Privacy Notice

Depending on the circumstances, DinamisAI may act as either a Data Controller or a Data Processor.

DinamisAI generally acts as a Data Controller for Personal Data relating to our own business operations, including account administration, billing, customer support, security, website analytics, and service usage.

When a Customer uses the Services to process Personal Data relating to its customers, prospects, employees, or other individuals ("Customer Data"), the Customer generally acts as the Data Controller and DinamisAI acts as a Data Processor on the Customer's behalf.

In those circumstances, DinamisAI processes Customer Data in accordance with the Customer's instructions and applicable agreements.

Depending on how the Services are used, we may process the following categories of Personal Data:

Account and Business Information

This may include:

• name;
• email address;
• phone number;
• company or organization;
• role or job title;
• account and subscription information; and
• authentication and account security information.

Customer Data

Customers may provide or connect information to the Services, including contact and business information, communications, records, files, and other information submitted or processed through the Services.

Service, Device, and Usage Information

We may automatically collect information relating to the use of our websites and Services, including:

• device and browser information;
• IP address and approximate location derived from network information;
• website and service interactions;
• pages visited and referral information;
• login and session information;
• logs and diagnostic information; and
• security-related information.

Commercial and Support Information

We may process information relating to enquiries, customer support, subscriptions, billing, transactions, contracts, and feedback.

We may collect Personal Data:

• directly from you;
• from Customers using the Services;
• automatically when you use our websites or Services;
• through communications conducted using the Services;
• from services connected or authorized by the Customer;
• through cookies and similar technologies; and
• from other lawful sources.

Where DinamisAI acts as a Data Processor, the relevant Customer generally determines how and why the Personal Data is collected and used.

We may process Personal Data to:

• provide, operate, maintain, and support the Services;
• enable functionality requested by Customers;
• manage accounts, subscriptions, billing, and customer relationships;
• understand how our websites and Services are used;
• measure and improve website and service performance;
• maintain security and prevent fraud, abuse, and unauthorized access;
• troubleshoot, analyze, and improve the Services;
• communicate with Customers and users;
• enforce our agreements and policies; and
• comply with applicable laws and legal obligations.

Where DinamisAI acts as a Data Processor, Customer Data is processed for purposes instructed or authorized by the relevant Customer, except where otherwise required by law.

Where DinamisAI acts as a Data Controller, we process Personal Data based on one or more lawful bases available under applicable law, which may include:

• performance of a contract;
• legitimate interests;
• consent, where applicable;
• compliance with legal obligations; and
• other lawful bases permitted by applicable law.

Our legitimate interests may include operating and improving our websites and Services, understanding how they are used, maintaining security, preventing misuse, and managing our business relationships, where those interests are not overridden by the rights and interests of affected individuals.

Where processing is based on consent, consent may be withdrawn as permitted by applicable law.

Where DinamisAI acts as a Data Processor, the relevant Customer is generally responsible for determining the appropriate lawful basis for processing Customer Data.

We use cookies and similar technologies to operate our websites and understand how they are used.

We use Google Analytics to measure website usage and help us understand and improve the performance, content, and effectiveness of our websites.

Google Analytics may process information such as:

• pages viewed;
• interactions with our website;
• referral and traffic source information;
• device and browser information;
• approximate geographic information; and
• identifiers associated with analytics cookies or similar technologies.

Where permitted by applicable law, we process this information based on our legitimate interests in operating, measuring, understanding, and improving our websites and Services.

Analytics information is not intended to identify you directly.

You can control, block, or delete cookies through your browser or device settings. Restricting cookies may affect how certain website functionality or analytics operate.

If our use of analytics changes materially, or applicable law requires a different legal basis or additional choices, we will update our practices and this Privacy Notice accordingly.

The Services may use artificial intelligence and automated technologies to provide certain functionality requested by Customers.

Personal Data may be processed where necessary to provide such functionality.

DinamisAI uses third-party AI service providers to support certain AI-powered features. Personal Data and Customer Data may be processed by such providers only as necessary to provide the relevant user-facing functionality, subject to applicable contractual and data protection requirements.

Where DinamisAI engages in automated decision-making that is subject to specific disclosure or Data Subject rights under applicable law, DinamisAI will provide the information and protections required by that law.

DinamisAI may use aggregated or de-identified information to operate, secure, analyze, and improve the Services, except where such use would be inconsistent with the Google API Services User Data Policy or other applicable third-party data-use restrictions. See Google Workspace API Data and Limited Use.

DinamisAI does not sell Customer Data.

We may disclose Personal Data where reasonably necessary:

• to service providers supporting the operation and delivery of the Services;
• to analytics providers, including Google, for website measurement and analytics;
• to services connected or authorized by the Customer;
• to professional advisers;
• in connection with a merger, acquisition, financing, restructuring, or similar corporate transaction;
• where required by applicable law, legal process, or governmental authority; or
• where reasonably necessary to protect the rights, security, or integrity of DinamisAI, our Customers, users, or others.

Parties processing Personal Data on our behalf are subject to appropriate contractual and data protection obligations where required.

Personal Data may be processed in countries other than the country in which it was originally collected.

This may include processing by service providers used to support our Services and website analytics.

Where required by applicable law, DinamisAI applies appropriate safeguards or other lawful mechanisms for international transfers of Personal Data.

DinamisAI retains Personal Data only for as long as reasonably necessary for the purposes for which it is processed, including to:

• provide the Services;
• comply with Customer instructions;
• understand and improve our websites and Services;
• maintain appropriate business and security records;
• comply with legal obligations; and
• establish, exercise, or defend legal claims.

Retention periods may vary depending on the nature of the information, applicable settings, contractual requirements, and legal obligations.

When Personal Data is no longer required, it may be deleted, anonymized, or otherwise handled in accordance with applicable law and contractual requirements.

DinamisAI maintains reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, use, disclosure, alteration, loss, or destruction.

However, no system or method of electronic transmission can be guaranteed to be completely secure.

If a Personal Data breach occurs, DinamisAI will take appropriate measures and provide notifications where required by applicable law.

Depending on your location and applicable law, you may have rights relating to your Personal Data, including the right to:

• obtain information about how your Personal Data is processed;
• access your Personal Data;
• correct inaccurate or incomplete Personal Data;
• request deletion of Personal Data;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing where applicable;
• exercise rights relating to certain automated decision-making;
• request a portable copy of your Personal Data; and
• submit a complaint or exercise other rights available under applicable law.

These rights may be subject to applicable conditions, limitations, and exceptions.

DinamisAI may request information reasonably necessary to verify your identity before processing a request.

If DinamisAI processes your Personal Data on behalf of one of our Customers, that Customer generally controls the Personal Data.

You should ordinarily direct privacy requests to the organization with which you have a relationship.

If DinamisAI receives a request relating to Customer Data, we may refer the request to the relevant Customer and assist the Customer as required by applicable law and our agreement with that Customer.

We may update this Privacy Notice from time to time to reflect changes to our Services, practices, technologies, or applicable legal requirements.

If we make material changes, we will provide appropriate notice where required by applicable law.

The latest revision date will appear at the top of this Privacy Notice.

When an organization or an authorized member connects Google services to DinamisAI, or provides Google Drive content to DinamisAI, DinamisAI receives data through Google APIs. This section explains what we receive, how it is used, and the additional restrictions that apply to it.

What we receive

• the Google account email address and account identifier of the member who connects, used to label the connection and to identify the organizer of a meeting;
• calendar events that DinamisAI creates on that member's own calendar at their request, together with the video meeting link attached to those events;
• attendance information for meetings DinamisAI created, limited to participant display names and join and leave times, used for attendance, join-time, and session-duration verification;
• Google Drive content that an organization or an authorized user intentionally connects or selects for use as a knowledge source in DinamisAI, together with basic file details such as the file name and the time it was last modified.

Google Drive content is accessed only within the access permissions authorized by that organization or user. DinamisAI does not request access to a member's mailbox, contacts, or photos. Google user data is never sold, never used for advertising, and never transferred to a data broker.

AI service providers

DinamisAI uses third-party AI service providers for certain AI-powered features. Google Workspace data is only processed by such providers where necessary for the specific user-facing functionality requested by the customer.

Google Calendar and Google Meet data used for scheduling, attendance verification, join-time verification, and session-duration verification is processed by DinamisAI for those purposes and is not provided to AI service providers.

Google Drive content may be processed by third-party AI service providers only when it has been intentionally connected or selected for use as knowledge-base content in DinamisAI.

Human access

Our personnel do not read Google user data unless the user has given explicit consent or affirmative agreement to access specific data, access is necessary for security or abuse investigation, access is required by law, or the data (including derivations) has been aggregated and anonymized and is used for internal operations in accordance with applicable law.

Retention and withdrawing access

A member can disconnect their Google account at any time from the Integrations screen in DinamisAI, or revoke access directly at myaccount.google.com/permissions. Disconnecting deletes the stored authorization.

Content imported into a knowledge base remains under the organization's control. Deleting an imported document removes it from the knowledge base: its stored content and its search index entries are deleted, so it is no longer searchable or available to AI-assisted features.

Limited Use

The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

DinamisAI does not use, or permit third-party AI providers to use, raw or derived Google Workspace API data to develop, improve, or train generalized or non-personalized AI/ML models.

See the Google API Services User Data Policy.

If you have questions about this Privacy Notice or wish to exercise privacy rights relating to Personal Data for which DinamisAI acts as Data Controller, please contact:

DinamisAI

PT Spesica Lintas Maxima

Indonesia

Email: legal@dinamis.ai