Privacy policy · DIWorkspace

Last updated 25 September 2026 · Draft pending legal review

The short version

This website never receives your documents. De-identification happens in the product app, which has its own privacy notice.
Analytics and marketing cookies are off until you turn them on.
We do not sell or share your personal information.
The only information you can give this site is an email address, and only if you choose to.

Who we are

DIWorkspace is a product of Cerca Labs. For privacy questions, write to privacy@diworkspace.com.

What this site collects

Information you give us

If you submit the early access form, we collect the email address you enter and any optional interests you tick. We use it to tell you when DIWorkspace opens, and to send the AI Best Practices guides only if you ask for them. Every email has a one-click unsubscribe. We do not sell or share this address.

That list is held for us by Buttondown, our email provider, acting as our processor under a data processing agreement. Your address goes to them directly when you submit the form, so they also see the IP address and browser the request came from. Signing up is confirmed: we send one email with a link, and you are not added to the list until you click it. Buttondown does not track whether you open our emails.

Information collected automatically

Our hosting provider records standard server logs, including IP address, request time, page requested and user agent. These are used to serve the site and to detect abuse, and are retained for a short operational period.

Beyond that, this site loads no third-party scripts, fonts or trackers by default. Fonts are served from our own domain. Nothing about your visit is sent to an advertising network unless you turn marketing cookies on.

Cookies and similar technologies

We group cookies into three categories, and two of them are off until you say otherwise.

Necessary. One cookie, diw_consent, which remembers the choice you made here. It lasts 180 days, after which we ask again. This is the only cookie set without your consent.
Analytics. Counts visits and page views so we can tell which pages help. Off unless you turn it on.
Marketing. Tells an advertising platform that a visit came from its ad. Off unless you turn it on.

You can change your mind at any time: . Withdrawing consent is as easy as giving it. If your browser sends a Global Privacy Control signal, we treat it as an opt out and keep marketing off regardless of what is ticked.

Campaign attribution

When you follow a link from this site to the app, we may pass campaign parameters such as utm_source so we can tell which campaigns work. We allow only a fixed list of parameter names, and values must match a strict character pattern, so free text, an email address or a long number can never be carried across. Advertising click identifiers are passed only if you have turned marketing cookies on.

What we never do

We do not sell personal information, and we do not share it for cross-context behavioural advertising.
We do not put personal information in URLs, logs or analytics events.
We do not ask for health, financial or identity details on this website.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to opt out of sale or sharing. Because this website holds so little, most requests are satisfied by unsubscribing or by clearing your cookie choice.

To make a request, write to privacy@diworkspace.com. We will not treat you differently for exercising a right. If you are in the EEA or UK and are unhappy with our response, you may complain to your local supervisory authority.

Children

This site is not directed to children under 13, and we do not knowingly collect their information.

Changes

If we change this policy we will update the date above. Material changes will be announced on this page before they take effect.

The product app

Document handling, retention and de-identification are described in the app’s own privacy notice at sign up. De-identification is a safeguard, not a guarantee against all disclosure. That is why the app asks you to review every change before anything is saved or shared.