Privacy Policy

It applies to the Dynamic AI web app and progressive web app, and to the optional local mail sync agent you may run on your own computer.

• Account information — your email address and authentication details, used to sign you in and separate your workspace from everyone else's.
• Content you add — documents, spreadsheets, PDFs, images, website pages and email messages that you upload, sync or import. We also store extracted text and numeric embeddings of that text so search can work.
• Contact details found in your content — names, email addresses and companies extracted from your own messages and documents to build your CRM.
• Connection credentials — OAuth tokens and mail agent keys, stored encrypted and never shown back to you or to anyone else.
• Basic technical logs — errors and request metadata needed to keep the service running.

We do not collect data from your computer screen, your browser history, or any application you have not explicitly connected.

If you connect Google Drive, we request read-only access to files. We use it only to: list your folders and files so you can choose what to add, and download the specific files you tick so their text can be indexed for search inside your workspace.

We never browse, download or index Drive files you have not selected. You can disconnect Google at any time from the Connections page, which deletes the stored tokens; you can also revoke access at myaccount.google.com/permissions.

Limited Use commitment. Dynamic AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not use it to train generalised AI or machine-learning models. Humans do not read your Google data except where you ask us to for support, where it is needed for security, or where the law requires it.

If you run the local mail sync agent, it connects to your mailbox with credentials that stay on your own machine. It sends message text and headers to your workspace over an encrypted connection, authenticated with an agent key you generate and can revoke.

Your content is used only to provide the service to you: to index it for search, to build your contact list, and to generate answers and drafts that you request. Text you ask about is sent to our AI model providers to produce the answer for that request. Your content is never used to train our models or anyone else's, and is never sold or shared with advertisers.

Data is stored in a managed PostgreSQL database with row-level security, so every row is scoped to your account and cannot be read by another user. Connection credentials are encrypted with AES-256-GCM before storage. Traffic is encrypted in transit with TLS. Servers are operated by our cloud provider and may be located outside South Africa; by using the service you consent to this transfer, which we consider adequately protected under POPIA.

We keep your content until you delete it or close your workspace. Deleting a document removes its text and embeddings. If you ask us to delete your account, we remove your workspace data within 30 days, apart from backups that expire on their own schedule.

Under POPIA and the GDPR you may request access to, correction of, or deletion of your personal information, and you may object to processing. Contact us and we will respond within a reasonable period.

The service is intended for business use and is not directed at children under 18.

If we materially change this policy we will update the date above and, where the change affects how your data is used, notify you in the app.

Questions or requests: gustav@kjbprojects.co.za