Privacy Policy

Last updated: 9 October 2026

This policy explains how DYNAM Consulting handles personal data for its websites, assistants, connected services and desktop software. DYNAM Consulting is registered in Ireland. Contact info@dynamconsulting.com with a privacy question or request.

1. Who is responsible

DYNAM determines how account administration, service security and its own customer support are managed. For those activities, DYNAM is the data controller. Where a business customer determines the purposes of processing, DYNAM may act as its data processor. The applicable data-processing agreement must define those roles and instructions.

If a business provides your information, contact that business about its instructions and purposes. You can also contact us. We will direct or handle the request as the applicable role requires.

2. Information we handle

Depending on the features you use, we handle:

Account details, including names, email addresses, contact numbers and workspace membership.
Profile information, including business details and assistant preferences.
Verification, consent, permission and connection records.
Instructions, conversations, files and other content you give the assistant.
Information retrieved from services or devices you authorise it to access.
Assistant outputs, task results and records of actions.
Call details and any audio, transcripts or recordings collected by the call feature.
Device, network, usage, error and security records needed to operate the service.
Billing references and records needed to manage a paid service, where applicable.

You may provide information about other people. You must have authority to do so. Avoid providing sensitive information that the task does not need. Sensitive or regulated use cases may need a separate agreement and suitable controls.

3. Where information comes from

We receive information from you, your authorised workspace users and the devices or services you connect. Authentication and messaging providers supply information needed to verify access and deliver communications. The service also generates technical and task records during use. The connected account and the permissions you grant determine what an integration can retrieve.

4. Why we use information

We use information to establish accounts, verify access and supply the service you request. This includes preparing responses, completing authorised tasks and routing messages to the correct assistant. We also use relevant information to provide support, investigate failures and protect accounts. Billing and legal records support payment administration and legal obligations.

For processing governed by the GDPR, the applicable legal bases may include:

Contract: processing necessary to supply a service you have contracted for, or steps you request before that contract.
Legitimate interests: proportionate security, abuse prevention and service administration, subject to your rights and expectations.
Legal obligation: processing required by applicable law.
Consent: optional processing that requires your choice, such as a separately offered messaging programme.

We must not use consent to justify every activity indiscriminately. Where consent applies, you can withdraw it without changing the lawfulness of earlier processing. If sensitive data needs an additional legal condition, that condition must be established before the relevant processing.

5. AI processing and learning

An AI provider may process instructions and relevant task information to produce a response or perform a task. The information supplied depends on the model, integration and task. Model providers' retention and use of data depend on their contracts and the account settings used.

Accepting DYNAM's service terms does not itself grant blanket permission to train models on your private content. This statement is not a claim that every provider stores no data or performs no training. A permitted purpose, suitable legal basis and appropriate disclosure are still required.

6. Providers and other recipients

We use service providers for authentication, hosting, databases, communications, integrations and AI processing. Depending on the feature, these can include Clerk, Vercel, DigitalOcean, Supabase, Twilio, Meta WhatsApp and OpenRouter. The selected model provider and connection provider may also process relevant task information.

An authorised task may send information to a person or service you instruct the assistant to contact. That recipient may process the information under its own terms. We may also disclose information where law requires it or to address a lawful security or legal claim. Any disclosure must have an applicable legal basis.

We do not sell or share mobile numbers, SMS opt-in records or messaging consent for third-party marketing. Messaging providers may process them as needed to operate the programme.

7. Connected services and local devices

Connecting a service grants the permissions shown in its authorisation process. Pairing a desktop device does not automatically permit every local capability. Enabled permissions can expose files, browser content or command results needed for a task. Only connect services and devices that you are authorised to use.

Revoking a connection stops new access once the revocation takes effect. It does not undo messages sent, erase third-party records or automatically delete information already copied into a task record. You can separately request deletion of information held by DYNAM. The provider's own access controls can also be used to revoke access.

8. Calls and messages

Requested calls may use an AI assistant. Where audio or transcripts are collected, the call notice must describe that collection and obtain any consent required. We use the resulting information for the stated call purpose and relevant service support.

Account verification and optional service-message consent are separate. Starting a conversation does not grant unlimited permission for unrelated future messages. The SMS and Messaging Terms explain requests, notifications, charges and opt-out methods.

9. Storage locations and international transfers

Providers may process information in countries outside Ireland or the country where you live. Where transfer restrictions apply, the transfer must use an applicable legal mechanism. This may be an adequacy decision or contractual safeguards, depending on the destination and provider. Contact us for information about the mechanism and safeguards that apply to your data.

10. Retention and deletion

We keep information for the purpose that requires it, rather than for an unlimited period by default. Relevant factors include the account's use, task history, security needs, dispute periods and legal record duties. Consent and suppression records may need to remain so we can honour your communication choices.

Account closure does not instantly erase backups or records that must lawfully be retained. Disconnecting an integration is different from deleting its past task records. Contact us to request access, correction or deletion. We will explain any lawful restriction that prevents the requested deletion.

11. Cookies and similar storage

Authentication and session features can use cookies or similar device storage. Those mechanisms help maintain sign-in and service operation. Any optional analytics or advertising technology must be described and handled under the applicable consent rules.

12. Your rights

Depending on the law that applies, you can ask to access, correct, delete or obtain a portable copy of your data. You may also have rights to restrict or object to processing and to withdraw consent. These rights have legal conditions and exceptions. We may request proportionate information to verify your identity. We respond within the time limits set by applicable law.

You can complain to Ireland's Data Protection Commission or another competent regulator. Contacting DYNAM first is helpful but is not a condition for making a complaint. Where applicable law gives additional rights, this policy does not remove them.

13. Automated decisions and sensitive information

AI-generated content is not necessarily a legally significant automated decision. The role and effect of the actual feature determine what requirements apply. Do not use a general assistant to decide someone's eligibility for a sensitive or regulated service without suitable authorisation and controls.

14. Security and changes

We use access controls and other safeguards appropriate to the service. No online service can eliminate every security risk. Protect your own accounts and only grant access needed for your tasks.

We update this policy when our practices change. Material changes must be explained using a suitable notice. Where law requires a new choice or consent, a policy update alone does not provide it.

15. Contact

Controller contact: DYNAM Consulting, Ireland · info@dynamconsulting.com. Read the Terms of Service and SMS and Messaging Terms.