Privacy Policy

Introduction

Welcome to Diligent4 ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application available at flingoos.diligent4.com and flingoos.com (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Service.

Information We Collect

Personal Information You Provide

When you register for and use our Service, we collect the following personal information:

• Account Information: Email address, display name, and profile photo (when using Google authentication)
• Authentication Credentials: Password (encrypted) if you register using email/password authentication
• Two-Factor Authentication: Phone number (optional, only if you enable 2FA via SMS)
• Organization Information: Your organization affiliation and role within your organization
• User Profile Data: User roles, permissions, and access control settings managed by administrators

Information Automatically Collected

When you use our Service, we automatically collect certain information:

• Session Data: Information about your recording sessions, including session IDs, timestamps, recording sources (screen or camera), and session metadata
• Usage Information: Activity logs, feature usage patterns, and interaction timestamps
• Technical Information: Browser type, IP address, access times, and pages viewed

User-Generated Content

Our Service allows you to create and store the following content:

• Screen Recordings: Video recordings of your screen for workflow documentation (and are deleted after processing)
• Camera Recordings: Video recordings using your device camera (only with explicit camera permission) and are deleted after processing
• Audio Recordings: Microphone audio captured during recording sessions (and are deleted after processing)
• Workflow Documentation: Text content, instructions, and structured workflow data
• Teaching Sessions: Educational content and AI training materials
• Chat Data: Messages and interactions with the AI chatbot feature

How We Use Your Information

Service Delivery

• To provide, operate, and maintain the Service
• To authenticate your identity and manage your account
• To process and store your recordings and content
• To provide AI-powered workflow analysis and insights

Communication

• To send you administrative information, updates, and notifications
• To respond to your inquiries and support requests
• To provide technical assistance

Service Improvement

• To develop new features and enhance user experience
• To monitor and analyze Service performance
• To troubleshoot technical issues

Security and Compliance

• To protect against unauthorized access and security threats
• To enforce our Terms of Service
• To comply with legal obligations

How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers

We use third-party service providers to help operate our Service:

• Google Firebase: Authentication, database (Firestore), and hosting infrastructure
• Google Cloud Platform: Cloud storage (GCS), computing resources (Cloud Run), and infrastructure services

These service providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

Organization Access

If you are part of an organization, designated administrators within your organization may access:

• Your user profile information (name, email, role)
• Your permissions and organization assignments
• Content you create within the organization's workspace

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

Data Storage and Security

Storage Location

Your information is stored on secure servers provided by Google Cloud Platform in the following regions:

• Primary Region: Middle East (me-west1)
• Backup Systems: Managed by Google Cloud Platform's redundancy infrastructure

Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted between your device and our servers is encrypted using TLS/SSL
• Authentication: Firebase Authentication with secure token-based access control
• Access Controls: Role-based permissions limiting access to authorized users only
• Regular Backups: Automated backups to prevent data loss
• Security Monitoring: Continuous monitoring for unauthorized access attempts

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

Access and Control

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information in your account settings
• Deletion: Request deletion of your account and associated data
• Export: Request a machine-readable copy of your data

To exercise these rights, please contact us at the address provided below.

Camera and Microphone Permissions

The Service requests access to your camera and microphone only when you initiate a recording session. You can:

• Grant or Deny: Control these permissions through your browser settings
• Revoke Access: Remove camera/microphone access at any time
• Limited Use: These permissions are only used during active recording sessions

We only request camera access for users who have been granted the camera_recording permission by their organization administrator.

Screen Recording Permissions

The Service requests screen sharing permissions when you choose to record your screen. This permission is:

• Session-Based: Requested only when you initiate screen recording
• Revocable: Can be canceled at any time during recording
• Purpose-Limited: Used solely for creating workflow documentation

Communication Preferences

You can opt out of non-essential communications by:

• Updating your notification preferences in account settings
• Contacting us directly to manage communication preferences

Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Information is retained while your account is active
• Inactive Accounts: Accounts inactive for more than 24 months may be deleted
• Legal Obligations: Some data may be retained longer if required by law
• Recording Content: User-generated recordings and content are retained until you delete them or close your account

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

User-Provided Information and Sensitive Data

No information is collected beyond what is actually entered by the user. You should not provide any additional personal information when using the Service, and in particular, you must not provide sensitive information, including medical information, payment details, identification numbers, and the like.

If such information is provided by the user, the operator shall not be considered as holding or processing such information as defined in the Privacy Protection Law, 5741-1981, and will act to remove it as soon as possible. The user releases the operator from any liability regarding the provision of such information on their own initiative and without being required to do so by the operator.

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

By using the Service, you consent to the transfer of your information to Google Cloud Platform facilities in the Middle East region and other locations where Google operates infrastructure.

Third-Party Services and Links

Our Service integrates with the following third-party services:

Google Services

• Firebase Authentication: For user authentication and identity management
  • Google Privacy Policy
  • Firebase Privacy Information
• Google Cloud Platform: For hosting, storage, and infrastructure
  • Google Cloud Privacy Notice

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Cookie Policy

Our Service uses essential cookies and similar tracking technologies to:

• Maintain your authentication session
• Remember your preferences and settings
• Analyze Service usage and performance
• Ensure security and prevent fraud

You can control cookies through your browser settings, but disabling cookies may affect Service functionality.

Types of Cookies We Use

• Essential Cookies: Required for authentication and core functionality
• Performance Cookies: Help us understand how the Service is used
• Preference Cookies: Remember your settings and preferences

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice on our Service
• Sending an email notification to your registered email address

Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

Google API Services User Data Policy Compliance

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only request the minimum necessary Google OAuth scopes (email, profile)
• We do not transfer Google user data to third parties except as necessary to provide the Service
• We do not use Google user data for serving advertisements
• We do not allow humans to read Google user data unless explicitly permitted by the user or required for security purposes

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: Amir@diligent4.com
Website: https://diligent4.com

Data Protection Officer

If you are located in the European Economic Area (EEA) or United Kingdom (UK) and have questions about data protection, you may contact our Data Protection Officer at:

Email: Tslil@diligent4.com

Legal Basis for Processing (EEA/UK Users)

If you are located in the EEA or UK, our legal basis for collecting and using your personal information depends on the specific information and context:

• Contract Performance: Processing necessary to provide the Service you requested
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., service improvement, security)
• Consent: Where you have provided explicit consent (e.g., camera/microphone access)
• Legal Obligations: Processing necessary to comply with legal requirements

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

Your Rights Under GDPR (EEA/UK Users)

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Obtain confirmation of whether we process your data and access to that data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request restriction of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, please contact us using the information provided above.

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Your Rights

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (Note: We do not sell personal information)
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights

Categories of Personal Information We Collect

• Identifiers (name, email, IP address)
• Commercial information (transaction history, usage patterns)
• Internet activity (browsing history, interactions with the Service)
• Audio and visual information (recordings, camera captures)
• Professional information (organization, role)

How to Exercise Your Rights

To submit a request, please contact us at the email address provided above. We will verify your identity before processing your request.