Dynamiq privacy & data

Where we process personal data on behalf of a customer who is subject to GDPR or HIPAA, we act as a Data Processor or Business Associate (as applicable).

Account Information : When you sign up for an account or subscribe to our Services, we collect information such as your name, email address, billing details, and any other necessary fields.

This includes IP addresses, browser types, referring pages, and other device identifiers.

Communications : We may collect information when you contact us by email, support tickets, or other channels, including chat logs, feedback, or requests.

In cases where our Services process PHI on behalf of healthcare providers or other Covered Entities, we adhere to HIPAA requirements

To provide, maintain, troubleshoot, secure, and improve the Services.

To manage user accounts, process billing, and handle customer support.

To monitor, detect, and protect against fraudulent or malicious activities.

To analyze trends, usage, and activities in connection with our Services, in an anonymized or aggregated manner.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal obligations, contractual requirements, or legitimate business interests.

Google Workspace API data is retained only as long as necessary to provide the Services or to comply with applicable legal obligations.

In channels and group chats, these are shared as download links that expire after one hour.

If we transfer personal data outside of the European Economic Area (EEA) to countries that may not provide the same level of data protection as your home jurisdiction, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs)

Sub-processor List : We maintain a public list of the third-party sub-processors we engage to process personal data on our behalf.

our data processing is governed by contractual agreements (e.g., Data Processing Addendum, Business Associate Agreement ).

To request deletion of Microsoft Teams data, contact legal@getdynamiq.ai .

Right of Access : The right to request confirmation of whether we process your personal data and a copy of such data.

Right to Rectification : The right to request correction of inaccurate or incomplete data.

Right to Erasure (“Right to be Forgotten”) : The right to request the deletion of your personal data, subject to certain exceptions.

Right to Restrict Processing : The right to request the restriction of certain processing activities.

Right to Data Portability : The right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object : The right to object to processing of your personal data, including for direct marketing.

Right to Lodge a Complaint : If you are in the EU/EEA, you have the right to lodge a complaint with your local supervisory authority.

Google Workspace API data is never sold and is never used for advertising, marketing, profiling, or any unrelated secondary purpose.