# Legal

The agreements covering the Diaphora hosted platform, the self-hosted Frags runtime, and how we handle data on both.

These documents are unreviewed drafts.

None has been reviewed by counsel or given an effective date, and none is indexed by search engines. They are written against Diaphora's actual product shape rather than adapted from a generic template, but they are a starting point for legal review — not a substitute for it.

## Platform

[Terms of Use Draft  
The agreement governing the hosted platform — blueprints and workspaces, how credits are metered, automatic overage billing, beta features, acceptable use, and liability.  
Applies to app.diaphora.ai (hosted platform)](/content/legal/terms/index.html)

## Data protection

[Privacy Policy Draft  
What Diaphora collects, the split between account data we control and customer content we merely process, how long results history is kept on each blueprint, and the rights you can exercise.  
Applies to diaphora.ai and app.diaphora.ai](/content/legal/privacy/index.html)  
[Data Processing Addendum Draft  
Processor terms for customers subject to GDPR, UK GDPR or CCPA — processing scope, security measures, sub-processing, breach notification, transfers and audits.  
Applies to app.diaphora.ai (hosted platform)](/content/legal/dpa/index.html)  
[Sub-processors Draft  
The third parties that process customer content on Diaphora's behalf, why each one is engaged, and why the LLM providers your plans call are deliberately not on this list.  
Applies to app.diaphora.ai (hosted platform)](/content/legal/subprocessors/index.html)

Questions about any of these documents: [hello@diaphora.ai](mailto:hello@diaphora.ai)