Privacy Policy

myDiya AI (“myDiya”, the “Service”) is an AI-agent platform for quality engineering, provided by AscendQE (“AscendQE”, “we”, “us”). This policy explains what information we handle when your organisation and its people use the Service, why, and the choices you have. Where your organisation has a written agreement with AscendQE, that agreement governs how we process the data you put into the Service, and this policy should be read alongside it.

For the content your organisation puts into its workspace — conversations, documents, test cases, recordings, code and the results of runs — your organisation decides what is processed and why, and AscendQE processes it on your organisation’s behalf to provide the Service.

For the information we need to run the Service itself — account details, sign-in activity, billing contacts and security logs — AscendQE decides how it is used, as described below.

• Account information: your name, work email address, the workspace and projects you belong to, and your roles. Sign-in is handled by our identity provider; we do not see or store your password.
• Workspace content: what you and your colleagues create or connect — chat messages, uploaded documents, test cases, requirements, browser-run recordings and screenshots, generated code, test results, and code read from repositories your organisation connects.
• Connected accounts: when you connect a tool such as a source-code host or an issue tracker, we store the access token you provide so the Service can act as you in that tool. Tokens are encrypted and used only for the actions you start.
• Usage and security information: the actions taken in the Service (for example, which agent ran, which approvals were given), token and cost metering, audit logs, device and browser information, and IP addresses.
• Information you send us: support requests and anything else you write to us.

• to provide, operate and secure the Service, including running the agents you start;
• to sign you in, enforce your organisation’s roles and permissions, and keep an audit trail of significant actions;
• to meter usage and apply the budgets and limits your organisation sets;
• to send service messages such as invitations, notifications you have asked for, and security notices;
• to give support and to fix problems; and
• to meet legal obligations.

The agents send prompts — which can include your workspace content — to the AI model provider your organisation has configured, using your organisation’s own account with that provider. That provider’s handling of the data is governed by your organisation’s agreement with it.

We do not use your workspace content to train AI models, and we do not sell it.

We share information only:

• within your organisation’s workspace, according to the roles and permissions your administrators set;
• with the tools you connect, when you ask the Service to act in them (for example, opening a pull request);
• with the AI model provider your organisation configures, as described above;
• with service providers that host and operate the Service for us (cloud hosting, storage, identity and email delivery), under contracts that limit their use of the data to providing those services;
• when required by law, or to protect the rights, safety and security of our users, AscendQE or others; and
• as part of a merger, acquisition or sale of assets, subject to this policy.

• Each organisation’s data is kept in its own isolated database schema.
• Secrets and connected-account tokens are encrypted with keys specific to your organisation, and are never shown back in the product once saved.
• Access inside a workspace follows the roles your administrators assign, and significant actions are recorded in an audit log.
• Data is encrypted in transit.

We keep workspace content for as long as your organisation’s workspace is active, or until your organisation deletes it. Some records — such as audit logs and billing records — are kept for longer where we need them for security, to resolve disputes or to meet legal obligations. When a workspace is closed, we delete or anonymise its content within a reasonable period, except where the law requires us to keep it.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict some processing. Because your organisation controls its workspace, please contact your workspace administrator first; they can make many changes directly. You can also write to us at support@ascendqe.com, and we will help or pass your request to your organisation.

You can disconnect a connected account at any time from your settings.

We use cookies and your browser’s local storage to keep you signed in, remember your workspace and display preferences, and keep the Service secure. We do not use them for advertising.

Information may be processed in countries other than yours, including where our service providers operate. Where we transfer personal information across borders, we use safeguards required by applicable law.

The Service is a business product and is not directed to children. We do not knowingly collect information from anyone under 16.

We may update this policy. When we make a material change, we will tell workspace administrators before it takes effect. The date at the top shows when it was last changed.

For any question about privacy or this policy, write to support@ascendqe.com.