Privacy

Last updated Feb, 9th 2025

Retention of Customer Data

DinMo retains customer data only for as long as necessary to fulfill the purpose of processing, ensuring minimal data storage while maintaining service functionality.

Customer Data Type	Retention Period	Notes
Customer Data	< 8 hours (typically)	We purge customer data as soon as it is successfully written to the destination, except in the cases outlined below.
Temporary Data	< 24 hours (typically)	Some data integration processes require ephemeral storage (e.g., event logs, transformation logs). Data is deleted as soon as possible, though in rare cases, retention may exceed 24 hours.
Customer Access Keys	Duration of service	Customer database credentials and OAuth tokens are stored securely using a key management system with hardware security module (HSM) backing.
Customer Metadata	Duration of service	Configuration details, table/column names, and sync settings are retained to power the DinMo platform.

Data Purging Conditions

DinMo automatically purges customer data as soon as it is written to the designated destination. However, in the following cases, data may be retained for up to 30 days before automatic deletion:

• Destination Outage: If your marketing destination (CRM, ad platform, or database) is unavailable, we temporarily retain the data to prevent sync failures. Once your system is restored, we complete the sync and delete the data.

• Schema Processing for Data Blocking & Hashing: If you configure data blocking or column hashing before an initial sync, we may temporarily store schema metadata until the full schema is fetched and approved.

---

DinMo Data Residency

DinMo allows customers to choose the cloud platform where the DinMo Sync Service is deployed. Customers can select between Amazon Web Services (AWS) or Google Cloud Platform (GCP) for their data processing, ensuring compliance with regional data protection laws (GDPR, UK DPA, etc.).

Regional Processing Locations

All data processing occurs either within the customer's data warehouse (e.g., Google BigQuery, Snowflake, or other connected sources) or within DinMo’s services deployed on the selected cloud infrastructure.

All DinMo servers are located within the European Union (EU), ensuring full compliance with GDPR and regional data protection laws.

Default Processing Location: If a customer does not explicitly choose a region, data is processed in the European Union (EU) by default.

Cloud Provider Selection

Plan	Choice of Geography	Choice of Cloud Provider	Choice of Cloud Region
Starter / Free / Standard	❌ (EU only)	❌ (Google Cloud only)	❌
Business	✅	✅ (AWS, GCP)	❌
Enterprise	✅	✅	✅

---

Sub-Processor Management

DinMo works with carefully selected sub-processors to ensure optimal performance and security. These third-party vendors provide infrastructure, authentication, and analytics services.

What is a Sub-Processor?

A sub-processor is a third-party company that processes Personal Data on behalf of DinMo. These entities play a role in enabling our services but must adhere to strict security and privacy obligations.

List of Sub-Processors

Sub-Processor	Purpose	Processing Location
Google Cloud Platform (GCP)	Cloud infrastructure (compute, storage, security)	EEA
Amazon Web Services (AWS)	Cloud infrastructure (compute, storage, security)	EEA
Firebase, Google, Inc.	Authentication & access management	EEA
Datadog, Inc.	System monitoring & security	EEA

AI Sub-Processors (If Applicable)

AI Sub-Processor	Purpose	Processing Location
OpenAI, LLC	Natural language processing & AI automation	Global

DinMo ensures that all sub-processors comply with GDPR and other relevant regulations through Data Processing Agreements (DPAs) and security audits.

Managing Sub-Processor Changes

• DinMo notifies customers of any new sub-processors before engagement.

• Customers can subscribe to sub-processor change alerts by contacting [e-mail].

---

Your Data, Your Control

DinMo provides complete transparency and control over your data. Customers can:

• Choose data residency options (EU, UK, US, etc.).

• Request data deletion at any time.

• Access security reports on demand.

For further details on data privacy, security, or compliance, reach out to [e-mail].

---

Contact Information

If you have questions about data retention, residency, or sub-processors, you can contact us at:

📧 Email: [e-mail] 🛡️ Data Protection Officer (DPO): Alexandra Augusti, [e-mail]