DiPro Board privacy

Who is responsible

Stuard Duran Quirós, San José, Costa Rica, as data controller for Zoaftware. Write to hola@zoaftware.com about anything concerning your data. This page covers only the DiPro Board plugin for Claude Code. The rest of zoaftware.com follows the general privacy policy.

General privacy policy

How it works

DiPro Board is a plugin you install in your own Claude Code. You ask for a change to your site, DiPro turns it into a card with a plan, and the change is made only after you approve it. The work is done by your Claude, on your computer, with your own Claude account. Our server keeps the board, your site's key, and a copy of what was there before each change, so you can always undo it.

What our server keeps

Your account: your Brilliant Lab member number, your site's domain, your Brilliant Directories site number, and the proof that the site is yours.
Your board and cards: what you asked for, in your words; the plan; the words you approved it with; the status and history of each card.
Your site's API key, encrypted with AES-256. Only its last 4 characters and its name are ever shown. Neither the plugin nor Claude ever receives it.
A copy from before each change: the full row of what is about to change (a page, a widget, a menu, a design setting or a label), exactly as it was. The Undo button works from that copy. The same record also keeps what was written, what was read back afterwards to confirm it, and a quick check of your site before and after. Nobody can edit these copies.
Fingerprints of what is about to change: a short code computed from each field, not the content itself. It tells us whether something changed between reading and writing. A fingerprint does not contain the text, but a very short value (a number, or a yes or no) could be guessed by trying values until one matches.
Your Claude Code connections: who approved the connection (the email of the admin, or the Brilliant Lab member number), the app's name, the IP address of the approval, the IP address and software of the last use, and the dates. Access codes are stored only as a one-way hash.
A record of each sign-in: every time your Claude Code finishes connecting, or a connection is ended, we write down when it happened, the IP address, the software and the app's name. It lets us spot access that was not yours.
A record each time DiPro reads its working instructions: DiPro reads its instructions from our server one step at a time, about 40 to 55 times per card. Each time, we write down when it happened, the IP address, the software, which connection and which work session it was, and which step it read. It lets us apply your plan's daily limit and trace a copy of the instructions back to its board.
A record when your purchase is tied to your board: when it happened, the IP address and software of that request, your domain and the license number.
A record when something is deleted: when your site's key is deleted, and when a board's data is deleted, we write down when it happened and, for a board, its number and how many items were deleted. It holds no content of your site.
An email record: for each notice we email you when a change is undone, or when DiPro paused your board because nothing could be put back, the address it went to, its subject (which names your domain and the card number), whether the mail server accepted it, and when it was sent.
What DiPro learns about your site: it stays in a private memory for your account.

What we do not keep

Your Claude login. We never ask for it and never store it.
Your conversations with Claude. They stay between you and Anthropic.
Your members' data. DiPro can read members, posts, categories and plans to understand your site, but none of it is stored on our server: it goes straight to your Claude. This version does not change members or posts.
Your backups. Before each change, DiPro reads the signed summary from Directory Backup on your site (whether there is a backup and how recent it is) and checks it on the spot; the summary is not stored. The backup itself lives on your site and in the destination you chose, never on our server.

What your Claude reads

What DiPro reads from your site reaches your Claude Code and, from there, Anthropic, like everything else you work on with Claude. That part is governed by your own agreement with Anthropic, not by this page.

Anthropic's privacy policy

What it is used for

To show your board, make the changes you approve, undo them when you ask, email you when one is undone or your board is paused, apply your plan's daily limit, and keep your account safe from access that was not yours. Nothing else. Your data is never sold, never used for advertising, and never used by us to train artificial intelligence models.

What DiPro learns

Lessons that come from your site stay in your private memory. Zoaftware moves a lesson into the knowledge shared by every board only once it carries no names, data or words of yours. For example: "in Brilliant Directories, the cache must be cleared after a menu changes".

Who else handles it

Hetzner Online GmbH, in Falkenstein, Germany: the server where all of this lives.
The email delivery service, for the notice when a change is undone or your board is paused.
Both act on our instructions and cannot use your data for anything else.
Brilliant Directories, which hosts your site, and Anthropic, which runs your Claude, are your own providers and follow their agreement with you.

How long it is kept

Cards, copies, fingerprints, connections, and the sign-in, instruction, key-deletion and email records: for as long as your membership lasts, plus 90 days. If your membership has no end date (for example, it was switched off by hand), they are kept until 90 days after the board was last used: the last card activity or the last time your Claude Code signed in. While your membership is active there is no end date yet; once it ends, each card shows the date it is kept until.
Between the end of your membership and that date: you can still undo a change and check your backup; a new change needs a renewed membership. After that date, all of the above is deleted, and DiPro tells you so if it is asked to work on that board.
The records of a purchase tied to a board and of a deletion: they are not deleted with the board. The first stays with your purchase records, under the general privacy policy; the second proves that the deletion happened.
Your site's key: deleted the moment you disconnect the site.
Web server logs (with IP addresses): 14 days.
You can ask at any time for a copy of everything, or for everything to be deleted before those dates.

Your rights

Under Costa Rica Law 8968 on the protection of personal data, you may request access to your data, a copy of it, its correction and its deletion, and you may withdraw consent. Write to hola@zoaftware.com from your site's admin email. You get an answer within five business days, at no cost. To cut off access immediately, you can also delete the API key in your Brilliant Directories admin.

Security

Everything travels over an encrypted connection. Your site's key is encrypted with a separate key that lives outside the database, so a copy of the database alone reveals nothing. Access codes are stored as hashes. Nothing is written to your site without a card you approved, and a copy is saved before each change so it can be undone.

Minors

DiPro Board is for site owners, who are adults. Data from minors is not knowingly collected.

Changes to this page

When this page changes, the date at the top changes. If a change affects what is kept or for how long, we email your site's admin before it takes effect.