Privacy at Dilly

Receipts. Not promises.

Trust is something you publish, not something you claim.

Dilly only works if one profile can power many surfaces without turning into hidden surveillance. This site is where we show exactly how that system is bounded, audited, and controlled. If we cannot show the work, the promise was wrong and we change the page.

01 · The 6 Promises What you can hold us to. No selling. No AI training on your data. Recruiter visibility opt-in. One-click export, one-click delete. The list of fields we don't collect. Public diffs on every change. Read the promises → 02 · The dashboard Live numbers. Public. Government requests received. Deletion SLA. Recruiters banned for misuse. Last security audit. Warrant canary. Updated nightly. See the receipts → 03 · What we don't ask The fields not on Dilly. GPA. Ethnicity. Family income. Real-time location. Browsing history. The full list of data we intentionally never collect, and why. Read the list → 04 · How AI works Look behind the curtain. For each AI feature: which model is called, what data is sent, what is never sent, and confirmation that nothing trains anybody's model. Open the curtain → 05 · Your rights Buttons, not bullet points. Export everything. Delete everything. Pause recruiter visibility. See who has touched your data. Each right turned into a click. Find the buttons → 06 · Privacy policy The legal version. The full plain-English policy at privacy.hellodilly.com/policy. Names every third party. Documents what we collect. Lists US state-by-state rights. Read the policy → 07 · Open Terms Every change. Public. Append-only diff log. The day we add or remove a data practice, you read about it here in plain English. See the history → 08 · security.txt Found a vulnerability? Bug bounty contact, scope, response SLA, and the path to acknowledgment in our public hall of fame. Standard RFC 9116. Disclose responsibly →

"Privacy is a feature you can verify, or it is marketing."

The reason this site exists