Legal

Privacy Policy

Effective October 15, 2026

Dibri is operated by Exhort Technologies LLC, a Wisconsin company ("we", "us"). This policy explains what information we collect when you use Dibri (the dibri.ai website, the Dibri app, the API, the MCP server, the website widget and hosted agent pages), how we use it, and the choices you have.

1. Two kinds of information

Your account. When you or your organization sign up, we decide how account information is handled, as described here.

Your organization's content and its users' questions. Documents your organization adds to Dibri, and the questions people ask its agents, are processed on your organization's behalf and under its control. If you asked a question through an organization's chat widget, agent or website, that organization decides how your question is used; please contact it with requests about your information.

2. What we collect

Account information: your name, email address, organization name and role. Passwords are stored only as a one-way hash.
Billing information: payments are handled by Stripe. We keep your plan, subscription status and Stripe customer and subscription identifiers. We never see or store full card numbers.
Content: documents you upload, website pages you ask us to crawl, files from OneDrive or Google Drive you connect, notes, grounding notes, approvals and the version history of your documents. Access tokens for connected drives are stored encrypted.
Questions and answers: the text of questions asked in the app, through the API or MCP server, in the widget or on hosted agent pages, the answers, the sources used, confidence scores, refusals, and feedback or flags on answers. For API and MCP calls we also log the caller's IP address. These records power your Trust dashboard and usage limits.
Technical information: a sign-in cookie (valid for up to 30 days) and a session cookie, and server logs that include IP addresses, timestamps and browser details, used for security and troubleshooting.
Messages you send us through our contact and partner forms or by email.

We don't use advertising trackers or third-party analytics on our website.

3. How we use information

To run Dibri: indexing your content, answering questions from it, enforcing plan limits and showing your dashboards.
To bill you, send service emails (such as receipts, password resets and security notices) and answer your messages.
To keep Dibri secure: preventing abuse, detecting attacks and investigating problems.
To improve Dibri using aggregated usage information.

We do not sell personal information, we do not use it for advertising, and we never use your content or your users' questions to train AI models.

4. How AI answers are produced

Your documents are stored and indexed on servers we operate; indexing, text extraction and transcription run there. To write an answer, the question and the most relevant passages from your documents are sent to our AI model provider. Some indexing steps also send short extracts (such as candidate keywords). Our provider's terms do not permit it to use that data to train or fine-tune models, and limit how long it may retain it.

5. Who we share information with

Service providers who help us run Dibri: our AI model provider (answer generation), Stripe (payments) and Mailjet (email delivery). They may use information only to provide their services to us.
Microsoft and Google, only when you connect OneDrive or Google Drive, to read the files you choose.
Your organization: admins of your Dibri organization can see its content, questions, answers and activity.
Legal and safety: when required by law, or to protect the rights, safety and security of our users and others.
Business transfers: if Dibri or Exhort Technologies is involved in a merger, acquisition or sale of assets, subject to this policy.

6. Security

All traffic to Dibri uses HTTPS. Every question is limited in code to the organization's own vaults, passwords are hashed, and drive access tokens are encrypted. No system is perfectly secure, and we can't guarantee absolute security. Tell us right away at speak@dibri.ai if you believe your account has been compromised.

7. How long we keep information

We keep account information and content for as long as your account is active.
You can delete documents and vaults at any time; they're removed from the live service right away.
Question and answer records are kept while your account is active so your dashboards stay complete. Ask us to delete them at any time.
When an account is closed, we delete its content and records within 30 days.
Backups are kept for up to 90 days (daily backups for 30 days, weekly backups for 90), so deleted information can remain in backups until they expire.

8. Your choices and rights

You can see and change your account details in Dibri, and delete your content there. You can also ask us to access, correct, export or delete your personal information by emailing speak@dibri.ai. Depending on where you live, you may have additional rights under local law; we'll honor them as required and respond within 30 days.

9. Children

Dibri is a business service and is not directed to children under 13. We don't knowingly collect personal information from children under 13; if you believe we have, contact us and we'll delete it.

10. Where information is processed

Dibri is operated from the United States, and information is processed there.

11. Changes to this policy

We'll update the effective date above when this policy changes, and for material changes we'll notify account holders by email or in the app before they take effect.

12. Contact

Exhort Technologies LLC · speak@dibri.ai