Privacy Policy

Last updated: 15 October 2026

1. What data we collect

• From the “Talk to us” form: your work email and, if you provide them, your company name and a contact phone number. We deliver them to hello@dinami.ai through our email provider (Resend). We also keep the request’s IP address in the server’s memory for up to 10 minutes, only to limit bulk requests.
• Technical data: IP address, device and browser type, logged by our servers for security and operation.
• Data inside the DCashflow app: whatever our customer enters (balances, invoices, payments, taxes, loans, bank transactions) and the details of their users (name, email, role).

2. Purposes and legal bases

• Contact, intro call and quote: to respond to your request, as steps prior to entering into a contract (Article 6(1)(b) GDPR).
• Providing the service: running accounts, inviting members and sending access emails, to perform the contract (Article 6(1)(b)).
• Security and abuse prevention: based on our legitimate interest (Article 6(1)(f)).
• Tax and accounting obligations: invoicing and record-keeping, as a legal obligation (Article 6(1)(c)).

3. Our customers’ data inside the app

For the financial data a business enters into DCashflow, the business itself is the data controller and DINAMI.AI acts as a data processor, under the contract and the data processing agreement we sign with it. Every customer has its own separate database, access is by invitation and role only, and every change is recorded in an audit log.

Connections the customer switches on. With AADE’s myDATA, once the customer’s admin enters the company’s access keys, the app only reads income, expenses, VAT and documents, and never transmits anything to AADE. The access keys are stored encrypted (AES-256). With DINAMI.AI’s Logistirio, for companies that keep their books there and once the link is switched on, the app reads the cash-book and bank account balances and the categories of transactions.

4. Who we share it with

We do not sell data. We share it only with partners who help us provide the service, acting as processors under contractual safeguards:

• hosting and infrastructure providers,
• an email delivery provider (Resend, Inc., USA), for access messages and for contact-form messages,
• an open banking (PSD2) provider, Enable Banking Oy (Finland), only when the customer enables a bank connection.

The website loads nothing from third parties and uses no cookies; see the Cookie Policy.

Resend, Inc. is certified under the EU-U.S. Data Privacy Framework, so the transfer to the USA relies on the European Commission’s adequacy decision of 10 July 2023 (Article 45 GDPR), supplemented by the standard contractual clauses in our data processing agreement. Any other transfer outside the European Economic Area relies on the European Commission’s standard contractual clauses (Article 46 GDPR).

5. How long we keep it

We keep form data for up to 12 months from our last contact and delete it if no collaboration follows. We keep server logs for up to 30 days. We keep app data for the duration of the contract with the customer and then return or delete it as the contract provides, unless the law requires otherwise.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Write to us at dpo@dinami.ai. We reply free of charge within 30 days, extendable to 60 days for complex requests after letting you know. If you believe your rights are being infringed, you may lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, tel. +30 210 6475600, www.dpa.gr).

We do not make decisions based solely on automated processing, including profiling (Article 22 GDPR). DCashflow’s forecasts are a tool for the user and produce no legal effects for you.

7. Security

We apply technical and organizational measures: a separate database per customer, invitation-only access, roles per company, encrypted connections and an audit log of changes.

8. Changes

If this policy changes, we will update the date at the top of this page and, for material changes, notify our customers.