Legal

Privacy Policy

Last updated: November 2026

Draft — requires legal review. This page is a working template, not executed legal advice. Do not rely on it for a live commercial agreement until counsel has reviewed it.

1. Scope

This policy covers the dicimint marketing site and hosted service. Self-hosted deployments are governed by the operator's own policy.

2. Data we collect

3. Why we process it

To provide the service, secure it, support customers, bill correctly, meet legal obligations and improve the product. We do not sell personal data.

4. Legal bases

Where GDPR applies, we rely on contract performance, legitimate interests (security and product improvement), consent (optional analytics) and legal obligation (tax and accounting).

5. Retention

Workspace content is retained while the workspace is active and for the deletion window stated in the DPA. Audit and billing records may be retained longer where required by law. AI prompts and outputs follow the retention configured for the deployment.

6. Subprocessors

We use a small set of providers for hosting, storage, email, payments and error tracking. The current list with purposes and locations is available with the DPA.

7. Your rights

Subject to law, you may request access, correction, export, deletion, restriction or objection. Workspace owners can export projects and manage members directly. Requests: hello@dicimint.com.

8. Cookies

The product uses strictly necessary session cookies. The marketing site defaults to cookie-free analytics. If a cookie-based tool is enabled, a consent banner is shown first.

9. Security

See the security page for controls, isolation, backups and incident response.

10. Contact

Privacy questions: hello@dicimint.com.

Questions about this document: hello@dicimint.com.