GDPR Commitment

Last Updated: March 28, 2026

Diana Intelligence Corp. (“Diana”) is committed to compliance with the General Data Protection Regulation (GDPR) for all users located in the European Economic Area (EEA) and the United Kingdom.

Our Commitment

Diana processes personal data in accordance with GDPR principles. We act as a data processor on behalf of our customers (the data controllers) when handling data transmitted through Slack workspaces.

Lawful Basis for Processing

We process personal data under the following lawful bases:

Performance of a Contract: Processing necessary to deliver the Diana service as agreed when you install the application.
Legitimate Interests: Processing necessary for service improvement, security, and fraud prevention, where these interests are not overridden by your data protection rights.

We do not rely on consent as a lawful basis for core service processing. We do not process data for advertising or profiling purposes.

Data Subject Rights

If you are located in the EEA or UK, you have the following rights under GDPR:

Right	Description	How to Exercise
Right of Access	Request a copy of the personal data we hold about you	Email [email protected]
Right to Rectification	Request correction of inaccurate personal data	Email [email protected]
Right to Erasure	Request deletion of your personal data	Email [email protected] or uninstall Diana
Right to Restriction	Request restriction of processing in certain circumstances	Email [email protected]
Right to Data Portability	Receive your data in a structured, machine-readable format	Email [email protected]
Right to Object	Object to processing based on legitimate interests	Email [email protected]

We respond to all data subject requests within 30 days as required by GDPR. If we need additional time due to complexity, we will notify you within the initial 30-day period.

Data Processing Agreements

We maintain Data Processing Agreements (DPAs) with all sub-processors that handle personal data on our behalf. These agreements include:

Standard Contractual Clauses (SCCs) where applicable for international data transfers
Obligations to implement appropriate technical and organizational security measures
Restrictions on processing data beyond what is instructed
Requirements for breach notification

Our Commitment

Lawful Basis for Processing

Data Subject Rights

Data Processing Agreements

International Data Transfers