Privacy Notice

Depending on the circumstances, DinamisAI may act as either a Data Controller or a Data Processor.

DinamisAI generally acts as a Data Controller for Personal Data relating to our own business operations, including account administration, billing, customer support, security, website analytics, and service usage.

When a Customer uses the Services to process Personal Data relating to its customers, prospects, employees, or other individuals ("Customer Data"), the Customer generally acts as the Data Controller and DinamisAI acts as a Data Processor on the Customer's behalf.

In those circumstances, DinamisAI processes Customer Data in accordance with the Customer's instructions and applicable agreements.

Depending on how the Services are used, we may process the following categories of Personal Data:

Account and Business Information

This may include:

• name;
• email address;
• phone number;
• company or organization;
• role or job title;
• account and subscription information; and
• authentication and account security information.

Customer Data

Customers may provide or connect information to the Services, including contact and business information, communications, records, files, and other information submitted or processed through the Services.

Service, Device, and Usage Information

We may automatically collect information relating to the use of our websites and Services, including:

• device and browser information;
• IP address and approximate location derived from network information;
• website and service interactions;
• pages visited and referral information;
• login and session information;
• logs and diagnostic information; and
• security-related information.

Commercial and Support Information

We may process information relating to enquiries, customer support, subscriptions, billing, transactions, contracts, and feedback.

We may collect Personal Data:

• directly from you;
• from Customers using the Services;
• automatically when you use our websites or Services;
• through communications conducted using the Services;
• from services connected or authorized by the Customer;
• through cookies and similar technologies; and
• from other lawful sources.

Where DinamisAI acts as a Data Processor, the relevant Customer generally determines how and why the Personal Data is collected and used.

We may process Personal Data to:

• provide, operate, maintain, and support the Services;
• enable functionality requested by Customers;
• manage accounts, subscriptions, billing, and customer relationships;
• understand how our websites and Services are used;
• measure and improve website and service performance;
• maintain security and prevent fraud, abuse, and unauthorized access;
• troubleshoot, analyze, and improve the Services;
• communicate with Customers and users;
• enforce our agreements and policies; and
• comply with applicable laws and legal obligations.

Where DinamisAI acts as a Data Processor, Customer Data is processed for purposes instructed or authorized by the relevant Customer, except where otherwise required by law.

Where DinamisAI acts as a Data Controller, we process Personal Data based on one or more lawful bases available under applicable law, which may include:

• performance of a contract;
• legitimate interests;
• consent, where applicable;
• compliance with legal obligations; and
• other lawful bases permitted by applicable law.

Our legitimate interests may include operating and improving our websites and Services, understanding how they are used, maintaining security, preventing misuse, and managing our business relationships, where those interests are not overridden by the rights and interests of affected individuals.

Where processing is based on consent, consent may be withdrawn as permitted by applicable law.

Where DinamisAI acts as a Data Processor, the relevant Customer is generally responsible for determining the appropriate lawful basis for processing Customer Data.

We use cookies and similar technologies to operate our websites and understand how they are used.

We use Google Analytics to measure website usage and help us understand and improve the performance, content, and effectiveness of our websites.

Google Analytics may process information such as:

• pages viewed;
• interactions with our website;
• referral and traffic source information;
• device and browser information;
• approximate geographic information; and
• identifiers associated with analytics cookies or similar technologies.

Where permitted by applicable law, we process this information based on our legitimate interests in operating, measuring, understanding, and improving our websites and Services.

Analytics information is not intended to identify you directly.

You can control, block, or delete cookies through your browser or device settings. Restricting cookies may affect how certain website functionality or analytics operate.

If our use of analytics changes materially, or applicable law requires a different legal basis or additional choices, we will update our practices and this Privacy Notice accordingly.

The Services may use artificial intelligence and automated technologies to provide certain functionality requested by Customers.

Personal Data may be processed where necessary to provide such functionality.

Where DinamisAI engages in automated decision-making that is subject to specific disclosure or Data Subject rights under applicable law, DinamisAI will provide the information and protections required by that law.

DinamisAI may use aggregated or de-identified information to operate, secure, analyze, and improve the Services.

DinamisAI does not sell Customer Data.

We may disclose Personal Data where reasonably necessary:

• to service providers supporting the operation and delivery of the Services;
• to analytics providers, including Google, for website measurement and analytics;
• to services connected or authorized by the Customer;
• to professional advisers;
• in connection with a merger, acquisition, financing, restructuring, or similar corporate transaction;
• where required by applicable law, legal process, or governmental authority; or
• where reasonably necessary to protect the rights, security, or integrity of DinamisAI, our Customers, users, or others.

Parties processing Personal Data on our behalf are subject to appropriate contractual and data protection obligations where required.

Personal Data may be processed in countries other than the country in which it was originally collected.

This may include processing by service providers used to support our Services and website analytics.

Where required by applicable law, DinamisAI applies appropriate safeguards or other lawful mechanisms for international transfers of Personal Data.

DinamisAI retains Personal Data only for as long as reasonably necessary for the purposes for which it is processed, including to:

• provide the Services;
• comply with Customer instructions;
• understand and improve our websites and Services;
• maintain appropriate business and security records;
• comply with legal obligations; and
• establish, exercise, or defend legal claims.

Retention periods may vary depending on the nature of the information, applicable settings, contractual requirements, and legal obligations.

When Personal Data is no longer required, it may be deleted, anonymized, or otherwise handled in accordance with applicable law and contractual requirements.

DinamisAI maintains reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, use, disclosure, alteration, loss, or destruction.

However, no system or method of electronic transmission can be guaranteed to be completely secure.

If a Personal Data breach occurs, DinamisAI will take appropriate measures and provide notifications where required by applicable law.

Depending on your location and applicable law, you may have rights relating to your Personal Data, including the right to:

• obtain information about how your Personal Data is processed;
• access your Personal Data;
• correct inaccurate or incomplete Personal Data;
• request deletion of Personal Data;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing where applicable;
• exercise rights relating to certain automated decision-making;
• request a portable copy of your Personal Data; and
• submit a complaint or exercise other rights available under applicable law.

These rights may be subject to applicable conditions, limitations, and exceptions.

DinamisAI may request information reasonably necessary to verify your identity before processing a request.

If DinamisAI processes your Personal Data on behalf of one of our Customers, that Customer generally controls the Personal Data.

You should ordinarily direct privacy requests to the organization with which you have a relationship.

If DinamisAI receives a request relating to Customer Data, we may refer the request to the relevant Customer and assist the Customer as required by applicable law and our agreement with that Customer.

We may update this Privacy Notice from time to time to reflect changes to our Services, practices, technologies, or applicable legal requirements.

If we make material changes, we will provide appropriate notice where required by applicable law.

The latest revision date will appear at the top of this Privacy Notice.

If you have questions about this Privacy Notice or wish to exercise privacy rights relating to Personal Data for which DinamisAI acts as Data Controller, please contact:

DinamisAI

PT Spesica Lintas Maxima

Indonesia

Email: legal@dinamis.ai