Privacy policy

Last updated : July 20, 2026

DinMo understands that protecting personal data and privacy is important to visitors of our website and users of the DinMo application. This Privacy Policy explains separately how DinMo processes data in connection with its public website and its application.

1. Website privacy

What personal data does DinMo collect through its website?

When you visit the DinMo website, contact us, register for a newsletter, download a resource, or request a demo, we may collect information that you voluntarily provide, such as your first name, last name, email address, company name, job title and the contents of your message.

We may also collect technical and usage information generated when you browse the website, including your IP address, browser and device information, cookie identifiers, pages viewed, and browsing activity.

How does DinMo use website data?

We use website data to:

operate, secure and improve the website;
respond to requests and messages;
provide requested resources or demonstrations;
send newsletters and editorial communications when permitted;
measure website traffic and improve website performance; and
send business communications and marketing messages in accordance with applicable law and your preferences.

We use non-essential cookies and similar technologies only in accordance with applicable law and the choices made through our cookie banner. Further information is provided in our Cookie Policy.

Who receives website data?

DinMo does not sell personal data. We may share website data with service providers that help us operate the website and communicate with users, such as email, CRM, analytics, cookie-management and website-support providers. These providers may process personal data only for the purposes described in this Privacy Policy and under appropriate confidentiality and data-protection obligations.

Depending on the tools enabled on the website, these providers may include HubSpot and Google Analytics. Website analytics and marketing tools are separate from Google user data obtained through OAuth in the DinMo application.

We may also disclose website data where required by law or where reasonably necessary to protect DinMo, our users, our customers or other persons.

How long does DinMo keep website data?

Retention periods depend on the purpose of processing:

customer-account, order, billing and payment records may be retained for up to ten years after the end of the relevant contractual relationship where required for legal or accounting purposes;
newsletter recipients who have not opened emails for more than one year may be removed from our recipient lists during our annual list review; and
browsing and analytics data is configured to be retained for no longer than thirteen months, unless a longer period is required by law or necessary for security purposes.

2. DinMo application privacy

What data does DinMo process in the application?

When you use the DinMo application, DinMo may process:

account and authentication information, such as your name, email address and organization;
workspace, configuration and permission information, such as workspace membership, roles, table and column names, models, segments and synchronization settings;
connection information, including database credentials, API keys and OAuth tokens required to connect services;
technical information, logs and security events required to operate, secure and troubleshoot the application; and
customer data that a DinMo customer chooses to process through the application.

For customer data processed through the application, the DinMo customer generally determines the purposes and means of processing and acts as the data controller. DinMo acts as a processor or service provider and processes that data only to provide the contracted services and as instructed by the customer.

Google user data

When a user connects a Google account to the DinMo application, DinMo accesses only the Google user data required by the permissions shown in the Google consent screen.

For Google Sign-In, this may include the user's name, email address, profile information and unique Google account identifier. DinMo does not access Gmail, Google Drive, Google Calendar, Google Contacts or other Google services unless the relevant permission is specifically requested and disclosed to the user.

Google user data is used only to authenticate users, create and manage DinMo accounts, provide the requested application functionality, maintain service security, and improve user-facing functionality.

DinMo does not sell Google user data and does not use it for targeted advertising, retargeting, personalized advertising, data brokerage, information resale, creditworthiness decisions, lending purposes, or training generalized artificial-intelligence models.

Google user data is shared only with service providers necessary to provide authentication and the requested application functionality. It is not transferred to advertising platforms or data brokers.

How does DinMo protect application data and Google user data?

DinMo maintains technical and organizational safeguards designed to protect application data and Google user data against unauthorized access, alteration, disclosure or destruction. These safeguards include:

role-based access controls that restrict access to authorized users and personnel;
least-privilege configuration, allowing DinMo to access only the data and database objects required for the configured service;
secure authentication, including Single Sign-On where enabled by the customer;
controlled network access between DinMo and customer infrastructure;
secure storage of customer database credentials and OAuth tokens using a key-management system backed by a hardware security module;
hashing of personal data, such as email addresses and phone numbers, before transmission to supported third-party destinations where applicable; and
limited and temporary processing of customer data, with automatic purging after successful delivery where applicable.

DinMo does not sell application data or Google user data. Google user data is not used for advertising or transferred to advertising platforms.

Application service providers and sub-processors

DinMo uses carefully selected service providers and sub-processors to operate and secure the application. Depending on the services and configuration used, these may include:

Firebase / Google: Google authentication and access management. Data potentially processed: account and authentication information.
Google Cloud Platform: cloud infrastructure, computing, storage and security. Data potentially processed: application data, technical data and temporary processing data.
Amazon Web Services: cloud infrastructure for customers who select AWS. Data potentially processed: application data, technical data and temporary processing data.
Datadog: system monitoring and security. Data potentially processed: technical logs, performance data and security events.

DinMo requires its service providers and sub-processors to comply with applicable data-protection and confidentiality obligations. The list must be kept current. A provider should be listed in this section only if it can actually receive or process application data or Google user data.

How long does DinMo keep application data?

DinMo retains application data only for as long as necessary to provide the service, maintain security, comply with legal obligations and resolve disputes.

Customer data is generally purged after it has been successfully written to the configured destination and is typically retained for less than eight hours.
Temporary data used for integration, event or transformation processing is typically deleted within twenty-four hours.
In limited cases, including a destination outage or initial schema processing for data blocking or hashing, data may be retained for up to thirty days before automatic deletion.
Customer access keys, database credentials and OAuth tokens are retained for the duration of the relevant connection or service and are deleted or revoked when they are no longer required, subject to applicable legal obligations.
Workspace and configuration metadata may be retained for the duration of the relevant service.

Users may request deletion of their personal data and application data by contacting privacy@dinmo.com. Users may also revoke DinMo's access through their Google Account security settings. Customer data processed on behalf of a DinMo customer may also be deleted or returned according to the customer's instructions and contractual terms.

3. Your rights and contact information

Depending on applicable law, users may have rights to access, correct, delete, restrict or port their personal data, and to object to certain processing activities. Requests may be submitted by email to privacy@dinmo.com or by mail to:

DinMo
60 rue François Premier
75008 Paris
France

DinMo will process requests within the time required by applicable law. We may request information reasonably necessary to verify the identity of the requester.