Privacy Policy

Last Updated: August 25, 2026

Effective Date: August 25, 2026

1. Introduction

Dynamanic LLC ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CaseLens (the "Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, job title, phone number
• Billing Information: Payment method, billing address (processed by our payment provider)
• Customer Data: Documents and data you upload to the Service
• Communications: Correspondence with our support team

2.2 Information Collected Automatically

• Usage Data: Features used, actions taken, time spent
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed
• Cookies and Similar Technologies: Session cookies, analytics cookies

2.3 Information from Third Parties

• Single Sign-On (SSO) providers
• Integration partners (with your consent)

3. How We Use Your Information

We use collected information to:

• Provide the Service: Process documents, enable search and review, generate reports
• Improve the Service: Analyze usage patterns, develop new features
• Communicate with You: Send service notifications, respond to inquiries
• Ensure Security: Detect fraud, prevent unauthorized access
• Comply with Law: Meet legal obligations, respond to legal requests
• Billing: Process payments, send invoices

4. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contract Performance: To provide the Service you subscribed to
• Legitimate Interests: To improve our Service and protect our business
• Legal Obligation: To comply with applicable laws
• Consent: For optional features like marketing communications

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

Third parties that help us provide the Service:
- Cloud infrastructure providers
- Payment processors
- Analytics providers
- Customer support tools

5.2 Legal Requirements

When required by law or to:
- Comply with legal process
- Protect our rights
- Prevent fraud or security threats

5.3 Business Transfers

In connection with a merger, acquisition, or sale of assets

5.4 With Your Consent

When you explicitly authorize sharing

6. International Data Transfers

We may transfer data outside your country. For transfers from the EEA:
- We use Standard Contractual Clauses (SCCs)
- We ensure adequate protection measures
- We comply with GDPR requirements

7. Data Security

We implement robust security measures:

• Encryption: AES-256 encryption at rest, TLS 1.3 in transit
• Access Controls: Role-based access, multi-factor authentication
• Monitoring: Automated security monitoring with tamper-evident audit logging
• Audits: Regular internal security assessments; controls aligned to the SOC 2 Type II framework (independent audit not yet completed)
• Incident Response: Documented procedures for security incidents

8. Data Retention

• Account Data: Retained while your account is active, plus 90 days after termination
• Customer Data: Deleted within 90 days after subscription termination
• Logs and Analytics: Retained for 12 months
• Billing Records: Retained as required by law (typically 7 years)

9. Your Rights

9.1 For All Users

• Access: Request a copy of your data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format

9.2 Additional Rights (EEA/GDPR)

• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Automated Decisions: Request human review of automated decisions
• Withdraw Consent: Withdraw consent at any time

9.3 Additional Rights (California/CCPA)

• Know: Right to know what personal information is collected
• Delete: Right to request deletion
• Opt-Out: Right to opt out of sale (we do not sell data)
• Non-Discrimination: Right not to be discriminated against

To exercise your rights, contact: privacy@dynamanic.io

10. Cookies and Tracking

10.1 Types of Cookies We Use

• Essential Cookies: Required for Service functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings

10.2 Your Choices

• Browser settings can block cookies
• Our cookie consent banner allows granular control
• Note: Blocking essential cookies may impair Service functionality

11. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children. If you believe we have collected such data, contact us immediately.

12. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via:
- Email notification
- Prominent notice on the Service
- At least 30 days before changes take effect

14. Contact Us

For privacy questions or to exercise your rights:

Data Protection Officer
Dynamanic LLC
Dynamanic LLC — registered mailing address available on request via legal@dynamanic.io

Email: privacy@dynamanic.io
Website: https://caselens.dynamanic.io

EU Representative (if applicable): Contact us for details

This Privacy Policy is incorporated into and subject to our Terms of Service.