Last Updated: August 19, 2026
Privacy Policy
This policy says what diffpoint does with your data. Where it makes a promise, that promise is enforced by the product and not only by this page.
1. What we collect
The email address you give us, whether for the waitlist or to open an account. Your account identity, handled by our authentication provider — we never see or store a password. The files you upload to compare, and their metadata: name, extension, size, sheet names and column headers. And basic usage records: how many comparisons you ran, and when.
2. What we do with it
Your files are parsed and compared, and nothing else. We do not profile you, sell your data or use it for advertising. No part of diffpoint sends your files, or anything read out of them, to a language model: there is no AI feature in the product today. If one ships, this policy will name the provider before it does.
3. Retention and deletion
Every uploaded file and stored result carries an expiry date, set by your plan: 7 days on Free, 90 days on Pro. You can shorten it for a single comparison, or change your default in your settings. A job runs once a day and permanently deletes everything past its expiry. Deleting a comparison yourself removes its uploaded files and its stored result at the same time. We do not keep a shadow copy after either.
4. Who else processes your data
We use a small set of providers, each for one job: Clerk for sign-in, Backblaze B2 for file storage, Resend for the emails the product sends you, Stripe and Mercado Pago for payments when they are enabled, Sentry for error reports, Vercel for hosting this site, and Brevo, Formspree and Umami for the waitlist, the contact form and anonymous site analytics. None of them receives your files except the storage provider, which holds them encrypted.
5. Security
Files travel over TLS and are stored encrypted. Uploads go straight to storage through a link that is scoped to your account and expires; no bucket is public. Access to a comparison is checked against the account that owns it on every request. A share link you create is read-only, and revoking it takes effect immediately.
6. Your rights
You can ask us for a copy of what we hold about you, correct it, or have it deleted, and you can delete your comparisons yourself at any time. Write to us from the contact page and we will answer.