LangGenius, Inc. Privacy Policy

Latest update: April 30, 2026

LangGenius, Inc. ("LangGenius," "we," "us," or "our") provides AI-powered products and services, including but not limited to Dify (including Dify Cloud, Dify Enterprise, and Dify Community), Syncless, and other applications we may offer from time to time (collectively, the "Services"). Throughout this Privacy Policy ("Policy"), references to "we," "us," and "our" refer to LangGenius and its affiliates. By using any of our Services, you acknowledge and agree that LangGenius is the entity responsible for the collection, use, and protection of your personal information as described in this Policy.

This Policy describes how we handle your personal information when we act as a data controller - that is, when we determine the purposes and means of processing. This Policy does not apply to the extent we process personal information as a data processor on behalf of our enterprise customers, which is governed by our Data Processing Agreement (DPA).

Please carefully read this Policy before you use or submit any information through or in connection with the Services. If you do not agree with this Policy, please do not access or use our Services or interact with any other aspect of our business. Unless otherwise required by laws in your residence, by using our Services, you accept our privacy practices described in this Policy.

1. What information we collect about you?

We collect and store personal information that you directly provide us through our Site, when using our Services, and other ways:

Information you provide to us:

We collect and store personal information that you provide to us directly when using our Services, as well as through other means (such as user support requests, social media interactions, surveys or promotions, and interactions on our websites and at events). The information we collect includes:

As Prospective, Enterprise Versions and Community Customers:

Business Contact and Transactional Information: If you are a prospective customer or an existing enterprise version customer, we may collect your business contact details (such as name, business email address and employer name) and, where applicable, your purchase history. We use this information to manage our relationship with you and for direct marketing purposes. You may opt out of direct marketing at any time as described in Section "How to access and control your information" below.

SaaS Customers (e.g., Dify Cloud, Syncless):

Account and profile information. When you register for an account, create or modify your profile, set preferences, sign-up for or make purchases through the Services, we collect information about you which includes without limitation your name, business telephone number and your email address, passwords, language preference and similar security information used for authentication and account access. You may also choose to provide us with a display name, profile photo, job title, and other details to your profile information to be displayed in our Services. We may also use the contact information for marketing purposes; you may opt out of direct marketing at any time as described in Section "How to access and control your information" below.

Content and AI interaction data. When you use any of our Services that include AI features, we collect the content you submit to and receive from AI systems. This includes: prompts, questions, instructions, and other inputs you provide; documents, files, and knowledge base content you upload; AI-generated outputs and responses; and web page content that our browser extension accesses at your direction to perform tasks involving those pages. If you include personal data or reference external content in your inputs, we will collect that information and it may be reproduced in the outputs. This also includes content from third-party applications and services you choose to integrate with our Services. If you use a service that includes application building and workflow configuration capabilities, we also collect your application configurations and workflows.

Content provided by you through community platforms, instant messaging tools, or our website: We also collect other content that you submit to us for operation of website channels (such as social media or social networking sites). For example, when you provide feedback or participate in any interactive features, surveys, contests, promotions, sweepstakes, events, or activities, you provide content to us through phone, community interaction, IM services, etc. (such as GitHub, Twitter, Discord, WeChat, Slack, etc.).

Information provided through our support channels: Through our user support, you can choose to submit information about any issues you encounter while using our services. You may contact us through email, third-party IM tools to directly communicate with our support team. You will be asked to provide your contact information such as your email address, a summary of the issue you are facing, and any additional documents, screenshots, or information that may help to resolve the problem.

Payment and billing information: When you use certain paid services on our Services, we collect your payment and billing information, including your payment transaction and your billing address. You may also be required to provide credit card information to third-party secure payment processing service providers (such as Stripe). We do not store your credit card information.

Information we collect automatically when you use the Services:

All Customers (including Prospective, Enterprise Versions, Community, and SaaS Customers)

Geolocation Data: Based on your device settings, we may collect geolocation data when you access our website and use our products. For example, we may use your IP address to infer your approximate location.

Cookies and Other Tracking Technologies: We and our third-party partners, such as our advertising and analytics partners, use various common technologies to provide functionality and identify you across different services and devices. Such technologies typically include tracking pixels, JavaScript, and various "local storage data" technologies, such as cookies and local storage. Please refer to the LangGenius, Inc. Cookie Policy.

SaaS Customers:

Your Use of the Services: When you access any of our services and interact with them, we may track certain information about you, including but not limited to the features you use; your login times, feature usage, the links you click on; the type, size, and filenames of attachments you upload to the services; and how you interact or click on our product services.

Device and Connection Information: We collect information about the devices you use to access our services, such as your computer, phone, tablet, or other devices. This type of device information also includes your connection type and settings when installing, accessing, updating, or using our services. We also collect information about your operating system, browser type, URL of referring/exit pages, IP address, device identifiers, and crash data through your device.

Information we receive from other sources:

We receive information about you from other service users, our partners, and third-party service providers, social media platforms, and public databases. We may combine this information with the information we collect through other means. This helps us update and improve our records, identify new customers, create more personalized advertising, and recommend services that you may be interested in.

2. How we use information we collect?

We collect and process personal information about you as necessary to provide the Services you use, operate our Sites and business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfil other legitimate interests as described in this Policy and in our notices to you.

For example, we may use any of the categories of personal information we describe above to: Operate, optimize, maintain and improve our internal operations, systems, Sites, and Services. Understand you and your preferences to enhance your experience and enjoyment using our Sites and Services, to provide recommendations, to solicit feedback, and to better market and advertise to you. Monitor and analyze user interactions with our Sites and Services to identify trends, usage, and activity patterns. Respond to your comments and questions and provide technical support or customer service. Provide and deliver the Services you request. Comply with applicable laws, rules, or regulations and cooperate and defend legal claims and audits. Communicate with you about promotions, upcoming events, and other news about products and services offered by LangGenius and our partners. Plan and host corporate events. Protect the Sites and Services, and investigate and deter against fraudulent, unauthorized, or illegal activity. Authenticate and manage your account.

About AI interaction data. LangGenius is a platform company. We do not train AI models ourselves, and we will not use your AI interaction data for model training. How your AI interaction data is used depends on the type of service you use: If you use a service where you select your own AI model provider and supply your own API key, your AI interaction data is transmitted directly to your chosen provider for processing. Whether such data is used for model training depends on the agreement between you and that provider, and we bear no responsibility for such use. If you use a service where AI models are selected and managed by us, your AI interaction data is processed by AI model providers acting as our Sub-processors. Under the data processing agreements we have entered into with these providers, they are prohibited from using your data for model training or their own purposes. Please refer to our Sub-processor List for details of such providers.

3. How we share information we collect?

We may share your personal information with your consent. We may also share any category of personal information described above:

Sharing with our business partners and other third-party service providers. We share information with third parties who help us operate, provide, improve, integrate, customize, support, and market our services. We work with third-party service providers who provide website and application development, hosting, maintenance, backup, storage, virtual infrastructure, payment processing, analytics, and other services to us.

Sharing with potential buyers and advisors. If there is a company sale, merger, reorganization, dissolution, similar event, or measures taken in anticipation of such an event, your personal information may be shared with our advisors and any potential buyer's advisors and be transferred to the new owner of the business.

Sharing information to maintain compliance with laws and regulations. We may share information as required by law or subpoena, or if we reasonably believe that such action is necessary to comply with applicable laws or the reasonable requests of law enforcement.

Sharing with our data processors and sub-processors. We may entrust third-party data processors with the processing of your personal information to the extent necessary to achieve the purposes described in Section 2 of this Policy.

4. Data Retention and Security

We retain personal information for as long as necessary for the purposes for which the personal information is processed and for longer periods as necessary for us to comply with applicable laws. LangGenius cares about the security of your information and takes reasonable and appropriate technical and organizational measures designed to prevent loss, misuse, and unauthorized access, disclosure, alteration, and destruction of personal information. However, no security system is impenetrable, and we cannot guarantee the security of our systems or your information.

5. Data Transfers

The information collected through our website and our products may be stored and processed in any country/region where LangGenius or its affiliated companies or service providers maintain facilities, including your region, the United States, Australia, Canada, and the European Economic Area and the United Kingdom.

If you reside in European Economic Area, the UK, and Switzerland: When we transfer personal information to the United States or other countries where the European Commission has not determined their laws provide adequate data protection, we use legal mechanisms designed to help ensure your rights and protections, including the Standard Contractual Clauses for Data Protection approved by the European Commission.

If you reside in Japan: We may provide Your Information to third parties in the United States or other countries. We will only provide personal information to parties that have established a system to ensure implementation of measures equivalent to those required under Japan's Act on the Protection of Personal Information.

6. How to access and control your information?

You have certain rights regarding your personal information, subject to the applicable laws. These may include the rights to: Access your personal information. Rectify your personal information. Erase your personal information. Object to processing. Restrict the processing. Receive your personal information in a usable electronic format and transmit it to a third party (right to data portability). Withdraw consent. Lodge a complaint. Opt-out of communications. Send "Do Not Track" Signals. Right to Access sharing records (for individuals residing in Japan). Right to cease 3rd party sharing (for individuals residing in Japan).

To exercise any of these rights or to submit a data request, please visit https://langgeniusinc.gdprlocal.com/eu for individuals residing in the EEA. For individuals residing in other jurisdictions, please email privacy@dify.ai.

7. Our policy toward children

Our Services are NOT directed to children under the age of 18 and we do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will promptly delete such personal data from our systems.

8. Changes to our policy

We may modify this Policy from time to time, and changes may apply to any personal information we already hold about you, as well as any new personal information collected after the Policy is modified. If we make changes, we will notify you by revising the date at the top of this Policy. We will provide you with advanced and more prominent notice if we make any material changes.

9. Lawful basis for processing personal information (EEA, UK and Switzerland)

LangGenius is the data controller of your personal information. Legal bases include performance of a contract, steps prior to entering into a contract, legitimate interests, and consent.

Personal Information You Provide to Us: (a) Contact information - Recipients: AWS, Google Workspace. (b) Registration/account information - Recipients: Github, Google, AWS. (c) Payment and billing - Recipients: Stripe, AWS. (d) Chat, comments and opinions - Recipients: Google Workspace, AWS. (e) Information from third parties. (f) Content and AI interaction data - Recipients: AI model sub-processors.

Information we collect about your Use: (a) Approximate Location - Recipients: Metabase, Cloudflare, AWS. (b) Access and usage information - Recipients: Metabase, Cloudflare, AWS.

10. U.S. Privacy Protection

For California residents, "Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer or household.

Categories we collect: A. Identifiers; B. Cal. Civ. Code Section 1798.80(e) categories; C. Commercial Information; D. Internet or Electronic Network Activity; E. Geolocation data; F. Audio, electronic, visual or similar information; G. Professional or Employment-Related Information; H. AI Interaction Data.

We do not sell or share your personal information for "cross-context behavioral advertising." Privacy Rights: You may have the right to know and access, delete, and correct personal information. To exercise your rights, submit your request to privacy@dify.ai.

11. How to contact us?

LangGenius, Inc., a Delaware registered company (File No. 7358523), USA. Email: privacy@dify.ai

EU - Ireland Representative: Instant EU GDPR Representative Ltd, Adam Brogden, contact@gdprlocal.com, Tel: +353 15 549 700, Reporting Link: https://langgeniusinc.gdprlocal.com/eu, EU Dublin Address: INSTANT EU GDPR REPRESENTATIVE LIMITED, Office 2 12A Lower Main Street, Lucan Co. Dublin, K78 X5P8 Ireland

Syncless - Sub-processor List (Last updated: April 27, 2026)

LangGenius, Inc. uses the following sub-processors to process personal data in connection with the provision of Syncless:

- Anthropic, PBC - Provision of AI model inference and natural language processing services - United States
- Cloudflare, Inc. - Content delivery network, security, and DDoS protection - Global
- GitHub, Inc. - User account authentication (OAuth) - United States
- PingCAP, Inc. (TiDB) - Provision of database and data storage services - United States
- Stripe, Inc. - Payment processing and subscription management - United States

Changes to this list: We will update this list when we engage a new sub-processor or make material changes to existing sub-processor arrangements.