Privacy policy

Last updated 11 November 2026

Who we are

This notice covers diald.me and the diald app in ChatGPT. Firmament AI, Rhijnspoorplein 10-38, 1018 TX Amsterdam, the Netherlands, operates diald. Contact support@getfirmament.com with privacy questions.

What diald receives

• Account information. WorkOS handles Google and email sign-in. We use the verified identity and email address to provide your account and saved watches.
• Watch choices. We receive the watch searches, filters and tool inputs needed to show your results. We store the watches you add to your guest or account list.
• Usage and reliability. We record views, skips, saves, removals, filters, review interactions, store-link clicks, sign-in steps, errors and request durations. Search diagnostics include recognized filter values, result counts, ordered watch identifiers and the catalog version, linked to the browsing session. Free-text search queries are not stored. A random browser identifier helps us measure return visits; verified account IDs identify signed-in usage. Product events exclude emails, sign-in codes, tokens, full chat text and raw IP addresses.
• Feedback. ChatGPT can send one feedback message when you report a problem or suggestion about diald. We ask it to exclude full conversations, credentials and unrelated personal information. We store the message it sends.
• Support. If you email us, we receive your message and contact details so we can respond.

Why we use it

We use account and list data to provide the features you request. We use product events and feedback to understand engagement, diagnose problems and improve diald. Security and service logs help us operate and protect the service.

How long we keep it

• Guest watch lists and browsing history expire after 24 hours of inactivity.
• Account saves stay with your account across chats. You can remove saved watches in the app or contact us about account deletion.
• Raw product events are retained for 90 days.
• Feedback is retained for 90 days. You can contact us about personal information included in feedback.

Cookies

The app uses secure cookies for sign-in and guest-list ownership. A short-lived Google sign-in cookie lasts up to 10 minutes and checks that the authentication window belongs to the browser that started sign-in. The account session can last 30 days; the guest-list cookie lasts 24 hours from activity. A separate random browser cookie lasts 90 days from activity to measure returning usage. The website itself adds no analytics script or tracking cookie. Browser settings can block or clear cookies; this can affect sign-in and list recovery.

Services we use

WorkOS provides authentication. Railway hosts the app and its PostgreSQL databases. Cloudflare provides domain and network services. These providers may process technical connection information needed to deliver and protect the service. Processing can take place outside your country.

ChatGPT is provided by OpenAI. Your chats, uploaded photos and image generation are handled under your ChatGPT settings and OpenAI’s policies. The diald server does not receive your uploaded try-on photo through the Try-on feature. External watch stores handle their own websites, checkout and customer data.

Your choices and rights

You can use diald without an account, remove watches from Saved and sign out. For access, correction, deletion, restriction, portability or an objection concerning your personal data, email support@getfirmament.com. Rights depend on the law that applies to you. We may need to verify a request. You can also complain to your local data protection authority, including the Dutch Autoriteit Persoonsgegevens.

Changes

We will update the date above when this notice changes.