Privacy Policy for Dynbox

Last Updated: June 19, 2025 (35d ago)

Your privacy is critically important to us. This Privacy Policy outlines how CODYA ENGINEERING, doing business as Dynbox ("we," "us," or "our"), collects, uses, shares, and protects your information when you use our website, software, and services (collectively, the "Service").

This policy is designed to help you understand your privacy rights and how we handle your data, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Information We Collect

We collect information in a few different ways to provide and improve our Service.

a. Information You Provide to Us:

  • Account Information: When you register for a Dynbox account, we collect personal information such as your name and email address. You may also voluntarily provide a profile picture.
  • Payment Information: For paid subscription plans, we use a third-party payment processor. We do not store your full credit card information, though we may retain subscription details and transaction history.
  • Communications: If you contact us directly for support or other inquiries, we may receive additional information about you, such as the contents of your message and any other information you choose to provide.

b. Information We Collect Automatically:

  • Usage Data: We automatically collect information about your interactions with our Service. This includes the features you use, the actions you take (like clicks), session duration, and general usage patterns.
  • Device and Connection Information: We collect information about the computer or mobile device you use to access our Service, including your IP address, operating system, browser type, and device identifiers.
  • Cookies and Tracking Technologies: We use cookies and similar technologies to operate and administer our Service, gather usage data, and improve your experience. You can control the use of cookies at the individual browser level.

c. Information Processed on Your Behalf (Your Content):

  • File Metadata: To provide the Service, we must process metadata from the files you connect to Dynbox. This includes file names, file types, creation and modification dates, file sizes, and folder structures. We store this metadata on our servers.
  • File Content: We do not access or store the actual content of your files unless you explicitly grant us permission to do so within the Service (e.g., by enabling content analysis for a specific file or folder). When permission is granted, we may process the content to generate summaries and embeddings for search and organizational purposes. You have full control over which files we can analyze.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide and Maintain the Service: To create your account, provide you with the features of your subscription plan, and operate our platform.
  • To Improve and Personalize the Service: To understand how our users interact with Dynbox, troubleshoot issues, develop new features, and personalize your experience. We use Sentry for error tracking and PostHog for product and web analytics to achieve this.
  • To Communicate With You: To respond to your support requests, send you service-related announcements (e.g., updates to our Terms or changes in your subscription), and, with your consent, send you marketing communications.
  • For Security and Fraud Prevention: To verify accounts, monitor for suspicious activity, and protect the security of our Service and our users.
  • To Comply with Legal Obligations: To enforce our Terms of Service and to comply with applicable laws and regulations.

3. How We Share Your Information

We do not sell your personal information. We may share your information with third-party service providers (sub-processors) who help us operate our business, but only for the purposes outlined in this policy.

  • AI Service Providers: When you explicitly permit content analysis on your files, the relevant content or metadata may be securely sent to our AI partners, such as Google Gemini Generative AI and Voyage Embedding API, for processing. As detailed in our Limited Use Policy below, our agreements with these providers strictly limit the use of your data.
  • Analytics and Error Tracking: We share usage and device data with PostHog (for product analytics) and Sentry (for error tracking) to help us improve the Service.
  • Data Hosting: Your account information and all file metadata are securely hosted with Neon on database servers located in Frankfurt, Germany (EU).
  • Legal Compliance: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect our rights, or prevent fraud.
  • Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in control.

4. Limited Use Policy for AI Processing

To be unequivocally clear and to comply with Google's API Services User Data Policy, including the Limited Use requirements, Dynbox makes the following commitments regarding data obtained from Google APIs:

No Use for AI/ML Model Training: User data, including any content or metadata from files accessed through Google APIs, is never used to develop, improve, or train generalized AI and/or ML models.

Purpose-Bound Processing: When you explicitly authorize AI-powered features (such as content analysis), we process your data for the sole purpose of providing that feature to you. This processing is performed under strict technical and contractual safeguards.

Third-Party AI Providers: We use third-party AI services like Google Gemini to provide specific features. Our contractual agreements with these providers strictly prohibit them from using your data for their own purposes, such as training their models. Your data is only processed to fulfill your request and is not retained or logged by them for other uses.

5. Data Storage, Security, and Transfers

  • Data Security: We implement robust technical and organizational measures to protect your information, including encryption of data in transit, strict access controls to our systems, and regular security audits.
  • Data Storage Location: As a company based in France, we prioritize storing your data within the European Union. Your account data and metadata are stored on servers in Frankfurt, Germany.
  • International Transfers: While your primary data is stored in the EU, some of our third-party service providers may operate in other countries. When we transfer your information outside of the European Economic Area (EEA), we ensure that appropriate safeguards, such as Standard Contractual Clauses, are in place to protect your data.

6. Your Data Rights and Choices

In accordance with GDPR and other privacy laws, you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you by emailing hello@dynbox.app .
  • Right to Rectification: You can modify your account information at any time through your account settings.
  • Right to Erasure (Right to be Forgotten): You can permanently delete your account and all associated data from your account dashboard.
  • Right to Data Portability: You can request a copy of your data in a machine-readable format.
  • Right to Object to Processing: You have the right to object to us processing your personal data for certain purposes, such as direct marketing.
  • Marketing Opt-Out: You can opt-out of receiving marketing emails from us at any time by clicking the "unsubscribe" link in the footer of our emails.

7. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the new policy on our website or by sending you an email at least 30 days before the changes take effect.

9. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy or our data practices, please contact us.

CODYA ENGINEERING
12 le Hallay, Boufféré, 85600 Montaigu-Vendée, France
Email for Privacy Inquiries: legal@dynbox.app 
General Support: hello@dynbox.app