Privacy

This page describes what diffusion.io — the public website — does with visitor data. It does not describe the Diffusion product; customer data handled under a Diffusion agreement is governed by that agreement, not by this page.

What we collect

We do not ask the website for your name. We collect two things: what you send us, and how the site was used.

What you send us. The contact form takes your email, your reason for writing, and whatever you put in the message. Booking a call goes through Zoom's scheduler, which collects what you enter there and returns a booking identifier to us. Applying for a role sends an email directly to us. We keep these because we need them to reply.

How the site was used. Pages visited, referring links, approximate location derived from your IP address, device and browser characteristics, and — through PostHog — a replay of pointer movement, scrolling, and clicks. Input values are masked in replay: typed text is not captured.

What runs on this site

• Google Analytics 4 and Google Tag Manager. Site analytics, and the conversion signal that records a completed booking. Runs in Google Consent Mode. Analytics storage, ad storage, and ad user data are granted by default; ad personalization and Google signals stay denied.
• Microsoft UET. Advertising measurement for Microsoft campaigns. Tag 343262566. Carries its own copy of the denial rule.
• Reddit pixel. Advertising measurement for Reddit campaigns. Records a page visit, and one lead event per completed booking. The booking identifier is hashed before it reaches Reddit; the rest of the booking form is discarded.
• PostHog. Product analytics and session replay. US Cloud. Session replay records how a visitor moves through a page; every input value is masked, so what you type is never recorded. PostHog is not loaded at all on pages that carry a single-use booking link.

Our consent posture, stated plainly

There is no cookie banner on this site. Analytics and advertising measurement storage are granted by default in every region, including the EEA, the UK, and Switzerland. We think a banner that nearly everyone dismisses is worse than a page that tells you what is actually happening — but you should know that this is a choice we made, not a legal conclusion, and that it is more permissive than the consent-first default those jurisdictions expect.

Two things we deliberately do not do: we do not enable ad personalization or Google signals, so this measurement is not used to build advertising profiles of you; and we never read or store raw Google click identifiers in the browser.

How to turn it off

Global Privacy Control is the switch, and we honour it. If your browser or extension sends a GPC signal, every collector on this page is disabled before it loads — no request, no cookie, no replay, no measurement of any kind. It is checked synchronously, so there is no window where you are briefly tracked while the page decides.

GPC is available natively in some browsers and via extension in others. Blocking third-party scripts or clearing site data works too; the site functions normally without any of this.

Who else sees it

The providers listed above process this data on our behalf under their own terms — Google, Microsoft, Reddit, PostHog, Zoom, and Cloudflare, which serves the site. We do not sell your data, and we do not share it with anyone else for their own purposes.

Retention

Analytics and replay data follow each provider's retention settings. Contact and booking records are kept as long as we are in a conversation with you, and archived afterwards as ordinary business correspondence.

Your choices

Write to [email protected] to ask what we hold about you, to correct it, or to have it deleted, and we will do it. Depending on where you live you may have a formal right to make that request; we would rather just honour it than ask you which law applies.

Contact

Diffusion AI, Inc
100 Oracle Parkway, Suite 600
Redwood City, CA 94065
[email protected]

Changes

When the posture changes, this page changes with it and the effective date moves. There is no archive of previous versions; the site's public repository holds the history.