# Privacy Policy

> Version 2.0, effective February 2026. Region: United States and the rest of the world.

Canonical URL: https://platformpilot.ai/privacy-policy
Other region: https://platformpilot.ai/privacy-policy?region=EUROPE

DynG AI (acronym of Dynamic Graph of AI Agents) is an AI-first software company building autonomous tools that help customers engineers manage, monitor, and optimise cloud infrastructure. We develop and apply agentic AI techniques for platform engineering capabilities, and deliver these through PlatformPilot.ai.

This Privacy Policy explains how we collect, use, disclose, and process your personal data when you use our website and other places where DynG AI acts as a data controller. For example, when you interact with PlatformPilot.ai or other products as a consumer for personal use ("Services") or when DynG AI operates and provides our commercial customers and their end users with access to our commercial products, such as the PlatformPilot Teams and PlatformPilot Enterprise plans ("Commercial Services").

This Privacy Policy does not apply where DynG AI acts as a data processor and processes personal data on behalf of commercial customers using DynG AI's Commercial Services. For example, your employer has provisioned you a PlatformPilot Organisation account, or you're using an application that is powered on the back-end with PlatformPilot. In those cases, the commercial customer is the controller, and you can review their policies for more information about how they handle your personal data.

This Privacy Policy also describes your privacy rights. More information about your rights, and how to exercise them, is set out in Section 4 ("Rights and Choices").

Please read our [Cookie Policy](https://platformpilot.ai/privacy-policy) for information about how we use cookies and similar technologies.

## 1. Collection of Personal Data

We collect the following categories of personal data:

### Personal data you provide to us directly

**Identity and Contact Data:** DynG AI collects identifiers, including your name, email address, and phone number when you sign up for a PlatformPilot account, or to receive information on our Services. We may also collect or generate indirect identifiers (e.g., "USER12345").

**Payment Information:** We collect your payment information if you choose to purchase access to PlatformPilot's products and services. Payments are processed through Stripe.

**Inputs and Outputs:** You are able to interact with our Services by providing infrastructure configurations, monitoring data, queries, commands, policies, and specifications ("Inputs"), which generate recommendations, analysis reports, alerts, dashboards, insights, and configurations ("Outputs"). Our Services may also execute autonomous platform engineering operations on your behalf ("Actions"), including infrastructure provisioning, CI/CD orchestration, observability configuration, security enforcement, incident response, cost optimisation, and other platform engineering capabilities. If you include personal data in your Inputs, we will collect that information and it may be reproduced in your Outputs. Inputs, Outputs, and Action logs collectively are "Platform Materials".

**Feedback on your use of our Services:** We appreciate feedback, including ideas and suggestions for improvement or rating an Output or Action ("Feedback"). If you rate an Output or Action (for example, by using a feedback mechanism), we will store the entire related session as part of your Feedback.

**Communication Information:** If you communicate with us, we collect your name, contact information, and the contents of any messages you send.

### Personal data we receive automatically from your use of the Services

When you use the Services, we also receive certain technical data automatically (described below, collectively "Technical Information"). This includes:

**Device and Connection Information.** Consistent with your device or browser permissions, your device or browser automatically sends us information about when and how you install, access, or use our Services. This includes information such as your device type, operating system information, browser information and web page referers, mobile network, connection information, mobile operator or internet service provider (ISP), time zone setting, IP address (including information about the location of the device derived from your IP address), identifiers (including device or advertising identifiers, probabilistic identifiers, and other unique personal or online identifiers), and device location.

**Usage Information.** We collect information about your use of the Services, such as the dates and times of access, browsing history, search, information about the links you click, pages you view, and other information about how you use the Services, and technology on the devices you use to access the Services.

**Log and Troubleshooting Information.** We collect information about how our Services are performing when you use them. This information includes log files. If you or your device experiences an error, we may collect information about the error, the time the error occurred, the feature being used, the state of the application when the error occurred, and any communications or content provided at the time the error occurred.

**Cookies and Similar Technologies.** We and our service providers use cookies, scripts, or similar technologies ("Cookies") to manage the Services and to collect information about you and your use of the Services. These technologies help us to recognise you, customise or personalise your experience, market additional products or services to you, and analyse the use of our Services to make them safer and more useful to you.

### Personal data we collect or receive to train our models

DynG AI obtains personal data from the following sources in order to train and improve our models:

Data that our users provide, including Inputs and Outputs from our Services (unless users opt out)

Feedback that users explicitly provide about our Services

Materials flagged for safety, security, or policy review

Data that we generate internally

## 2. Uses of Personal Data Permitted Under Applicable Data Protection Laws

We use your personal data for the following purposes:

To provide, maintain, and facilitate any products and services offered to you with respect to your PlatformPilot account.

To provide, maintain, and facilitate optional services and features that enhance platform functionality and user experience.

To communicate with you, including to send you information about our Services and events.

To create and administer your PlatformPilot account.

To facilitate payments for products and services provided by PlatformPilot.

To prevent and investigate fraud, abuse, and violations of our policies, unlawful or criminal activity, unauthorised access to or use of personal data or DynG AI systems and networks, to protect our rights and the rights of others, and to meet legal, governmental and institutional policy obligations.

To investigate and resolve disputes.

To investigate and resolve security issues.

To debug and to identify and repair errors that impair existing functionality.

To improve the Services and conduct research, including training our models.



We may use your Inputs and Outputs to train our models and improve our Services, unless you opt out through your account settings. Even if you opt out, we will use Inputs and Outputs for model improvement when: (1) your materials are flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance AI safety research, or (2) you've explicitly reported the materials to us (for example via our feedback mechanisms).

## 3. How We Disclose Personal Data

DynG AI will disclose personal data to the following categories of third parties for the purposes explained in this Policy:



**Affiliates and corporate partners.** DynG AI discloses the categories of personal data described above between and among its affiliates and related entities, including PLATFORMPILOT LIMITED (our European affiliate).



**Service providers and business partners.** DynG AI may disclose the categories of personal data described above with service providers and business partners for a variety of business purposes, including website and data hosting, payment processing (Stripe), ensuring compliance with industry standards, research, auditing, data processing, and providing you with the Services.



DynG AI may also disclose personal data in the following circumstances:



**As part of a significant corporate event.** If DynG AI is involved in a merger, corporate transaction, bankruptcy, or other situation involving the transfer of business assets, DynG AI will disclose your personal data as part of these corporate transactions.



**Third-Party Websites and Services.** Our Services may involve integrations with, or may direct you to, websites, apps, and services managed by third parties, including cloud providers such as Google Cloud Platform, Amazon Web Services, and Microsoft Azure. By interacting with these third parties, you are providing information directly to the third party and not DynG AI, and such information is subject to the third party's privacy policy.



**Pursuant to regulatory or legal requirements, safety, rights of others, and to enforce our rights or our terms.** We may disclose personal data to governmental regulatory authorities as required by law, including for legal, tax or accounting purposes, in response to their requests for such information or to assist in investigations.



**With an individual's consent.** DynG AI will otherwise disclose personal data when an individual gives us permission or directs us to disclose this information, including as a part of our Services.



**Sale and targeted advertising.** DynG AI does not "sell" your personal data as that term is defined by applicable laws and regulations. You can opt out of sharing your personal data for targeted advertising to promote our products and services by emailing [privacy@dyng.ai](mailto:privacy@dyng.ai), and we will honour global privacy controls.

## 4. Rights and Choices

Depending on where you live and the laws that apply in your country of residence, you may enjoy certain rights regarding your personal data, as described further below. We may also decline a request if we have a lawful reason for doing so. That said, we strive to prioritise the protection of personal data, and comply with all applicable privacy laws.



To exercise your rights, you or an authorised agent may submit a request by emailing us at [privacy@dyng.ai](mailto:privacy@dyng.ai). After we receive your request, we may verify it by requesting information sufficient to confirm your identity.



**Right to know:** the right to know what personal data DynG AI processes about you, including the categories of personal data, the categories of sources from which it is collected, the business or commercial purposes for collection, and the categories of third parties to whom we disclose it.

**Access and data portability:** the right to request a copy of the personal data DynG AI processes about you, subject to certain exceptions and conditions. In certain cases and subject to applicable law, you have the right to port your information.

**Deletion:** the right to request that we delete personal data collected from you when you use our Services, subject to certain exceptions. You also are able to delete individual sessions, which will be removed immediately from your session history and automatically deleted from our back-end within 30 days.

**Correction:** the right to request that we correct inaccurate personal data DynG AI retains about you, subject to certain exceptions.

**Objection:** the right to object to processing of your personal data, including profiling conducted on grounds of public or legitimate interest.

**Restriction:** the right to restrict our processing of your personal data in certain circumstances.

**Withdrawal of consent:** Where DynG AI's processing of your personal data is based on consent, you have the right to withdraw your consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

**Automated decision-making:** DynG AI does not engage in decision making based solely on automated processing or profiling in a manner which produces a legal effect or significantly affects you in a similar way. AI recommendations and autonomous Actions require user-configured approval workflows.

## 5. Data Transfers

When you access our website or Services, your personal data may be transferred to our servers in the US, or to other countries. This may be a direct provision of your personal data to us, or a transfer that we or a third party make.



Where information is transferred outside your country of residence, we ensure it benefits from an adequate level of data protection by relying on:

**Adequacy decisions.** Where they exist and recognise that a country offers an adequate level of data protection.

**Standard contractual clauses.** Approved contractual clauses that allow companies to transfer data internationally while maintaining appropriate data protection standards.



In certain situations, we rely on derogations provided for under applicable data protection law to transfer information to a third country.

## 6. Data Retention, Data Lifecycle, and Security Controls



### Retention

DynG AI retains your personal data for as long as reasonably necessary for the purposes and criteria outlined in this Privacy Policy.



**Retention Periods:**

Account data: Duration of account + 90 days after account closure

Transaction records: 7 years (tax and accounting compliance)

Marketing consent: Until consent is withdrawn

Support communications: 3 years after case closure

Security logs: 12 months

Platform Materials (Inputs, Outputs, Action logs): Duration of account, unless deleted by user



When the personal data collected is no longer required by us, we and our service providers will perform the necessary procedures for destroying, deleting, erasing, or converting it into an anonymous form as permitted or required under applicable laws.

### Aggregated or de-identified information

We may process personal data in an aggregated or de-identified form to analyse the effectiveness of our Services, conduct research, study user behaviour, and train our AI models as permitted under applicable laws. For instance:

When you submit Feedback, we disassociate Inputs and Outputs from your user ID to use them for training and improving our models.

If our systems flag Inputs or Outputs for potentially violating our Acceptable Use Policy, we disassociate the content from your user ID to train our trust and safety internal classification and generative models.

To improve user experience, we may analyse and aggregate general user behaviour and usage data. This information does not identify individual users.

### Security controls relating to our processing of personal data

We implement appropriate technical and organisational security measures designed to protect personal data from loss, misuse, and unauthorised access, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit (TLS) and at rest (AES-256)

Regular security assessments and monitoring

Multi-factor authentication and role-based access controls

Employee training on data protection

Incident response and breach notification procedures

## 7. Children

Our Services are not directed towards, and we do not knowingly collect, use, disclose, sell, or share any information from children under the age of 18. If you become aware that a child under the age of 18 has provided any personal data to us while using our Services, please email us at [privacy@dyng.ai](mailto:privacy@dyng.ai) and we will investigate the matter and, if appropriate, delete the personal data.

## 8. Changes to Our Privacy Policy

DynG AI may update this Privacy Policy from time to time. We will notify you of any material changes to this Privacy Policy, as appropriate, and update the Effective Date at the top of this page.

## 9. Contact Information

If you live in the European Economic Area (EEA), UK, or Switzerland (the "European Region"), the data controller responsible for your personal data is PLATFORMPILOT LIMITED with a registered address at 45 Cedar Grove, Ridgewood, Swords, Dublin, K67 P2K1 (Ireland).



If you live outside the European Region, the data controller responsible for your personal data is DynG AI, Inc.



If you have any questions about this Privacy Policy, or have any questions, complaints or requests regarding your personal data, you can reach us via our [contact page](https://platformpilot.ai/contact) or as described below:



**DynG AI, Inc.**
2261 Market Street #22479
San Francisco, CA 94114
United States

**Email:** [privacy@dyng.ai](mailto:privacy@dyng.ai)
**Data Protection Officer:** [dpo@dyng.ai](mailto:dpo@dyng.ai)



Please note that under many countries' laws, you have the right to lodge a complaint with the supervisory authority in the place in which you live or work.
