is optional, is never a condition of using the platform, and can be withdrawn at any time from your profile. Withdrawing it stops any further automated action immediately and does not undo orders already placed. Access keys for your own software are a separate grant. Issuing one is not consent to automated assistance, and consenting to automated assistance does not issue one. Each key carries its own permissions, expiry date and limits, and you can revoke it at any time. We store only a one-way hash of the key, never the key itself, so a key you lose can be revoked but never recovered.

You have the right to lodge a complaint with the UK data protection authority: Information Commissioner's Office (ICO), ico.org.uk