Privacy Policy

Data controller

Dynaminds (B2B.net S.A.) — dpo@dynaminds.pl

Data we process

• Account: email, name, organization membership
• Tickets: title, description, comments, attachments you submit
• Technical: IP (transit only, not stored), browser type (crash reports)

Your rights (RODO / GDPR)

• Access (Art. 15) — a copy of all data we hold about you
• Rectification (Art. 16) — correct inaccurate data
• Erasure (Art. 17) — deletion; tickets anonymized to preserve others' data
• Portability (Art. 20) — export your data as JSON
• Object (Art. 21) — opt out of non-essential processing

Submit requests to dpo@dynaminds.pl. We respond within 30 days.

Sub-processors (EU-hosted, under DPA)

• Supabase — database (Frankfurt)
• Microsoft (Azure / M365) — email (EU tenant)
• Hetzner Cloud — servers (Nuremberg)
• Cloudflare — CDN + WAF (global edge)
• Sentry — error tracking (Frankfurt)

Retention

• Active tickets: while account is active
• Closed tickets: archived after 1 year, anonymized after 3 years
• Audit log: 2 years · Backups: up to 30 days · Sentry events: 90 days

Cookies

Only essential cookies (authentication session). No tracking, analytics, or advertising.