Privacy at Dilly

Receipts. Not promises.

Trust is something you publish, not something you claim.

Most companies bury privacy in a 6,000-word legal document nobody reads. We took the opposite route. Every commitment we make about your data lives on its own page below, with the receipts attached. If we can't show the work, the promise was wrong and we change the page.

01 · The 6 Promises What you can hold us to. No selling. No AI training on your data. Recruiter visibility opt-in. One-click export, one-click delete. The list of fields we don't collect. Public diffs on every change. Read the promises → 02 · The dashboard Live numbers. Public. Government requests received. Deletion SLA. Recruiters banned for misuse. Last security audit. Warrant canary. Updated nightly. See the receipts → 03 · What we don't ask The fields not on Dilly. GPA. Ethnicity. Family income. Real-time location. Browsing history. The full list of data we intentionally never collect, and why. Read the list → 04 · How AI works Look behind the curtain. For each AI feature: which model is called, what data is sent, what is never sent, and confirmation that nothing trains anybody's model. Open the curtain → 05 · Your rights Buttons, not bullet points. Export everything. Delete everything. Pause recruiter visibility. See who has touched your data. Each right turned into a click. Find the buttons → 06 · Plain-English policy The policy in 1,400 words. Same content as the legal version, written so anyone can finish it in 6 minutes. TL;DR card on top. Legal version still on hellodilly.com/privacy. Read the policy → 07 · Open changelog Every change. Public. Append-only diff log. The day we add or remove a data practice, you read about it here in plain English. See the history → 08 · security.txt Found a vulnerability? Bug bounty contact, scope, response SLA, and the path to acknowledgment in our public hall of fame. Standard RFC 9116. Disclose responsibly →

"Privacy is a feature you can verify, or it is marketing."

The reason this site exists